Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/AR6ee2TbnGLaacX5s1OweKrSO8w.roa
File: AR6ee2TbnGLaacX5s1OweKrSO8w.roa (raw, json)
Hash identifier: StY3nljo8Bmxlm1s1nAm6OjDP4UwF3fTCwvSlndV47U=
Subject key identifier: 01:1E:9E:7B:64:DB:9C:62:DA:69:C5:F9:B3:53:B0:78:AA:D2:3B:CC
Certificate issuer: /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial: 0185627DAE350A7737FE06B6002212ACD291
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/AR6ee2TbnGLaacX5s1OweKrSO8w.roa
Signing time: Fri 30 Dec 2022 10:04:41 +0000
ROA not before: Fri 30 Dec 2022 10:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16077
IP address blocks: 193.41.180.0/23 maxlen: 23
193.108.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:7d:ae:35:0a:77:37:fe:06:b6:00:22:12:ac:d2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Validity
Not Before: Dec 30 10:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=011e9e7b64db9c62da69c5f9b353b078aad23bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:85:55:b8:6c:c1:41:69:48:b2:bf:5f:3f:
20:c7:c7:8e:0f:09:1d:18:12:1f:84:81:15:fd:51:
b0:34:24:23:74:33:de:9d:1d:ee:c1:82:00:b2:8a:
c9:9a:b7:a1:44:03:54:a3:f9:2e:51:e5:f3:a1:fa:
1b:e4:5e:12:65:41:77:a7:e0:fd:63:e8:2a:06:c3:
12:5e:31:31:5a:d3:e0:60:6e:be:4b:32:b9:de:d0:
d1:3d:84:dc:c9:96:0e:2d:0d:8a:c5:b3:97:9a:66:
f5:51:d5:72:fa:9f:6e:1c:0c:8a:ce:ab:78:6f:ca:
a0:2d:cd:91:04:de:3d:96:7b:7a:62:9d:c3:84:e0:
70:c7:29:07:b4:77:c7:5a:be:a9:af:4d:c1:18:27:
36:7f:77:16:bc:f7:40:63:f8:7f:e0:cb:67:12:7c:
a9:a5:9a:24:84:1f:36:bb:b2:be:ba:27:31:86:95:
fe:35:0e:a2:34:c8:7e:6d:22:97:77:b4:8c:59:94:
f3:15:64:6a:da:b0:5a:cd:30:18:92:35:2a:f0:df:
31:1f:7a:f2:fc:da:09:fe:d1:42:d6:d6:31:d1:ae:
ab:91:f9:72:a4:9a:61:3f:09:d9:a5:54:35:f0:d5:
b0:e5:61:07:93:27:85:07:3a:9a:ec:4f:6a:64:4c:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1E:9E:7B:64:DB:9C:62:DA:69:C5:F9:B3:53:B0:78:AA:D2:3B:CC
X509v3 Authority Key Identifier:
keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/AR6ee2TbnGLaacX5s1OweKrSO8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.180.0/23
193.108.203.0/24
Signature Algorithm: sha256WithRSAEncryption
98:47:f4:f6:d4:96:19:29:73:b0:6c:4e:7e:3d:3a:5e:68:0c:
ae:bf:58:b7:6f:87:1a:15:92:b6:10:1d:18:e7:23:13:03:1a:
37:98:6f:51:cc:df:4a:06:e7:5f:c5:75:bb:e3:6e:84:0d:29:
06:db:d5:12:3f:36:27:10:4d:cc:54:d6:41:77:e8:3f:53:9f:
1d:60:5b:d2:b7:45:c0:c1:ff:f4:78:d5:d1:76:a5:92:ee:f9:
cf:67:67:da:89:9b:95:4f:4c:73:32:72:7f:c6:d8:98:16:f6:
f4:b4:7e:ff:ba:06:47:c9:d6:00:67:db:14:e0:eb:91:1e:dc:
b9:fd:82:b6:e4:cf:a0:b7:30:e9:62:b5:fa:20:2b:d8:d7:1f:
4e:d4:37:73:c7:fd:8d:0b:f0:81:ce:eb:37:f7:ce:2a:2c:62:
e3:1c:51:e0:af:04:cc:a4:a0:d5:2b:f9:92:69:4f:96:27:80:
ea:28:76:41:4b:0a:49:44:65:f8:18:b2:a5:ea:ac:c8:13:0a:
ca:b4:b1:c4:17:dc:25:5c:8e:95:db:da:a8:91:9b:31:a6:66:
31:c6:82:da:1b:80:7c:5c:86:1d:9f:04:2e:4e:95:a6:0d:9b:
6a:72:b0:00:d0:ca:ff:8d:80:c3:07:ad:f8:af:3b:1a:60:e4:
86:26:2d:f8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVifa41Cnc3/ga2ACISrNKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTM2MGI2ZjU4MzlhYWZkY2UyMWNkNmRlNzYzYmRhYTI2
YmZiZjAwHhcNMjIxMjMwMTAwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTFlOWU3YjY0ZGI5YzYyZGE2OWM1ZjliMzUzYjA3OGFhZDIzYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYSFVbhswUFpSLK/Xz8gx8eODwkd
GBIfhIEV/VGwNCQjdDPenR3uwYIAsorJmrehRANUo/kuUeXzofob5F4SZUF3p+D9
Y+gqBsMSXjExWtPgYG6+SzK53tDRPYTcyZYOLQ2KxbOXmmb1UdVy+p9uHAyKzqt4
b8qgLc2RBN49lnt6Yp3DhOBwxykHtHfHWr6pr03BGCc2f3cWvPdAY/h/4MtnEnyp
pZokhB82u7K+uicxhpX+NQ6iNMh+bSKXd7SMWZTzFWRq2rBazTAYkjUq8N8xH3ry
/NoJ/tFC1tYx0a6rkflypJphPwnZpVQ18NWw5WEHkyeFBzqa7E9qZEw+1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAEenntk25xi2mnF+bNTsHiq0jvMMB8GA1UdIwQY
MBaAFG+TYLb1g5qv3OIc1t52O9qia/vwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lMDU2MTQtMjgyNC00Mjk4LWJlMGMt
ZTNhN2ZmMTFjNjMxLzEvQVI2ZWUyVGJuR0xhYWNYNXMxT3dlS3JTTzh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lMDU2MTQtMjgyNC00Mjk4LWJlMGMtZTNhN2ZmMTFjNjMx
LzEvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwSm0AwQA
wWzLMA0GCSqGSIb3DQEBCwUAA4IBAQCYR/T21JYZKXOwbE5+PTpeaAyuv1i3b4ca
FZK2EB0Y5yMTAxo3mG9RzN9KBudfxXW7426EDSkG29USPzYnEE3MVNZBd+g/U58d
YFvSt0XAwf/0eNXRdqWS7vnPZ2faiZuVT0xzMnJ/xtiYFvb0tH7/ugZHydYAZ9sU
4OuRHty5/YK25M+gtzDpYrX6ICvY1x9O1Ddzx/2NC/CBzus3984qLGLjHFHgrwTM
pKDVK/mSaU+WJ4DqKHZBSwpJRGX4GLKl6qzIEwrKtLHEF9wlXI6V29qokZsxpmYx
xoLaG4B8XIYdnwQuTpWmDZtqcrAA0Mr/jYDDB634rzsaYOSGJi34
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:52 2025 by rpki-client