Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/6oom0ET1XSuC2Co47LcakVwYGqs.roa
File: 6oom0ET1XSuC2Co47LcakVwYGqs.roa (raw, json)
Hash identifier: 13CeXlSFUQmSdPEBNFR1XyXbslHuvzOtPIVnRX61gdA=
Subject key identifier: EA:8A:26:D0:44:F5:5D:2B:82:D8:2A:38:EC:B7:1A:91:5C:18:1A:AB
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 0181FC10D2FFF5C2BA052B829BAA2FAA5C74
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/6oom0ET1XSuC2Co47LcakVwYGqs.roa
Signing time: Thu 14 Jul 2022 09:36:09 +0000
ROA not before: Thu 14 Jul 2022 09:36:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213155
IP address blocks: 5.204.0.0/16 maxlen: 16
84.225.128.0/18 maxlen: 18
176.226.0.0/17 maxlen: 17
37.234.0.0/16 maxlen: 16
176.77.128.0/17 maxlen: 17
91.104.0.0/16 maxlen: 16
84.224.0.0/16 maxlen: 16
84.225.0.0/17 maxlen: 17
2a0a:f640::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:10:d2:ff:f5:c2:ba:05:2b:82:9b:aa:2f:aa:5c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Jul 14 09:36:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea8a26d044f55d2b82d82a38ecb71a915c181aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:67:88:c6:ac:55:73:87:e9:9b:70:95:16:
05:ee:9f:ef:88:88:88:0f:68:f5:56:2e:b6:2d:cc:
a5:10:7f:1f:e0:f6:6d:82:94:cb:fc:49:d2:49:84:
53:04:3e:57:cb:e1:ca:4f:46:13:21:b3:4a:f9:9c:
c9:39:51:8d:20:a6:5e:5f:27:e8:e2:f0:eb:6f:31:
a7:a9:c5:0f:fb:f4:ad:48:75:7b:64:87:63:31:08:
20:41:9a:ac:a0:f4:d8:4f:fd:3e:aa:f8:8f:a4:93:
7d:43:0b:26:3e:c4:c8:f5:4e:72:43:ca:91:0c:41:
44:99:47:45:d8:9b:ac:80:0c:ec:77:fc:6a:8e:ac:
b4:56:42:ec:1e:87:6e:7b:9a:3f:74:d6:0c:c1:d3:
83:78:63:1d:ef:65:27:42:49:84:73:e5:dd:90:44:
cf:f6:06:62:65:7c:a6:48:c2:3b:cf:b2:87:07:85:
15:b5:22:89:14:57:23:1b:28:20:f9:de:6b:03:37:
90:1d:c7:b7:54:a3:91:e4:bc:3f:40:f0:4a:cc:a8:
32:18:3e:a3:9e:99:77:5c:68:30:34:8c:14:c3:89:
f7:a6:1f:ff:5f:a6:e7:61:25:59:fe:02:71:76:02:
dc:60:c6:9c:09:5c:26:26:3d:d2:18:f0:f4:84:ed:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:26:D0:44:F5:5D:2B:82:D8:2A:38:EC:B7:1A:91:5C:18:1A:AB
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/6oom0ET1XSuC2Co47LcakVwYGqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.204.0.0/16
37.234.0.0/16
84.224.0.0-84.225.191.255
91.104.0.0/16
176.77.128.0/17
176.226.0.0/17
IPv6:
2a0a:f640::/32
Signature Algorithm: sha256WithRSAEncryption
01:f5:2d:7b:ec:5b:85:8a:b4:30:c9:c8:84:74:4d:36:87:67:
58:9c:b4:49:b6:c7:c4:72:91:00:5d:a2:13:ca:df:60:56:a4:
22:03:c2:69:82:d1:b8:80:bf:96:93:0b:1b:ca:10:01:4d:1c:
61:d0:ff:98:f4:d1:d4:c2:38:95:36:92:30:af:19:09:1d:a4:
9a:a4:cb:3f:af:00:e2:00:93:b1:65:40:fb:31:d7:99:57:a7:
6b:0c:8d:c1:73:1e:c8:da:6f:2b:a8:be:a2:70:99:59:05:f6:
78:96:d1:52:ab:28:21:97:01:0e:31:66:08:42:96:d2:f5:c2:
4f:d2:e8:4e:92:6b:d7:7d:ca:a3:bd:b3:d5:4a:58:2f:aa:94:
0c:58:7b:fc:3b:4d:bc:52:04:b9:0c:32:74:1f:6b:16:db:fc:
63:e2:a6:74:79:1b:00:e7:0f:5e:d0:cb:f8:28:fc:93:92:b7:
a7:5f:dd:50:b7:eb:06:ae:eb:16:d4:b5:d4:51:8b:71:8d:47:
35:50:64:d4:b3:c0:6e:b6:3b:fc:f2:c0:1b:25:32:02:40:ec:
ab:09:a7:ac:84:e6:7c:78:d5:22:17:63:04:e8:1e:27:d3:17:
a1:1b:d9:0b:9e:7f:fc:5e:1a:7c:23:30:f3:eb:48:99:df:4d:
f9:13:ab:d2
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYH8ENL/9cK6BSuCm6ovqlx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2Y0Mzg4YWFkZjBhZTRmZjVlZTdiZDM3MjYzYzlmMWU4
NDY3YzcwHhcNMjIwNzE0MDkzNjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYThhMjZkMDQ0ZjU1ZDJiODJkODJhMzhlY2I3MWE5MTVjMTgxYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApztniMasVXOH6ZtwlRYF7p/viIiI
D2j1Vi62LcylEH8f4PZtgpTL/EnSSYRTBD5Xy+HKT0YTIbNK+ZzJOVGNIKZeXyfo
4vDrbzGnqcUP+/StSHV7ZIdjMQggQZqsoPTYT/0+qviPpJN9QwsmPsTI9U5yQ8qR
DEFEmUdF2JusgAzsd/xqjqy0VkLsHodue5o/dNYMwdODeGMd72UnQkmEc+XdkETP
9gZiZXymSMI7z7KHB4UVtSKJFFcjGygg+d5rAzeQHce3VKOR5Lw/QPBKzKgyGD6j
npl3XGgwNIwUw4n3ph//X6bnYSVZ/gJxdgLcYMacCVwmJj3SGPD0hO26CwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFOqKJtBE9V0rgtgqOOy3GpFcGBqrMB8GA1UdIwQY
MBaAFMU/Q4iq3wrk/17nvTcmPJ8ehGfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUt
ZGRhMzUwYjExZjAyLzEvNm9vbTBFVDFYU3VDMkNvNDdMY2FrVndZR3FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUtZGRhMzUwYjExZjAy
LzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoAwMABcwDAwAl
6jALAwMFVOADBAZU4YADAwBbaAMEB7BNgAMEB7DiADANBAIAAjAHAwUAKgr2QDAN
BgkqhkiG9w0BAQsFAAOCAQEAAfUte+xbhYq0MMnIhHRNNodnWJy0SbbHxHKRAF2i
E8rfYFakIgPCaYLRuIC/lpMLG8oQAU0cYdD/mPTR1MI4lTaSMK8ZCR2kmqTLP68A
4gCTsWVA+zHXmVenawyNwXMeyNpvK6i+onCZWQX2eJbRUqsoIZcBDjFmCEKW0vXC
T9LoTpJr133Ko72z1UpYL6qUDFh7/DtNvFIEuQwydB9rFtv8Y+KmdHkbAOcPXtDL
+Cj8k5K3p1/dULfrBq7rFtS11FGLcY1HNVBk1LPAbrY7/PLAGyUyAkDsqwmnrITm
fHjVIhdjBOgeJ9MXoRvZC55//F4afCMw8+tImd9N+ROr0g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:53 2024 by rpki-client on console-fra.rpki-client.org