Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/6xFFiet-c9sGRVuqBwrKAJ8epLI.roa
File: 6xFFiet-c9sGRVuqBwrKAJ8epLI.roa (raw, json)
Hash identifier: kyWwE4x9UMYWQM6Zy8MlHE52Riz6bAjZ5wyCOTFCM0k=
Subject key identifier: EB:11:45:89:EB:7E:73:DB:06:45:5B:AA:07:0A:CA:00:9F:1E:A4:B2
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 1A5FD0CA
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/6xFFiet-c9sGRVuqBwrKAJ8epLI.roa
Signing time: Tue 08 Feb 2022 07:15:42 +0000
ROA not before: Tue 08 Feb 2022 07:15:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210001
IP address blocks: 93.187.39.0/24 maxlen: 24
185.52.116.0/24 maxlen: 24
185.52.119.0/24 maxlen: 24
93.187.33.0/24 maxlen: 24
93.187.36.0/24 maxlen: 24
2a00:dd00:5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442486986 (0x1a5fd0ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Feb 8 07:15:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb114589eb7e73db06455baa070aca009f1ea4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:cb:9d:20:a0:66:e3:60:24:19:ea:fb:89:
40:52:5e:59:78:ba:0b:1a:15:00:14:95:d4:29:b0:
c0:d7:57:4e:07:97:50:19:50:8e:48:51:11:bd:ff:
26:c9:1e:46:9a:35:ce:9b:0c:83:9c:5b:5a:54:d1:
f8:ef:11:40:a7:73:ba:70:9e:1b:c8:46:f6:3b:6f:
09:0f:02:ee:5a:c0:e1:27:3a:a4:2d:5c:f9:d4:62:
84:f6:4b:f6:33:33:ff:b6:98:f0:5a:96:cf:73:83:
24:48:7c:0b:79:1e:44:13:a3:75:02:9f:0f:62:ea:
e4:68:ac:76:df:d5:36:99:bf:e9:71:e6:0f:0f:6e:
0b:da:d3:92:b1:88:aa:d5:a8:e4:9d:1e:4d:5d:36:
d7:06:ae:97:65:3c:49:fe:d3:79:24:20:5f:e0:93:
bb:65:0d:8e:6f:fd:61:79:4e:dc:b0:69:1b:4b:09:
29:be:c5:d9:fd:19:ce:b5:9d:97:c4:27:b1:2f:bc:
f4:9a:aa:0f:c6:4a:95:30:69:c9:38:13:03:f3:76:
ad:34:9d:40:85:ba:a3:e3:b7:c7:8f:94:36:e2:3a:
41:6a:8b:52:d0:bb:20:d8:14:04:51:53:ac:43:3a:
cc:44:70:14:15:09:42:68:b1:a3:b0:98:96:9a:6c:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:11:45:89:EB:7E:73:DB:06:45:5B:AA:07:0A:CA:00:9F:1E:A4:B2
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/6xFFiet-c9sGRVuqBwrKAJ8epLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.33.0/24
93.187.36.0/24
93.187.39.0/24
185.52.116.0/24
185.52.119.0/24
IPv6:
2a00:dd00:5::/48
Signature Algorithm: sha256WithRSAEncryption
22:be:45:ff:1a:73:22:67:c2:70:22:81:d2:d4:bc:5f:02:40:
b2:49:45:84:c6:70:d2:b3:45:8a:d2:4e:0e:a6:5e:33:cc:bc:
79:77:94:12:fe:b3:12:90:93:98:8c:0d:39:a6:be:5f:24:04:
62:82:9e:10:60:3a:06:d6:40:a8:58:79:b0:3e:e7:3f:8f:fa:
3b:19:a1:f1:f1:92:4d:54:7d:fe:2b:3d:73:54:43:2b:39:6a:
6c:3b:83:af:ba:21:f4:df:7a:d0:38:9e:29:99:4d:24:5b:e3:
cd:42:c1:1f:d6:5e:ab:46:71:5d:49:03:f8:f6:a3:9b:38:a7:
f6:3e:5d:a6:3f:50:a2:f3:f6:f1:d1:8a:cf:86:8c:2c:e0:0f:
98:3c:7d:70:3b:19:06:9e:94:c0:2b:0f:db:f2:ca:69:f1:72:
b1:1b:a0:a5:ef:50:de:3b:f9:7c:0b:f3:ae:fc:eb:b7:4d:c1:
c9:53:84:70:2d:cf:83:65:b4:c8:93:c7:77:ff:4e:5e:3c:c5:
6f:98:cd:73:8b:d7:f1:5c:4b:33:bf:6a:9f:db:8f:9e:3a:df:
4d:49:67:0d:e9:36:7e:a3:a6:20:32:a5:98:78:d1:96:e7:26:
00:3d:fa:41:eb:b3:56:ff:8a:3b:1f:2a:31:49:7b:2a:1a:b6:
e4:bf:63:c3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIEGl/QyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YzAyYjE4ZjU4OGE1MGI5Mjc0ZmUzNDY5ZmY4YmQ0YTE2NDlkNzRkMB4XDTIyMDIw
ODA3MTU0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWIxMTQ1ODllYjdl
NzNkYjA2NDU1YmFhMDcwYWNhMDA5ZjFlYTRiMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFsy50goGbjYCQZ6vuJQFJeWXi6CxoVABSV1CmwwNdXTgeX
UBlQjkhREb3/JskeRpo1zpsMg5xbWlTR+O8RQKdzunCeG8hG9jtvCQ8C7lrA4Sc6
pC1c+dRihPZL9jMz/7aY8FqWz3ODJEh8C3keRBOjdQKfD2Lq5Gisdt/VNpm/6XHm
Dw9uC9rTkrGIqtWo5J0eTV021waul2U8Sf7TeSQgX+CTu2UNjm/9YXlO3LBpG0sJ
Kb7F2f0ZzrWdl8QnsS+89JqqD8ZKlTBpyTgTA/N2rTSdQIW6o+O3x4+UNuI6QWqL
UtC7INgUBFFTrEM6zERwFBUJQmixo7CYlppse6sCAwEAAaOCAjIwggIuMB0GA1Ud
DgQWBBTrEUWJ635z2wZFW6oHCsoAnx6ksjAfBgNVHSMEGDAWgBTcArGPWIpQuSdP
40af+L1KFknXTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNBS3hqMWlLVUxrblQtTkduX2k5U2haSjEwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvYzg2MWM4LWM4OWEtNDA0My1hMDJkLTY2NGYwNGQyYTY4ZC8x
LzZ4RkZpZXQtYzlzR1JWdXFCd3JLQUo4ZXBMSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
Yzg2MWM4LWM4OWEtNDA0My1hMDJkLTY2NGYwNGQyYTY4ZC8xLzNBS3hqMWlLVUxr
blQtTkduX2k5U2haSjEwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBI
BggrBgEFBQcBBwEB/wQ5MDcwJAQCAAEwHgMEAF27IQMEAF27JAMEAF27JwMEALk0
dAMEALk0dzAPBAIAAjAJAwcAKgDdAAAFMA0GCSqGSIb3DQEBCwUAA4IBAQAivkX/
GnMiZ8JwIoHS1LxfAkCySUWExnDSs0WK0k4Opl4zzLx5d5QS/rMSkJOYjA05pr5f
JARigp4QYDoG1kCoWHmwPuc/j/o7GaHx8ZJNVH3+Kz1zVEMrOWpsO4OvuiH033rQ
OJ4pmU0kW+PNQsEf1l6rRnFdSQP49qObOKf2Pl2mP1Ci8/bx0YrPhows4A+YPH1w
OxkGnpTAKw/b8spp8XKxG6Cl71DeO/l8C/Ou/Ou3TcHJU4RwLc+DZbTIk8d3/05e
PMVvmM1zi9fxXEszv2qf24+eOt9NSWcN6TZ+o6YgMqWYeNGW5yYAPfpB67NW/4o7
HyoxSXsqGrbkv2PD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:36 2024 by rpki-client on console-fra.rpki-client.org