Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/r6O0EXs_8awEm4ZbH5i6cPHzUxQ.roa
File: r6O0EXs_8awEm4ZbH5i6cPHzUxQ.roa (raw, json)
Hash identifier: nVaIUrHYocNZWnWjfxYBE3aa1GvJ4GBoE/HMrF1zT/g=
Subject key identifier: AF:A3:B4:11:7B:3F:F1:AC:04:9B:86:5B:1F:98:BA:70:F1:F3:53:14
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 01BB9602
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/r6O0EXs_8awEm4ZbH5i6cPHzUxQ.roa
Signing time: Sat 01 Jan 2022 08:58:26 +0000
ROA not before: Sat 01 Jan 2022 08:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 185.188.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29070850 (0x1bb9602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Jan 1 08:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afa3b4117b3ff1ac049b865b1f98ba70f1f35314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e7:b2:38:5c:9b:0e:e4:a5:fc:c4:cc:9f:fb:
fe:fe:85:cb:fe:35:5e:40:41:0f:81:5c:57:f3:56:
6a:1c:f0:87:c1:6b:da:75:3e:10:5f:7f:bc:b7:a5:
6c:f5:5c:a1:b6:e7:a9:ac:0e:31:6c:76:fe:5b:c6:
a4:66:76:ae:2c:51:88:14:75:2a:6e:e3:a9:ed:2e:
7b:05:37:f2:75:75:4a:48:9d:ac:63:0d:c8:95:b7:
69:cb:23:9b:0c:24:56:6e:bd:bb:76:87:e5:ec:72:
7c:95:e3:99:d5:be:1a:22:92:26:93:07:61:56:ac:
30:86:77:af:8c:ad:8d:86:09:82:da:0c:92:95:ab:
cc:18:ce:5d:18:39:b2:1e:0f:e9:b9:5b:0d:51:5b:
fd:08:54:27:22:23:88:dd:8f:6e:9d:6e:b4:f6:01:
70:99:39:7d:5b:bb:27:4e:08:d0:49:2b:e3:98:ad:
4b:89:c3:07:18:98:8f:6d:ab:82:1f:d2:5d:34:6c:
5d:39:03:4b:5f:fd:c7:ad:86:c5:d5:6b:6e:2e:c2:
96:4f:45:cc:a3:dd:f1:19:d0:e4:b0:3d:4f:c2:69:
cd:b8:65:ab:c9:7b:e9:1f:bd:cc:7d:21:42:e3:f1:
d8:b2:b4:9c:5f:87:94:3a:79:8e:84:aa:3a:03:03:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A3:B4:11:7B:3F:F1:AC:04:9B:86:5B:1F:98:BA:70:F1:F3:53:14
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/r6O0EXs_8awEm4ZbH5i6cPHzUxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.93.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7b:59:38:c6:c3:e0:43:f1:f1:01:e2:5d:8b:f5:58:dd:05:
62:07:da:83:43:6a:47:6b:1c:60:fa:95:4e:4e:af:aa:dc:04:
eb:07:04:8f:45:7c:bc:d7:55:81:a0:c1:06:ae:f9:70:eb:a9:
95:e5:ac:4b:87:cb:51:f5:cc:39:cf:63:59:bd:af:24:79:3c:
4e:50:c8:de:bb:cd:ea:a5:cd:a4:b1:3f:a2:20:86:77:78:57:
78:59:14:51:6b:35:40:d3:e9:6f:83:04:d6:3c:4a:d3:ca:6d:
e3:dd:9b:5c:94:88:5e:14:07:b4:24:7a:73:b0:6b:2b:4d:b1:
5f:a0:ff:bf:d4:f0:ab:f5:b7:81:35:ab:7c:37:9a:a7:31:59:
02:b5:94:56:11:60:12:2c:9d:9e:a5:88:0f:55:60:f6:c2:6c:
ac:e2:97:94:a3:14:41:b3:19:c3:51:27:9c:3d:6a:69:26:e1:
a6:3f:da:06:d8:a0:f1:bd:47:e9:3a:77:35:52:10:da:55:b9:
8f:fb:7b:a0:a6:21:a4:3c:b0:cc:65:45:15:d9:2a:9b:b6:94:
dc:4a:83:c0:b3:12:c3:0a:5d:14:eb:78:95:d2:af:73:26:b9:
61:6b:4e:54:d7:45:68:da:46:b6:70:60:8c:68:c7:b7:0b:a3:
41:60:71:79
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAbuWAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MmU1ZWM5ZGY0ZGQwM2I5ZjUwMGE2YTA5NDdkMTQ3YjZlZDIxNjY2MB4XDTIyMDEw
MTA4NTgyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWZhM2I0MTE3YjNm
ZjFhYzA0OWI4NjViMWY5OGJhNzBmMWYzNTMxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAODnsjhcmw7kpfzEzJ/7/v6Fy/41XkBBD4FcV/NWahzwh8Fr
2nU+EF9/vLelbPVcobbnqawOMWx2/lvGpGZ2rixRiBR1Km7jqe0uewU38nV1Skid
rGMNyJW3acsjmwwkVm69u3aH5exyfJXjmdW+GiKSJpMHYVasMIZ3r4ytjYYJgtoM
kpWrzBjOXRg5sh4P6blbDVFb/QhUJyIjiN2Pbp1utPYBcJk5fVu7J04I0Ekr45it
S4nDBxiYj22rgh/SXTRsXTkDS1/9x62GxdVrbi7Clk9FzKPd8RnQ5LA9T8Jpzbhl
q8l76R+9zH0hQuPx2LK0nF+HlDp5joSqOgMDhjcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSvo7QRez/xrASbhlsfmLpw8fNTFDAfBgNVHSMEGDAWgBRi5eyd9N0DufUA
pqCUfRR7btIWZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1l1WHNuZlRkQTduMUFLYWdsSDBVZTI3U0ZtWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvYTdjZTAzLTFmMTUtNGRiYy05YThkLWE4MTU0NGVhNWI2Ny8x
L3I2TzBFWHNfOGF3RW00WmJINWk2Y1BIelV4US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
YTdjZTAzLTFmMTUtNGRiYy05YThkLWE4MTU0NGVhNWI2Ny8xL1l1WHNuZlRkQTdu
MUFLYWdsSDBVZTI3U0ZtWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm8XTANBgkqhkiG9w0BAQsFAAOC
AQEAiHtZOMbD4EPx8QHiXYv1WN0FYgfag0NqR2scYPqVTk6vqtwE6wcEj0V8vNdV
gaDBBq75cOupleWsS4fLUfXMOc9jWb2vJHk8TlDI3rvN6qXNpLE/oiCGd3hXeFkU
UWs1QNPpb4ME1jxK08pt492bXJSIXhQHtCR6c7BrK02xX6D/v9Twq/W3gTWrfDea
pzFZArWUVhFgEiydnqWID1Vg9sJsrOKXlKMUQbMZw1EnnD1qaSbhpj/aBtig8b1H
6Tp3NVIQ2lW5j/t7oKYhpDywzGVFFdkqm7aU3EqDwLMSwwpdFOt4ldKvcya5YWtO
VNdFaNpGtnBgjGjHtwujQWBxeQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:25 2023 by rpki-client on console-ams.rpki-client.org