Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/6i5dy9AQfo-EYNwiIO9kKis0XOE.roa
File: 6i5dy9AQfo-EYNwiIO9kKis0XOE.roa (raw, json)
Hash identifier: 57Jyrn6ZDONfW1xKvbtSeA1QUEQ0jFs90mdLFz7XqQs=
Subject key identifier: EA:2E:5D:CB:D0:10:7E:8F:84:60:DC:22:20:EF:64:2A:2B:34:5C:E1
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 01857094E2811C9410EA2C6A4337F5BDC1C5
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/6i5dy9AQfo-EYNwiIO9kKis0XOE.roa
Signing time: Mon 02 Jan 2023 03:44:43 +0000
ROA not before: Mon 02 Jan 2023 03:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210571
IP address blocks: 185.115.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:e2:81:1c:94:10:ea:2c:6a:43:37:f5:bd:c1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Jan 2 03:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea2e5dcbd0107e8f8460dc2220ef642a2b345ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:63:44:9d:20:8a:c1:98:10:0e:02:c6:5b:
a1:cf:80:bd:12:23:46:4c:1d:2a:2b:d5:f7:79:4b:
d0:1e:80:57:f5:b6:72:09:7b:00:b6:bc:56:27:64:
d1:cf:2c:f9:49:4c:8a:f5:76:b6:a6:ed:a8:c0:ce:
aa:7a:85:72:aa:6b:40:97:f9:36:c0:16:01:20:58:
de:20:c4:d9:cc:a9:b7:28:78:5d:16:38:27:8e:b2:
6c:7b:18:2c:76:31:38:58:15:70:3b:97:e9:6d:cf:
8e:93:f4:99:0d:80:d1:d4:be:0d:d3:a8:d8:63:c5:
69:24:6d:d1:64:67:a5:be:75:8f:19:08:f2:da:10:
81:37:dc:36:9e:4b:30:fa:ec:39:54:da:6f:64:66:
32:28:bb:3d:41:13:ca:0b:6b:15:de:dc:90:69:db:
66:b9:ee:2d:bf:e1:50:05:4a:d7:dd:d8:c2:1a:b7:
af:8e:89:0a:5b:cc:f4:bb:98:a2:d1:47:8b:32:f8:
48:9b:3e:7c:98:ad:9b:c9:74:0b:e8:bd:49:7a:c8:
11:0a:f8:9f:83:58:fe:8a:be:a1:66:45:98:36:29:
7e:23:ef:7f:4a:11:31:f2:98:4a:e3:a1:c0:b8:d0:
c7:b4:5a:29:42:5f:e2:b5:29:5a:31:cf:a2:d5:94:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2E:5D:CB:D0:10:7E:8F:84:60:DC:22:20:EF:64:2A:2B:34:5C:E1
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/6i5dy9AQfo-EYNwiIO9kKis0XOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.170.0/24
Signature Algorithm: sha256WithRSAEncryption
75:66:29:e0:e4:11:68:22:d5:ca:23:79:04:e9:74:6c:b6:1c:
b8:dc:bd:75:92:47:c0:e8:5b:a9:4f:0a:b7:65:7f:59:e6:7b:
e8:4d:6e:ea:0b:5c:d9:f3:76:02:f6:87:f6:d7:73:bd:c3:47:
57:48:43:02:b6:9a:1c:02:b1:44:a6:60:13:20:33:9b:64:1c:
fe:a8:fe:81:83:e1:db:fd:fe:8f:dc:cc:17:bc:9a:cb:b1:73:
c6:47:51:21:a4:f0:88:97:81:c9:88:93:3e:73:87:37:ce:5b:
40:63:26:5c:2b:34:61:d2:64:3b:ac:88:d7:d0:ef:ae:cc:1e:
5c:fc:7c:e9:38:41:c0:ac:aa:f9:1e:d2:f3:63:10:6a:f7:df:
11:de:1f:37:80:b4:1f:b0:a3:4e:6d:2b:dc:c4:55:9e:74:50:
06:23:9c:4b:17:d8:c7:5f:3b:16:98:3a:94:c8:ae:72:5c:67:
fd:c0:7a:8f:4a:14:91:a0:90:e7:5f:95:6a:e9:a4:f6:8d:56:
5d:b3:e6:54:c1:4f:68:d4:b0:f8:03:c8:fd:aa:a1:28:ba:4a:
5d:b2:22:32:d6:4e:4b:d0:9e:a1:f5:8e:ce:6c:df:52:2d:a8:
e3:0e:13:d7:6b:87:08:aa:6a:39:36:e8:77:34:5c:49:15:96:
05:82:5f:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlOKBHJQQ6ixqQzf1vcHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2
YTU2MTEwHhcNMjMwMTAyMDM0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTJlNWRjYmQwMTA3ZThmODQ2MGRjMjIyMGVmNjQyYTJiMzQ1Y2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7NjRJ0gisGYEA4Cxluhz4C9EiNG
TB0qK9X3eUvQHoBX9bZyCXsAtrxWJ2TRzyz5SUyK9Xa2pu2owM6qeoVyqmtAl/k2
wBYBIFjeIMTZzKm3KHhdFjgnjrJsexgsdjE4WBVwO5fpbc+Ok/SZDYDR1L4N06jY
Y8VpJG3RZGelvnWPGQjy2hCBN9w2nksw+uw5VNpvZGYyKLs9QRPKC2sV3tyQadtm
ue4tv+FQBUrX3djCGrevjokKW8z0u5ii0UeLMvhImz58mK2byXQL6L1JesgRCvif
g1j+ir6hZkWYNil+I+9/ShEx8phK46HAuNDHtFopQl/itSlaMc+i1ZRWIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOouXcvQEH6PhGDcIiDvZCorNFzhMB8GA1UdIwQY
MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt
YjhjMzZlY2VkYWQ4LzEvNmk1ZHk5QVFmby1FWU53aUlPOWtLaXMwWE9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4
LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXOqMA0G
CSqGSIb3DQEBCwUAA4IBAQB1Zing5BFoItXKI3kE6XRsthy43L11kkfA6FupTwq3
ZX9Z5nvoTW7qC1zZ83YC9of213O9w0dXSEMCtpocArFEpmATIDObZBz+qP6Bg+Hb
/f6P3MwXvJrLsXPGR1EhpPCIl4HJiJM+c4c3zltAYyZcKzRh0mQ7rIjX0O+uzB5c
/HzpOEHArKr5HtLzYxBq998R3h83gLQfsKNObSvcxFWedFAGI5xLF9jHXzsWmDqU
yK5yXGf9wHqPShSRoJDnX5Vq6aT2jVZds+ZUwU9o1LD4A8j9qqEoukpdsiIy1k5L
0J6h9Y7ObN9SLajjDhPXa4cIqmo5Nuh3NFxJFZYFgl8F
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:33:04 2025 by rpki-client