Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/oeqqQDVw64igrXv4bCcdCJfCe3c.roa
File: oeqqQDVw64igrXv4bCcdCJfCe3c.roa (raw, json)
Hash identifier: qn57NUdBKnuFTF3xM1HKiFuvTMumg7gajXHyemI0xng=
Subject key identifier: A1:EA:AA:40:35:70:EB:88:A0:AD:7B:F8:6C:27:1D:08:97:C2:7B:77
Certificate issuer: /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial: 1640E880
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/oeqqQDVw64igrXv4bCcdCJfCe3c.roa
Signing time: Sat 01 Jan 2022 09:01:21 +0000
ROA not before: Sat 01 Jan 2022 09:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201601
IP address blocks: 94.177.25.0/24 maxlen: 24
176.112.144.0/22 maxlen: 22
176.112.152.0/22 maxlen: 22
176.112.148.0/22 maxlen: 22
185.68.208.0/22 maxlen: 22
176.112.156.0/22 maxlen: 22
2a05:1cc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373352576 (0x1640e880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
Validity
Not Before: Jan 1 09:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1eaaa403570eb88a0ad7bf86c271d0897c27b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:9e:89:4f:53:3c:38:77:60:ef:00:47:29:
6b:b7:a8:aa:47:ef:a4:04:b2:a5:d8:72:16:f7:be:
2d:1a:ee:22:ed:14:fb:3c:79:01:a9:c3:06:7d:2e:
8c:90:23:46:9a:ea:8e:65:41:57:8e:96:e4:97:82:
49:0e:92:0b:12:eb:02:a0:74:20:bc:5c:5c:71:2f:
48:8f:e2:f4:52:a4:ec:9b:62:b6:e9:39:1e:72:95:
1c:73:7b:e8:25:49:45:72:b3:ca:45:4e:85:1d:34:
4c:eb:27:6a:36:a7:4e:1b:ab:da:4f:8f:68:47:72:
6d:ed:5b:99:0d:fe:af:dc:be:62:1b:b5:17:a1:7b:
9b:1b:b7:bd:27:0f:5a:40:55:b0:df:54:90:c9:74:
66:6d:12:36:e6:1a:ff:4d:e7:d5:80:3b:4d:1e:a2:
b7:24:4e:d0:86:49:e2:81:e9:2f:ed:d1:fa:e8:61:
e5:a9:3e:30:20:c9:32:7c:03:43:cd:ef:20:11:76:
89:d2:4d:61:f7:6b:1e:85:03:12:01:f4:55:36:aa:
00:fa:8b:9a:d5:6d:49:23:8f:e0:72:7b:ae:31:cf:
db:b0:f9:59:69:e3:cb:27:5e:87:3a:8d:cc:a7:40:
1d:49:6f:b4:f1:5a:3c:98:c7:2f:12:fc:29:12:bf:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EA:AA:40:35:70:EB:88:A0:AD:7B:F8:6C:27:1D:08:97:C2:7B:77
X509v3 Authority Key Identifier:
keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/oeqqQDVw64igrXv4bCcdCJfCe3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.25.0/24
176.112.144.0/20
185.68.208.0/22
IPv6:
2a05:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
ce:ee:64:25:bc:77:94:4f:cc:fa:fa:4c:37:77:f8:05:c3:b0:
61:fd:cb:fa:a4:2f:c0:05:07:3e:09:dc:8e:fe:b8:bf:9c:86:
a2:3c:91:f5:55:2c:fb:cf:5d:df:38:16:a0:f7:b6:dc:cd:1a:
1e:af:1d:4c:64:0a:16:28:ed:bf:91:a6:0f:61:f4:fd:1f:45:
47:77:0c:7b:ce:20:42:57:55:89:1e:06:4d:f0:d4:55:5a:c1:
a2:6d:1d:35:ef:78:ec:16:2e:a5:ae:4f:a7:2b:7a:78:cd:56:
bc:59:cf:80:9d:18:ef:03:35:ba:8b:3e:2c:d7:73:44:5f:20:
3f:ea:81:70:5d:f7:34:0c:ea:9b:86:94:c5:9b:c2:c1:de:97:
26:a0:03:3b:f6:56:32:44:de:f9:4d:5b:39:35:89:fb:f3:87:
33:b1:37:5b:77:f9:03:71:75:22:4f:b5:9c:97:a8:1c:51:fd:
48:6e:2a:e0:d7:a6:97:f2:cf:76:0b:a4:8a:82:3d:ef:96:19:
2e:18:02:52:66:18:a1:17:c8:97:8e:3d:30:70:55:87:a6:89:
65:d3:d3:85:78:04:f5:fd:50:a5:52:cf:08:4e:c9:7c:bc:33:
59:fe:68:74:e6:87:d9:61:ff:b2:8a:4a:f4:11:3e:00:15:4f:
6d:af:2d:9e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEFkDogDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2ZkYWUxNTA1MDQ5ZTQ0NmQ1YjBkMTQ0YWNjODYwZDZjMTgxNjdjMB4XDTIyMDEw
MTA5MDEyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTFlYWFhNDAzNTcw
ZWI4OGEwYWQ3YmY4NmMyNzFkMDg5N2MyN2I3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANt3nolPUzw4d2DvAEcpa7eoqkfvpASypdhyFve+LRruIu0U
+zx5AanDBn0ujJAjRprqjmVBV46W5JeCSQ6SCxLrAqB0ILxcXHEvSI/i9FKk7Jti
tuk5HnKVHHN76CVJRXKzykVOhR00TOsnajanThur2k+PaEdybe1bmQ3+r9y+Yhu1
F6F7mxu3vScPWkBVsN9UkMl0Zm0SNuYa/03n1YA7TR6ityRO0IZJ4oHpL+3R+uhh
5ak+MCDJMnwDQ83vIBF2idJNYfdrHoUDEgH0VTaqAPqLmtVtSSOP4HJ7rjHP27D5
WWnjyydehzqNzKdAHUlvtPFaPJjHLxL8KRK/s0cCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSh6qpANXDriKCte/hsJx0Il8J7dzAfBgNVHSMEGDAWgBRz/a4VBQSeRG1b
DRRKzIYNbBgWfDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NfMnVGUVVFbmtSdFd3MFVTc3lHRFd3WUZudy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvYzNmY2Q5LTAwYzgtNDM2Yi04YzAxLWE1ZmVhNjA0YWQ1My8x
L29lcXFRRFZ3NjRpZ3JYdjRiQ2NkQ0pmQ2UzYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
YzNmY2Q5LTAwYzgtNDM2Yi04YzAxLWE1ZmVhNjA0YWQ1My8xL2NfMnVGUVVFbmtS
dFd3MFVTc3lHRFd3WUZudy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAF6xGQMEBLBwkAMEArlE0DANBAIA
AjAHAwUDKgUcwDANBgkqhkiG9w0BAQsFAAOCAQEAzu5kJbx3lE/M+vpMN3f4BcOw
Yf3L+qQvwAUHPgncjv64v5yGojyR9VUs+89d3zgWoPe23M0aHq8dTGQKFijtv5Gm
D2H0/R9FR3cMe84gQldViR4GTfDUVVrBom0dNe947BYupa5Ppyt6eM1WvFnPgJ0Y
7wM1uos+LNdzRF8gP+qBcF33NAzqm4aUxZvCwd6XJqADO/ZWMkTe+U1bOTWJ+/OH
M7E3W3f5A3F1Ik+1nJeoHFH9SG4q4Neml/LPdgukioI975YZLhgCUmYYoRfIl449
MHBVh6aJZdPThXgE9f1QpVLPCE7JfLwzWf5odOaH2WH/sopK9BE+ABVPba8tng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:48 2024 by rpki-client on console-ams.rpki-client.org