Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6S-kKRhyWNtrzR6uA4tfyKS1ygA.roa
File: 6S-kKRhyWNtrzR6uA4tfyKS1ygA.roa (raw, json)
Hash identifier: jV+JSCdEB0nm3hdDllRIbJnu1ycss6WI3vzXLlgz4QQ=
Subject key identifier: E9:2F:A4:29:18:72:58:DB:6B:CD:1E:AE:03:8B:5F:C8:A4:B5:CA:00
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01833561DFB946A74E08080CAE3C74D7EFA6
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6S-kKRhyWNtrzR6uA4tfyKS1ygA.roa
Signing time: Tue 13 Sep 2022 05:45:49 +0000
ROA not before: Tue 13 Sep 2022 05:45:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 264617
IP address blocks: 45.82.220.0/23 maxlen: 24
45.82.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:61:df:b9:46:a7:4e:08:08:0c:ae:3c:74:d7:ef:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Sep 13 05:45:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e92fa429187258db6bcd1eae038b5fc8a4b5ca00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:6b:0c:b0:e8:45:7b:ac:41:df:f0:e2:80:
c7:a1:b6:c9:57:77:24:88:8b:2b:57:5a:90:bf:1f:
4a:25:76:41:c0:01:ae:5d:e1:bd:02:e0:f6:cc:d6:
75:a1:39:78:ff:7c:e1:b9:20:27:56:a6:1a:1e:53:
89:c9:63:88:a0:3a:ee:08:21:d2:8d:eb:76:8e:77:
e2:34:07:6e:3f:29:81:fc:2f:72:1c:bc:83:96:39:
ce:28:f9:9e:de:b5:ea:4c:01:97:43:a4:26:34:2e:
56:00:71:2d:32:1d:d9:a1:20:5f:14:c9:41:a8:00:
07:57:27:16:dd:b1:84:e5:c5:4e:0c:1e:9b:54:05:
7e:52:2f:65:a4:4b:85:6c:2a:84:cb:64:52:9e:d5:
b3:b7:47:f3:89:97:6b:dd:16:e3:0e:77:1a:37:3a:
23:80:31:b6:1b:24:bc:43:94:54:6a:79:c8:ef:06:
3f:a9:58:4c:43:36:d7:7b:01:2b:7a:99:3d:32:f3:
ae:34:ae:2b:61:3f:fe:7d:62:bc:be:66:c3:af:29:
b4:2d:df:7c:07:f7:6e:d9:1f:c8:7f:d9:e2:d0:db:
7f:4c:d3:9a:07:59:ab:ca:e9:bd:c2:77:3c:ad:37:
c3:bb:cd:53:d7:4d:27:b6:26:27:12:aa:2d:46:d9:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2F:A4:29:18:72:58:DB:6B:CD:1E:AE:03:8B:5F:C8:A4:B5:CA:00
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6S-kKRhyWNtrzR6uA4tfyKS1ygA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.220.0-45.82.222.255
Signature Algorithm: sha256WithRSAEncryption
af:f9:b9:ef:44:e5:52:b5:2f:85:04:8f:6b:36:f8:4b:fb:0d:
57:77:50:7e:04:6c:88:15:5f:20:a7:9b:c8:cf:74:da:e5:dd:
0a:50:74:03:3f:a5:93:f4:ad:65:2e:4a:c0:c7:df:d9:5f:6b:
d4:12:90:62:75:e2:e4:04:48:de:6c:ea:6b:a2:04:e6:2b:53:
49:4a:d2:96:78:89:13:7a:73:7a:78:9e:71:50:96:fb:c4:b9:
85:13:cd:88:24:3f:59:bc:12:9b:f4:a1:42:c2:da:90:6e:0d:
6e:2d:6b:6e:64:17:90:f4:a1:de:b9:f1:b7:c4:8e:87:c0:f0:
23:76:e0:75:c3:38:84:28:83:5d:0e:3c:66:76:33:96:78:26:
6f:38:c7:21:ed:78:39:d5:d7:e2:21:fd:02:65:1e:d3:d3:9a:
da:fb:db:8b:7d:49:3f:75:4f:a8:69:c9:5e:8b:48:96:29:c3:
16:4f:31:ac:05:52:4d:f4:60:f5:da:49:00:79:b3:52:7e:a4:
aa:0d:e5:27:fb:91:b9:00:37:09:3c:12:c3:62:31:56:fd:02:
58:57:60:dd:b6:9c:49:81:8c:b7:1b:66:36:6c:67:d1:e2:25:
04:c3:bf:e9:17:1b:28:0a:93:98:c0:e5:10:5d:de:7d:75:5e:
c6:ba:5a:8a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYM1Yd+5RqdOCAgMrjx01++mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjIwOTEzMDU0NTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTJmYTQyOTE4NzI1OGRiNmJjZDFlYWUwMzhiNWZjOGE0YjVjYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApONrDLDoRXusQd/w4oDHobbJV3ck
iIsrV1qQvx9KJXZBwAGuXeG9AuD2zNZ1oTl4/3zhuSAnVqYaHlOJyWOIoDruCCHS
jet2jnfiNAduPymB/C9yHLyDljnOKPme3rXqTAGXQ6QmNC5WAHEtMh3ZoSBfFMlB
qAAHVycW3bGE5cVODB6bVAV+Ui9lpEuFbCqEy2RSntWzt0fziZdr3RbjDncaNzoj
gDG2GyS8Q5RUannI7wY/qVhMQzbXewErepk9MvOuNK4rYT/+fWK8vmbDrym0Ld98
B/du2R/If9ni0Nt/TNOaB1mryum9wnc8rTfDu81T100ntiYnEqotRtke3wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOkvpCkYcljba80ergOLX8iktcoAMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvNlMta0tSaHlXTnRyelI2dUE0dGZ5S1MxeWdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItUtwD
BAAtUt4wDQYJKoZIhvcNAQELBQADggEBAK/5ue9E5VK1L4UEj2s2+Ev7DVd3UH4E
bIgVXyCnm8jPdNrl3QpQdAM/pZP0rWUuSsDH39lfa9QSkGJ14uQESN5s6muiBOYr
U0lK0pZ4iRN6c3p4nnFQlvvEuYUTzYgkP1m8Epv0oULC2pBuDW4ta25kF5D0od65
8bfEjofA8CN24HXDOIQog10OPGZ2M5Z4Jm84xyHteDnV1+Ih/QJlHtPTmtr724t9
ST91T6hpyV6LSJYpwxZPMawFUk30YPXaSQB5s1J+pKoN5Sf7kbkANwk8EsNiMVb9
AlhXYN22nEmBjLcbZjZsZ9HiJQTDv+kXGygKk5jA5RBd3n11Xsa6Woo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org