Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/4Wvp72z9sSyzjbPk8UGNfirJNAI.roa
File: 4Wvp72z9sSyzjbPk8UGNfirJNAI.roa (raw, json)
Hash identifier: 8e2oAv1LWeO8FVkTvdNdr9W+nfe+cYTkX8ZNZFyo+Vc=
Subject key identifier: E1:6B:E9:EF:6C:FD:B1:2C:B3:8D:B3:E4:F1:41:8D:7E:2A:C9:34:02
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 018C6DBBFF885D9ADC6082F0FEE461325890
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/4Wvp72z9sSyzjbPk8UGNfirJNAI.roa
Signing time: Fri 15 Dec 2023 13:48:06 +0000
ROA not before: Fri 15 Dec 2023 13:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47526
IP address blocks: 86.109.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:bb:ff:88:5d:9a:dc:60:82:f0:fe:e4:61:32:58:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Dec 15 13:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e16be9ef6cfdb12cb38db3e4f1418d7e2ac93402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:35:45:ea:15:c5:a2:c8:2b:7a:4c:6b:81:
a3:2b:15:54:85:0b:b0:22:35:f2:7b:33:cf:48:5d:
c0:eb:e4:c6:89:c3:02:62:97:23:61:f4:ff:63:8c:
26:55:4d:13:e6:79:ff:b3:81:b9:fd:01:4f:e4:06:
4b:76:9d:1e:68:0a:e6:1c:3c:a7:9b:6d:59:b3:b7:
81:3d:1a:61:62:15:58:e5:ae:aa:50:10:9c:68:7e:
1b:b8:47:6a:fa:8b:ac:b9:7c:56:f8:fd:a1:36:47:
db:70:67:6d:5b:8d:3d:a1:fa:20:39:f8:45:e1:26:
25:71:75:4b:72:b9:28:f9:01:d3:fe:ae:6d:22:de:
6c:ab:f1:52:f8:48:52:8a:b6:9a:74:25:53:79:13:
15:e3:16:f3:b3:c9:44:aa:da:15:4b:9b:d3:cc:4c:
d5:59:9d:43:2c:70:32:5f:44:4b:76:1a:e4:7e:d4:
e6:45:e3:25:1b:4c:53:6c:f4:42:6d:9f:da:80:02:
df:08:32:0c:ee:d9:e8:0f:c5:8d:4b:22:4d:18:29:
93:9e:a7:ea:70:c4:de:a8:59:cc:c2:31:48:46:1d:
a7:be:de:03:ff:33:dc:06:45:46:c0:aa:a2:69:20:
a1:79:af:11:93:d0:fd:3c:54:e7:e1:6a:76:40:5b:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6B:E9:EF:6C:FD:B1:2C:B3:8D:B3:E4:F1:41:8D:7E:2A:C9:34:02
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/4Wvp72z9sSyzjbPk8UGNfirJNAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.231.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7c:7e:3a:f6:94:5d:da:0f:64:9a:01:36:c4:22:2f:a5:3f:
02:9b:a5:fd:d7:45:15:e5:f8:85:08:02:e6:44:b6:a8:6f:10:
30:d2:4e:2b:bb:7e:46:5c:92:08:d2:c2:10:76:24:b1:75:7a:
86:b7:fa:0c:05:52:a1:e4:bf:2d:71:8d:bf:98:d8:f1:26:4d:
42:08:6d:8e:78:94:a7:1b:6f:2a:f7:59:25:ee:3a:1c:31:aa:
38:5e:e2:bb:07:ab:d8:9b:48:f8:e8:ee:a1:6c:0e:3a:38:bd:
9e:1a:55:2d:7f:a7:46:76:53:cf:b1:e0:61:fb:a5:dc:19:82:
e3:ed:89:a0:97:36:6e:0d:18:51:f3:2f:be:8c:2c:be:e9:30:
b8:db:e1:b2:0b:f3:0a:c7:59:55:74:a2:52:0c:c0:23:74:05:
95:fb:5b:6a:4c:00:e9:ad:99:bb:44:76:ac:10:93:c7:28:c8:
2e:c2:76:b5:94:91:88:a2:a5:b2:43:1d:e5:0a:3e:0f:7d:53:
ab:07:b0:e3:9d:99:7f:f4:8e:ba:52:c7:91:e0:b7:2d:bd:ed:
71:59:9a:22:7f:e7:11:5c:2b:08:59:d4:e0:93:dc:13:43:7a:
c0:6c:95:a1:18:7c:db:c7:97:49:76:9e:5f:1c:79:4f:6f:6b:
3b:5d:70:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxtu/+IXZrcYILw/uRhMliQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzNlNmNiMmViMDJmY2M3NDJiYWY5MWFiODY1YzliMjBk
NjQ4NGIwHhcNMjMxMjE1MTM0ODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTZiZTllZjZjZmRiMTJjYjM4ZGIzZTRmMTQxOGQ3ZTJhYzkzNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjI1ReoVxaLIK3pMa4GjKxVUhQuw
IjXyezPPSF3A6+TGicMCYpcjYfT/Y4wmVU0T5nn/s4G5/QFP5AZLdp0eaArmHDyn
m21Zs7eBPRphYhVY5a6qUBCcaH4buEdq+ousuXxW+P2hNkfbcGdtW409ofogOfhF
4SYlcXVLcrko+QHT/q5tIt5sq/FS+EhSiraadCVTeRMV4xbzs8lEqtoVS5vTzEzV
WZ1DLHAyX0RLdhrkftTmReMlG0xTbPRCbZ/agALfCDIM7tnoD8WNSyJNGCmTnqfq
cMTeqFnMwjFIRh2nvt4D/zPcBkVGwKqiaSChea8Rk9D9PFTn4Wp2QFuYMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFr6e9s/bEss42z5PFBjX4qyTQCMB8GA1UdIwQY
MBaAFGvD5ssusC/MdCuvkauGXJsg1khLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYt
MTEwOThhYTJlYmMzLzEvNFd2cDcyejlzU3l6amJQazhVR05maXJKTkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYtMTEwOThhYTJlYmMz
LzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm3nMA0G
CSqGSIb3DQEBCwUAA4IBAQCsfH469pRd2g9kmgE2xCIvpT8Cm6X910UV5fiFCALm
RLaobxAw0k4ru35GXJII0sIQdiSxdXqGt/oMBVKh5L8tcY2/mNjxJk1CCG2OeJSn
G28q91kl7jocMao4XuK7B6vYm0j46O6hbA46OL2eGlUtf6dGdlPPseBh+6XcGYLj
7YmglzZuDRhR8y++jCy+6TC42+GyC/MKx1lVdKJSDMAjdAWV+1tqTADprZm7RHas
EJPHKMguwna1lJGIoqWyQx3lCj4PfVOrB7DjnZl/9I66UseR4Lctve1xWZoif+cR
XCsIWdTgk9wTQ3rAbJWhGHzbx5dJdp5fHHlPb2s7XXAG
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:55 2025 by rpki-client