Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/6nDmpdXHvnsDMgQzZp4utelr_fI.roa
File: 6nDmpdXHvnsDMgQzZp4utelr_fI.roa (raw, json)
Hash identifier: +W37xql2+WCTscrjr8D/AP0TN3cYNF+klm7EK1MGsi8=
Subject key identifier: EA:70:E6:A5:D5:C7:BE:7B:03:32:04:33:66:9E:2E:B5:E9:6B:FD:F2
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 174F87BB
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/6nDmpdXHvnsDMgQzZp4utelr_fI.roa
Signing time: Sat 01 Jan 2022 16:03:52 +0000
ROA not before: Sat 01 Jan 2022 16:03:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49302
IP address blocks: 86.105.26.0/24 maxlen: 24
92.114.108.0/24 maxlen: 24
89.35.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391088059 (0x174f87bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea70e6a5d5c7be7b03320433669e2eb5e96bfdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:f9:ed:19:ef:6f:ff:9e:dc:4c:f7:a3:e3:
d8:6e:6f:32:d7:a0:94:7a:10:20:6d:14:70:b2:1a:
4a:64:66:0e:30:be:5a:94:b2:1f:e1:61:1c:1a:a9:
61:1a:8c:eb:4b:62:b3:a0:7b:99:b4:1d:5d:fb:21:
dc:e3:0e:ba:c3:cd:7a:02:e5:0c:4e:3b:4f:8d:3a:
71:55:e1:40:7a:90:cc:97:59:0d:40:a3:39:41:11:
3b:b0:f2:2b:9c:50:99:01:95:dd:f1:8f:2c:29:b2:
5f:b0:51:54:7a:d5:78:b9:ae:4a:7c:ac:fe:6e:90:
5b:6c:0c:a6:b5:25:b9:21:0a:92:d3:b9:f6:0c:be:
d1:0a:8d:90:0d:e5:b7:72:25:69:69:4f:9c:4f:01:
19:a3:98:b9:34:a9:23:8a:bb:17:d1:24:89:70:20:
09:d2:cb:52:df:b4:75:94:80:20:f6:b7:29:91:6c:
d0:2b:e2:af:cd:bd:6f:03:43:a3:76:ec:8a:24:66:
bf:e0:34:00:76:cf:d4:8a:ca:68:82:d9:b5:35:5b:
8f:fa:e1:f6:e7:e5:85:e2:8c:18:78:68:ec:c6:44:
5c:36:c0:cf:5c:20:27:14:b5:b7:54:23:b7:6f:16:
d9:d9:9c:e7:11:47:85:25:f8:3c:1f:1c:35:c5:dd:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:70:E6:A5:D5:C7:BE:7B:03:32:04:33:66:9E:2E:B5:E9:6B:FD:F2
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/6nDmpdXHvnsDMgQzZp4utelr_fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.26.0/24
89.35.77.0/24
92.114.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:59:db:a4:eb:92:ca:de:33:30:68:81:04:7d:b0:b5:80:b6:
67:c2:9c:f0:b5:08:50:30:6f:90:2e:ab:cd:bf:8d:2a:6e:c8:
a0:8f:56:d4:3a:69:90:4a:a8:23:bd:83:e8:8e:15:36:73:a5:
8e:4a:30:cb:97:32:ad:e9:19:ee:75:39:2a:74:35:7e:19:91:
f9:5e:d7:92:58:c7:10:8d:50:b9:9d:5c:d6:4d:33:21:ab:f5:
3b:20:fd:63:65:3b:53:ab:1a:95:6f:c1:08:c3:15:35:5c:00:
9e:81:58:9b:ce:b2:50:65:dc:fa:dd:d9:ea:f6:9e:4c:71:c4:
8b:ac:b1:3e:4a:9a:e4:11:3d:6f:1b:45:10:00:1d:de:ad:45:
e8:0e:20:90:98:c7:27:43:64:70:81:b7:f7:e2:01:81:a7:02:
5a:2d:04:64:4a:03:2c:4e:b7:d9:71:6c:2f:21:e9:e5:7e:70:
8e:fb:cc:62:40:6c:2c:2f:c1:0f:84:3f:5a:06:0d:2e:34:dd:
3e:b3:14:bc:a7:0e:65:97:65:d5:9d:2b:7b:74:15:24:bf:8c:
80:7d:23:00:d3:0a:40:d6:9f:d4:89:4a:a3:5c:04:60:1c:18:
be:e1:c5:71:ef:c4:01:bc:1e:2b:7d:86:99:7f:3b:2f:36:f8:
12:79:e7:72
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEF0+HuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZGYxMzJkZjEzZTRiZTUzZDgyNTBjOGM0ODQyMDI2NGVlZjZjMTRjMB4XDTIyMDEw
MTE2MDM1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWE3MGU2YTVkNWM3
YmU3YjAzMzIwNDMzNjY5ZTJlYjVlOTZiZmRmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvo+e0Z72//ntxM96Pj2G5vMteglHoQIG0UcLIaSmRmDjC+
WpSyH+FhHBqpYRqM60tis6B7mbQdXfsh3OMOusPNegLlDE47T406cVXhQHqQzJdZ
DUCjOUERO7DyK5xQmQGV3fGPLCmyX7BRVHrVeLmuSnys/m6QW2wMprUluSEKktO5
9gy+0QqNkA3lt3IlaWlPnE8BGaOYuTSpI4q7F9EkiXAgCdLLUt+0dZSAIPa3KZFs
0Cvir829bwNDo3bsiiRmv+A0AHbP1IrKaILZtTVbj/rh9uflheKMGHho7MZEXDbA
z1wgJxS1t1Qjt28W2dmc5xFHhSX4PB8cNcXdqMcCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTqcOal1ce+ewMyBDNmni616Wv98jAfBgNVHSMEGDAWgBR98TLfE+S+U9gl
DIxIQgJk7vbBTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZmRXkzeFBrdmxQWUpReU1TRUlDWk83MndVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvYzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8x
LzZuRG1wZFhIdm5zRE1nUXpacDR1dGVscl9mSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
YzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8xL2ZmRXkzeFBrdmxQ
WUpReU1TRUlDWk83MndVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFZpGgMEAFkjTQMEAFxybDANBgkq
hkiG9w0BAQsFAAOCAQEATVnbpOuSyt4zMGiBBH2wtYC2Z8Kc8LUIUDBvkC6rzb+N
Km7IoI9W1DppkEqoI72D6I4VNnOljkowy5cyrekZ7nU5KnQ1fhmR+V7XkljHEI1Q
uZ1c1k0zIav1OyD9Y2U7U6salW/BCMMVNVwAnoFYm86yUGXc+t3Z6vaeTHHEi6yx
Pkqa5BE9bxtFEAAd3q1F6A4gkJjHJ0NkcIG39+IBgacCWi0EZEoDLE632XFsLyHp
5X5wjvvMYkBsLC/BD4Q/WgYNLjTdPrMUvKcOZZdl1Z0re3QVJL+MgH0jANMKQNaf
1IlKo1wEYBwYvuHFce/EAbweK32GmX87Lzb4Ennncg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org