Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/akYLDubTVZ0bPn6pHEeY4tUmkTs.roa
File: akYLDubTVZ0bPn6pHEeY4tUmkTs.roa (raw, json)
Hash identifier: 2j8D/4OFTcN+BJJ8eFOIg9xNdmYa97HVBEg4Wte7WqE=
Subject key identifier: 6A:46:0B:0E:E6:D3:55:9D:1B:3E:7E:A9:1C:47:98:E2:D5:26:91:3B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 064D3A6A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/akYLDubTVZ0bPn6pHEeY4tUmkTs.roa
Signing time: Sat 01 Jan 2022 06:52:43 +0000
ROA not before: Sat 01 Jan 2022 06:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 185.223.154.0/24 maxlen: 24
185.238.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105724522 (0x64d3a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a460b0ee6d3559d1b3e7ea91c4798e2d526913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:c5:21:2c:c8:66:91:53:3e:90:96:f1:d9:
ef:e7:82:21:50:f1:01:c8:6f:e2:dd:12:cb:b2:0e:
12:c5:f1:4b:84:23:1c:d9:5b:d9:0f:bb:99:87:19:
b7:50:08:1f:d0:38:cd:89:63:9e:3f:24:56:57:c2:
4a:b5:69:b2:01:8b:78:b8:27:fb:38:89:86:c0:11:
5f:a5:67:90:d4:e1:f9:dd:64:4f:f1:5a:27:62:27:
a2:c8:14:b6:3d:33:91:76:d6:2d:29:8a:8a:fe:0a:
9c:51:e0:fb:ea:8f:4b:fc:24:70:06:5b:74:22:9e:
3b:d1:40:64:fe:8d:55:77:14:16:c2:43:bf:9c:21:
7f:8e:e7:c4:70:df:73:81:41:6c:f8:60:dd:d5:61:
9c:07:b7:77:b8:72:3e:60:72:65:b0:a8:21:f1:49:
16:42:85:4e:04:a6:0d:06:d3:40:34:3d:6e:05:aa:
66:d9:74:a7:9a:01:53:d3:66:10:01:20:89:fa:17:
98:bb:11:e5:a4:fb:d5:3d:f4:cf:64:04:e6:05:1f:
14:bd:67:d0:a3:b3:2e:ce:8a:ec:6e:4e:8c:ab:59:
53:d3:2a:5f:8f:d3:d6:f5:05:64:bf:95:ba:56:f1:
8f:23:bc:e4:35:4c:33:e3:43:7b:cd:92:30:7f:d6:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:46:0B:0E:E6:D3:55:9D:1B:3E:7E:A9:1C:47:98:E2:D5:26:91:3B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/akYLDubTVZ0bPn6pHEeY4tUmkTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.154.0/24
185.238.228.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bf:ae:e7:cd:f1:9a:db:03:4d:f9:48:34:e4:e9:80:e3:85:
a8:9c:e9:aa:7c:1f:b2:8f:28:68:5f:9f:fd:5c:62:9d:7b:9b:
f0:28:cf:d2:2c:ea:b6:af:1e:f0:d0:41:52:32:42:72:96:0a:
90:df:19:0b:39:cc:9f:79:d5:ae:10:bf:0f:43:76:c2:6e:ac:
a0:89:f7:7a:90:52:79:d1:52:21:b6:d4:ae:a8:af:61:83:12:
2c:85:b0:be:9c:c1:cd:a4:77:86:c6:f7:7b:97:60:ce:99:75:
ee:e4:41:59:ba:aa:ac:89:c7:02:85:d7:2e:2a:9e:b6:68:b9:
f6:18:f2:bc:14:3b:4f:8b:fd:71:36:d8:77:6a:bf:ba:92:ec:
e8:18:d9:6d:12:eb:a4:08:3e:52:6a:13:6c:2f:7a:16:da:0d:
b1:f7:47:c0:4c:67:49:88:4e:0e:6e:cb:3e:32:35:2b:8a:55:
79:67:de:d0:1b:aa:4d:86:bc:97:89:18:9c:7c:2c:ee:a9:24:
19:58:c3:5c:d1:69:d0:6a:63:55:c8:72:61:da:ac:dd:ae:5e:
e7:c6:07:8c:3b:3a:e3:ca:9f:9d:45:cf:d0:e0:27:c1:1c:67:
32:79:10:85:12:d1:1d:08:ce:3d:ec:59:04:9a:60:15:6b:08:
4d:a6:d1:71
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBk06ajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDY3ODRjMTA1MDg1YjlkNmFkNWY3M2EwM2IyMGQ5YTVjMTE0Y2FmMB4XDTIyMDEw
MTA2NTI0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmE0NjBiMGVlNmQz
NTU5ZDFiM2U3ZWE5MWM0Nzk4ZTJkNTI2OTEzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOWoxSEsyGaRUz6QlvHZ7+eCIVDxAchv4t0Sy7IOEsXxS4Qj
HNlb2Q+7mYcZt1AIH9A4zYljnj8kVlfCSrVpsgGLeLgn+ziJhsARX6VnkNTh+d1k
T/FaJ2InosgUtj0zkXbWLSmKiv4KnFHg++qPS/wkcAZbdCKeO9FAZP6NVXcUFsJD
v5whf47nxHDfc4FBbPhg3dVhnAe3d7hyPmByZbCoIfFJFkKFTgSmDQbTQDQ9bgWq
Ztl0p5oBU9NmEAEgifoXmLsR5aT71T30z2QE5gUfFL1n0KOzLs6K7G5OjKtZU9Mq
X4/T1vUFZL+VulbxjyO85DVMM+NDe82SMH/WhTsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRqRgsO5tNVnRs+fqkcR5ji1SaROzAfBgNVHSMEGDAWgBRgZ4TBBQhbnWrV
9zoDsg2aXBFMrzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8x
L2FrWUxEdWJUVlowYlBuNnBIRWVZNHRVbWtUcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8xL1lHZUV3UVVJVzUx
cTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALnfmgMEALnu5DANBgkqhkiG9w0B
AQsFAAOCAQEAab+u583xmtsDTflINOTpgOOFqJzpqnwfso8oaF+f/VxinXub8CjP
0izqtq8e8NBBUjJCcpYKkN8ZCznMn3nVrhC/D0N2wm6soIn3epBSedFSIbbUrqiv
YYMSLIWwvpzBzaR3hsb3e5dgzpl17uRBWbqqrInHAoXXLiqetmi59hjyvBQ7T4v9
cTbYd2q/upLs6BjZbRLrpAg+UmoTbC96FtoNsfdHwExnSYhODm7LPjI1K4pVeWfe
0BuqTYa8l4kYnHws7qkkGVjDXNFp0GpjVchyYdqs3a5e58YHjDs648qfnUXP0OAn
wRxnMnkQhRLRHQjOPexZBJpgFWsITabRcQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org