Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/ajEqxxBKWBvP_gkWtaBNmo2TTwU.roa
File: ajEqxxBKWBvP_gkWtaBNmo2TTwU.roa (raw, json)
Hash identifier: WyporfddCmm8zRKfWcAkG1B6s1pYaI36Ohamai1Gbjs=
Subject key identifier: 6A:31:2A:C7:10:4A:58:1B:CF:FE:09:16:B5:A0:4D:9A:8D:93:4F:05
Certificate issuer: /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial: 066BD1E2
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/ajEqxxBKWBvP_gkWtaBNmo2TTwU.roa
Signing time: Sat 01 Jan 2022 16:05:10 +0000
ROA not before: Sat 01 Jan 2022 16:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20571
IP address blocks: 217.169.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107729378 (0x66bd1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Validity
Not Before: Jan 1 16:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a312ac7104a581bcffe0916b5a04d9a8d934f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2a:08:2e:1e:0f:f9:44:e1:3d:4c:8a:0e:c1:
03:f5:66:b8:1f:a2:b8:b7:ec:3e:f9:13:c7:e7:52:
17:2f:17:7b:63:f2:cf:5b:d9:95:84:e1:e5:47:13:
b2:1a:b2:c5:64:fa:ba:ef:90:db:91:86:b0:f6:f5:
07:82:c9:28:14:3c:7b:0f:98:ae:a0:e4:50:d9:d1:
a2:ef:da:17:08:01:0d:1b:a8:30:8f:59:c3:67:68:
81:9a:7b:bb:57:38:c6:96:82:11:a4:14:2b:43:8e:
00:1b:3d:05:ae:97:0e:46:a9:f4:e5:aa:b9:24:92:
fa:ef:06:45:b8:06:8f:f2:f0:b3:35:5c:09:8d:07:
52:7b:24:68:87:4b:75:94:b3:36:aa:23:f4:7e:e3:
07:3f:73:24:a3:1a:92:b4:f7:0b:4d:bd:54:94:7f:
b3:7e:0b:eb:57:7e:ce:1c:e7:6f:cf:d0:fd:ff:07:
87:81:02:4f:73:6e:14:e0:45:8f:0e:a4:49:7e:30:
ea:6f:ee:76:00:7e:18:47:ff:76:b5:89:5e:63:2d:
30:9a:9c:77:7c:40:ef:0d:b0:fb:45:32:65:79:84:
5b:26:f4:4d:fa:3e:77:ec:3f:73:06:93:17:58:09:
67:5f:40:73:79:3d:24:ae:d8:49:99:6b:9e:52:8b:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:31:2A:C7:10:4A:58:1B:CF:FE:09:16:B5:A0:4D:9A:8D:93:4F:05
X509v3 Authority Key Identifier:
keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/ajEqxxBKWBvP_gkWtaBNmo2TTwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.64.0/20
Signature Algorithm: sha256WithRSAEncryption
82:f9:0d:c1:94:1b:58:39:3e:87:b7:3d:ac:58:67:72:3d:63:
a0:85:f4:de:aa:9f:12:a1:b6:55:bd:37:79:cf:5f:97:79:5d:
ad:8f:4f:97:23:dc:c9:31:d9:70:37:2e:6d:b7:90:06:70:a0:
82:e9:40:a3:e7:31:1a:5a:e4:c4:e7:e9:36:34:1f:5a:44:a5:
57:c4:c0:0e:f1:51:5e:a4:2e:4e:4b:26:1e:63:63:50:d4:91:
4f:60:0c:06:68:44:86:c9:eb:e6:2f:48:3a:ba:2f:02:e5:41:
b3:4f:fe:2a:f5:19:8e:86:50:05:fd:a1:b7:17:e7:b7:e5:ed:
af:c9:1d:a5:83:d2:83:55:0f:32:81:88:f3:e5:ca:4f:57:bf:
ae:a4:8d:5d:1d:48:74:96:f5:4d:86:a5:7e:bb:0f:17:d7:ce:
4e:3b:45:e6:d9:23:d8:53:ae:a6:7d:27:68:1e:72:ed:b8:21:
b9:ee:ce:a3:8c:93:96:0e:d3:6a:7f:e5:43:37:74:16:3a:98:
d6:b2:05:64:2b:84:70:fb:ef:fc:cd:62:c9:3e:11:d2:12:5e:
e4:87:00:65:23:d8:ca:03:6a:0f:0a:aa:81:f2:99:a6:62:ef:
fe:60:e3:4e:b1:fe:d0:0e:e1:55:cf:d8:85:51:01:ce:38:be:
2d:24:d7:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBmvR4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
M2ZiZGJiMjBjMmQ5NzA3M2MwZGU4YjdjYWE3NWVjMWVlYjE5MWI4MB4XDTIyMDEw
MTE2MDUxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmEzMTJhYzcxMDRh
NTgxYmNmZmUwOTE2YjVhMDRkOWE4ZDkzNGYwNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANwqCC4eD/lE4T1Mig7BA/VmuB+iuLfsPvkTx+dSFy8Xe2Py
z1vZlYTh5UcTshqyxWT6uu+Q25GGsPb1B4LJKBQ8ew+YrqDkUNnRou/aFwgBDRuo
MI9Zw2dogZp7u1c4xpaCEaQUK0OOABs9Ba6XDkap9OWquSSS+u8GRbgGj/LwszVc
CY0HUnskaIdLdZSzNqoj9H7jBz9zJKMakrT3C029VJR/s34L61d+zhznb8/Q/f8H
h4ECT3NuFOBFjw6kSX4w6m/udgB+GEf/drWJXmMtMJqcd3xA7w2w+0UyZXmEWyb0
Tfo+d+w/cwaTF1gJZ19Ac3k9JK7YSZlrnlKLqF8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRqMSrHEEpYG8/+CRa1oE2ajZNPBTAfBgNVHSMEGDAWgBQz+9uyDC2XBzwN
6LfKp17B7rGRuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01fdmJzZ3d0bHdjOERlaTN5cWRld2U2eGtiZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvM2EzNjJkLTQxOTgtNGIwOC1iYjBhLWRiZTQxZmM4Mzk5ZS8x
L2FqRXF4eEJLV0J2UF9na1d0YUJObW8yVFR3VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
M2EzNjJkLTQxOTgtNGIwOC1iYjBhLWRiZTQxZmM4Mzk5ZS8xL01fdmJzZ3d0bHdj
OERlaTN5cWRld2U2eGtiZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNmpQDANBgkqhkiG9w0BAQsFAAOC
AQEAgvkNwZQbWDk+h7c9rFhncj1joIX03qqfEqG2Vb03ec9fl3ldrY9PlyPcyTHZ
cDcubbeQBnCggulAo+cxGlrkxOfpNjQfWkSlV8TADvFRXqQuTksmHmNjUNSRT2AM
BmhEhsnr5i9IOrovAuVBs0/+KvUZjoZQBf2htxfnt+Xtr8kdpYPSg1UPMoGI8+XK
T1e/rqSNXR1IdJb1TYalfrsPF9fOTjtF5tkj2FOupn0naB5y7bghue7Oo4yTlg7T
an/lQzd0FjqY1rIFZCuEcPvv/M1iyT4R0hJe5IcAZSPYygNqDwqqgfKZpmLv/mDj
TrH+0A7hVc/YhVEBzji+LSTXOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:55 2024 by rpki-client on console-fra.rpki-client.org