Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6MAk4esXDjl1gsa0fkUvAPmK22c.roa
File: 6MAk4esXDjl1gsa0fkUvAPmK22c.roa (raw, json)
Hash identifier: lrjDeJbHf2Km3j3Cq2Zy6XolNaM3Em2XU91hEf4KC/s=
Subject key identifier: E8:C0:24:E1:EB:17:0E:39:75:82:C6:B4:7E:45:2F:00:F9:8A:DB:67
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0183C3854DBB05170181D000F0B275CAB648
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6MAk4esXDjl1gsa0fkUvAPmK22c.roa
Signing time: Mon 10 Oct 2022 20:10:36 +0000
ROA not before: Mon 10 Oct 2022 20:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 94.241.136.0/21 maxlen: 24
94.241.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c3:85:4d:bb:05:17:01:81:d0:00:f0:b2:75:ca:b6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 10 20:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8c024e1eb170e397582c6b47e452f00f98adb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ba:cb:60:e5:a9:36:7e:15:5d:95:df:90:cf:
b8:c4:cc:5b:f6:c5:c0:c6:e1:0e:c8:4f:48:10:6e:
58:41:7a:c6:38:d1:d4:ee:cd:84:90:c9:ff:ce:02:
f7:16:c7:a5:fe:4c:39:fa:03:c8:9e:89:3d:79:e6:
9b:ae:4a:b9:7b:b9:44:a9:a1:12:f0:32:bb:96:b4:
fd:11:da:76:5f:cd:96:71:05:f4:aa:ef:8e:46:90:
a5:1f:1a:54:5d:fc:9c:ac:20:ba:41:cf:9f:64:8b:
20:7e:cd:98:3d:b2:d9:97:45:4f:6b:ad:2c:ae:ff:
d5:68:d0:35:4f:cd:2b:ce:76:77:1b:ba:c8:0e:63:
33:eb:64:13:5e:4e:4a:41:f9:a6:51:b9:51:2a:38:
c1:ee:7f:58:81:f1:4e:b1:dc:1b:66:2b:f1:8b:29:
b5:77:35:af:0c:4c:72:00:b8:24:5c:a7:b8:15:07:
71:bc:be:cf:e1:d7:d3:3a:6c:27:7e:7f:f2:ad:6a:
81:84:d3:5e:db:19:53:28:bc:ed:b5:0f:2a:f0:6d:
54:24:ee:a3:96:25:c4:51:13:f8:75:ba:3c:a6:22:
52:d2:8a:1e:e4:5a:4a:5c:ce:bf:f1:8c:62:bf:f9:
09:3e:3e:e7:17:12:1d:80:36:eb:f6:33:57:a8:b2:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C0:24:E1:EB:17:0E:39:75:82:C6:B4:7E:45:2F:00:F9:8A:DB:67
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6MAk4esXDjl1gsa0fkUvAPmK22c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.136.0/21
94.241.164.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e2:cb:d5:6c:45:43:13:50:ba:6e:70:63:82:fa:d6:80:55:
df:7a:da:1f:73:7b:dc:91:88:88:3a:2f:87:86:73:b5:4b:e9:
44:fc:f7:0c:f9:8c:9e:ea:f4:40:00:ac:21:45:7d:9c:02:fe:
e9:9d:4b:ca:ce:e7:05:5e:ec:84:a5:96:96:e2:ce:ec:4a:5b:
18:2e:e9:13:d4:0e:89:7d:b0:15:19:c5:0f:cd:35:d9:35:f0:
99:11:a4:f5:7d:e0:91:9f:88:bb:f7:6e:eb:cb:f3:60:c0:c6:
0d:e9:13:3e:93:65:15:06:6e:e4:9e:ab:6c:f1:54:1f:81:3a:
99:f6:91:76:2e:fd:0b:b6:f3:6a:59:3f:68:e9:60:bf:20:cd:
d0:de:d1:64:7e:d8:3a:a7:83:65:e9:09:ff:66:af:a0:ee:2d:
2a:27:9e:92:01:43:39:83:ca:d1:3e:17:cf:80:df:0d:66:59:
ba:7c:5a:5f:e6:10:be:ec:c5:f7:f4:53:2e:f1:f0:7d:93:18:
57:cd:a2:3d:4e:d1:4f:5f:48:cb:a0:ca:30:24:28:c0:d0:ce:
65:3b:27:b8:c2:63:77:2f:43:34:96:46:79:26:c4:11:29:7e:
9c:29:02:7c:94:1f:e3:62:1e:64:98:64:f2:5f:ba:18:c7:eb:
d0:51:ee:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPDhU27BRcBgdAA8LJ1yrZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjIxMDEwMjAxMDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGMwMjRlMWViMTcwZTM5NzU4MmM2YjQ3ZTQ1MmYwMGY5OGFkYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibrLYOWpNn4VXZXfkM+4xMxb9sXA
xuEOyE9IEG5YQXrGONHU7s2EkMn/zgL3Fsel/kw5+gPInok9eeabrkq5e7lEqaES
8DK7lrT9Edp2X82WcQX0qu+ORpClHxpUXfycrCC6Qc+fZIsgfs2YPbLZl0VPa60s
rv/VaNA1T80rznZ3G7rIDmMz62QTXk5KQfmmUblRKjjB7n9YgfFOsdwbZivxiym1
dzWvDExyALgkXKe4FQdxvL7P4dfTOmwnfn/yrWqBhNNe2xlTKLzttQ8q8G1UJO6j
liXEURP4dbo8piJS0ooe5FpKXM6/8Yxiv/kJPj7nFxIdgDbr9jNXqLIsuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOjAJOHrFw45dYLGtH5FLwD5ittnMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvNk1BazRlc1hEamwxZ3NhMGZrVXZBUG1LMjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXvGIAwQB
XvGkMA0GCSqGSIb3DQEBCwUAA4IBAQBC4svVbEVDE1C6bnBjgvrWgFXfetofc3vc
kYiIOi+HhnO1S+lE/PcM+Yye6vRAAKwhRX2cAv7pnUvKzucFXuyEpZaW4s7sSlsY
LukT1A6JfbAVGcUPzTXZNfCZEaT1feCRn4i7927ry/NgwMYN6RM+k2UVBm7knqts
8VQfgTqZ9pF2Lv0LtvNqWT9o6WC/IM3Q3tFkftg6p4Nl6Qn/Zq+g7i0qJ56SAUM5
g8rRPhfPgN8NZlm6fFpf5hC+7MX39FMu8fB9kxhXzaI9TtFPX0jLoMowJCjA0M5l
Oye4wmN3L0M0lkZ5JsQRKX6cKQJ8lB/jYh5kmGTyX7oYx+vQUe7x
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org