Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/6Cm0ugtIq5EghGSFkQCHZLKLBa8.roa
File: 6Cm0ugtIq5EghGSFkQCHZLKLBa8.roa (raw, json)
Hash identifier: pV/su5s9gc3NW+x+5wY2+VnekAlyOcjrYb58VkvicVs=
Subject key identifier: E8:29:B4:BA:0B:48:AB:91:20:84:64:85:91:00:87:64:B2:8B:05:AF
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 016A7B4F
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/6Cm0ugtIq5EghGSFkQCHZLKLBa8.roa
Signing time: Sat 01 Jan 2022 05:03:35 +0000
ROA not before: Sat 01 Jan 2022 05:03:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57944
IP address blocks: 91.236.250.0/24 maxlen: 24
91.236.248.0/24 maxlen: 24
91.236.248.0/22 maxlen: 24
91.236.251.0/24 maxlen: 24
2001:67c:440::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23755599 (0x16a7b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jan 1 05:03:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e829b4ba0b48ab912084648591008764b28b05af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:92:90:de:e1:41:4f:8a:c5:92:d9:64:af:
41:27:7a:d8:c3:ae:4b:56:cf:07:ba:fc:63:38:68:
a8:10:e7:d1:21:b1:eb:3b:5a:d6:af:a7:0f:f3:18:
f7:cb:50:57:92:52:70:95:2c:ed:56:83:38:e2:f3:
50:8a:1a:e9:8b:02:3f:c7:ca:01:9f:3d:15:b8:16:
39:66:02:b4:b0:a6:80:00:e2:13:13:90:df:f3:8d:
78:c9:35:86:4a:80:01:61:b9:f6:bb:9e:78:9a:32:
1c:46:d1:08:f6:8e:9f:09:76:86:c1:3c:84:96:d9:
a8:af:d2:fb:39:93:f7:6e:92:8c:49:d1:5b:a8:19:
29:1c:c9:3b:60:1b:bb:67:97:cc:80:ed:d6:d0:96:
66:39:ca:2e:7f:47:fc:84:36:b3:d7:cb:da:3d:cf:
35:79:f8:cb:c6:5b:54:4d:43:29:3f:16:c8:ac:12:
47:aa:a4:01:c4:d1:90:65:ee:19:21:6e:ad:6b:cf:
51:3c:5e:e6:1a:59:45:26:d3:9e:7e:b1:ae:7b:5f:
da:7e:d1:ba:12:4d:be:4c:16:b9:a7:9f:9e:fb:6f:
91:38:0a:63:dd:de:01:4c:7a:0b:e8:29:a1:7c:1b:
06:87:8e:9e:b3:59:c8:3d:e2:35:a7:cb:09:e4:8f:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:B4:BA:0B:48:AB:91:20:84:64:85:91:00:87:64:B2:8B:05:AF
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/6Cm0ugtIq5EghGSFkQCHZLKLBa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.248.0/22
IPv6:
2001:67c:440::/48
Signature Algorithm: sha256WithRSAEncryption
46:32:65:d1:c4:7b:15:b4:4e:14:30:cb:3e:d7:5b:46:c1:67:
dc:47:87:c9:cb:d3:87:d9:95:2f:62:bd:34:9b:fd:3b:96:5b:
54:5a:ce:76:e0:26:94:5d:36:e1:57:24:24:99:3d:cc:64:48:
80:b5:af:0f:4a:86:ea:38:0e:80:71:a7:80:2d:0e:3a:b9:60:
84:f6:c6:72:b7:78:c5:8b:8b:f9:86:6c:e8:25:86:44:5b:14:
2e:2d:4e:b0:f1:9d:b5:54:d2:04:14:73:17:95:73:a0:4a:b3:
77:59:bc:b3:07:c2:3b:e7:62:42:36:91:76:f9:98:04:30:e3:
d3:94:30:68:ca:36:2a:1a:3f:d6:3c:b0:0b:95:fe:b6:17:6e:
77:28:cf:6b:64:2a:b8:35:a8:51:db:77:b0:26:6e:f2:66:93:
9b:31:cc:4e:2f:d7:0b:25:b8:05:1c:f5:1a:a6:c9:62:94:4a:
a6:20:6c:3c:06:3b:81:55:1b:95:e4:3a:13:4d:b4:78:ae:3b:
5f:a6:7f:0f:7a:c5:84:cf:f5:e6:35:0b:5b:79:30:63:db:ce:
17:fb:ce:a4:09:be:b0:bb:58:ac:2f:e0:e1:9d:89:fc:1e:82:
28:c4:e3:b4:da:77:a9:3a:1e:54:45:ef:67:40:27:f7:a8:1c:
ca:ca:b3:68
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEAWp7TzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Y2YyNDc0ZGU4NDExNjc1MmI5MDgwYTdhMGRiMzIyNTM1YzU2MDI2MB4XDTIyMDEw
MTA1MDMzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTgyOWI0YmEwYjQ4
YWI5MTIwODQ2NDg1OTEwMDg3NjRiMjhiMDVhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKs+kpDe4UFPisWS2WSvQSd62MOuS1bPB7r8YzhoqBDn0SGx
6zta1q+nD/MY98tQV5JScJUs7VaDOOLzUIoa6YsCP8fKAZ89FbgWOWYCtLCmgADi
ExOQ3/ONeMk1hkqAAWG59rueeJoyHEbRCPaOnwl2hsE8hJbZqK/S+zmT926SjEnR
W6gZKRzJO2Abu2eXzIDt1tCWZjnKLn9H/IQ2s9fL2j3PNXn4y8ZbVE1DKT8WyKwS
R6qkAcTRkGXuGSFurWvPUTxe5hpZRSbTnn6xrntf2n7RuhJNvkwWuaefnvtvkTgK
Y93eAUx6C+gpoXwbBoeOnrNZyD3iNafLCeSP30MCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBToKbS6C0irkSCEZIWRAIdksosFrzAfBgNVHSMEGDAWgBTM8kdN6EEWdSuQ
gKeg2zIlNcVgJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pQSkhUZWhCRm5VcmtJQ25vTnN5SlRYRllDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjkvZWNlYjAyLTgwYjQtNDc5NC1hY2JmLWNjOTA2MjBlOTljZi8x
LzZDbTB1Z3RJcTVFZ2hHU0ZrUUNIWkxLTEJhOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkv
ZWNlYjAyLTgwYjQtNDc5NC1hY2JmLWNjOTA2MjBlOTljZi8xL3pQSkhUZWhCRm5V
cmtJQ25vTnN5SlRYRllDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAlvs+DAPBAIAAjAJAwcAIAEGfARA
MA0GCSqGSIb3DQEBCwUAA4IBAQBGMmXRxHsVtE4UMMs+11tGwWfcR4fJy9OH2ZUv
Yr00m/07lltUWs524CaUXTbhVyQkmT3MZEiAta8PSobqOA6AcaeALQ46uWCE9sZy
t3jFi4v5hmzoJYZEWxQuLU6w8Z21VNIEFHMXlXOgSrN3WbyzB8I752JCNpF2+ZgE
MOPTlDBoyjYqGj/WPLALlf62F253KM9rZCq4NahR23ewJm7yZpObMcxOL9cLJbgF
HPUapslilEqmIGw8BjuBVRuV5DoTTbR4rjtfpn8PesWEz/XmNQtbeTBj284X+86k
Cb6wu1isL+DhnYn8HoIoxOO02nepOh5URe9nQCf3qBzKyrNo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:21 2024 by rpki-client on console-fra.rpki-client.org