Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/_6NkMrSFmoCUr5KNNDmNiV30CsQ.roa
File: _6NkMrSFmoCUr5KNNDmNiV30CsQ.roa (raw, json)
Hash identifier: SVsHCuEx33U+JPm8O1AIzBTK1DjoM3MY8IHuoncYq7Y=
Subject key identifier: FF:A3:64:32:B4:85:9A:80:94:AF:92:8D:34:39:8D:89:5D:F4:0A:C4
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0182E891DCAAE2DD58676E5A797BD06D537F
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/_6NkMrSFmoCUr5KNNDmNiV30CsQ.roa
Signing time: Mon 29 Aug 2022 07:47:29 +0000
ROA not before: Mon 29 Aug 2022 07:47:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36351
IP address blocks: 89.46.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:91:dc:aa:e2:dd:58:67:6e:5a:79:7b:d0:6d:53:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 29 07:47:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffa36432b4859a8094af928d34398d895df40ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:07:d3:ee:25:6a:4e:38:b6:7a:46:82:a1:
45:62:14:a7:e7:01:a2:3d:e5:0f:82:ff:1a:03:5f:
7c:e1:4e:78:a1:c4:c5:6d:32:3a:50:52:8c:a5:57:
3c:2a:95:cc:b6:c9:d7:54:ac:27:be:15:40:1e:c8:
37:0a:a2:59:ae:75:03:32:bc:92:f4:71:9e:c7:38:
41:55:8a:76:13:1d:e4:44:48:dd:5f:57:90:a6:e0:
26:6c:f3:7f:b4:29:8f:7f:bc:b5:ef:c3:b1:f9:91:
e9:0c:ca:17:11:75:cd:55:fb:e8:8b:4e:e8:f6:93:
bc:94:35:94:0c:52:43:98:53:42:3f:80:79:ca:3b:
86:84:b4:3b:d8:f8:05:06:20:0a:af:91:e4:4f:82:
68:b5:b8:2f:ba:3f:4d:8a:42:c9:a9:44:c9:98:d5:
f9:8a:28:3e:0d:3d:37:01:c1:c2:34:04:25:fd:dd:
5b:7b:eb:42:f2:74:99:20:b0:4f:64:64:00:ff:7c:
95:12:74:0c:26:00:82:e5:5e:4d:5c:50:8e:40:ce:
39:e9:4a:66:98:fb:68:a5:e2:0c:e6:28:00:fd:9f:
c6:53:a0:3f:7f:58:58:8b:cd:d7:7e:a9:be:dc:61:
fc:a6:f4:3e:e2:23:bb:49:ed:fb:f9:51:27:ce:2f:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A3:64:32:B4:85:9A:80:94:AF:92:8D:34:39:8D:89:5D:F4:0A:C4
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/_6NkMrSFmoCUr5KNNDmNiV30CsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:49:76:36:43:8f:fd:4f:ff:0f:e6:89:f9:b5:69:fa:8f:3e:
70:5a:75:f7:fb:ae:e5:66:2e:e8:7c:0f:e4:aa:62:f1:91:fc:
0c:c7:f2:fe:80:46:21:5a:a7:21:d1:40:c0:01:10:f4:9d:af:
b8:a8:27:f0:75:37:84:d9:1f:80:d2:d3:09:08:c3:14:36:ae:
15:f5:93:21:22:94:49:73:63:96:92:cf:26:1f:86:47:1c:02:
2b:97:cf:fa:0d:db:0e:9d:e3:9b:36:4b:5d:40:ef:ba:4f:00:
24:ec:55:ee:a0:17:5c:1c:2b:44:2a:f2:7a:2e:fe:3f:7f:88:
bc:3a:9f:fa:56:4c:66:71:f0:a3:29:11:c6:cf:07:26:ac:60:
f5:27:9e:ee:32:84:b8:96:05:f8:14:4c:e0:73:bb:7d:2f:10:
bd:e1:03:24:6c:de:5f:32:7c:ca:73:25:6e:a7:28:18:71:71:
89:5b:a2:24:71:f1:fe:e5:9b:58:3f:a2:ac:0c:d9:de:6a:0a:
a2:83:32:2f:cd:46:6f:88:0b:02:7b:8d:1b:c0:39:04:76:f2:
5c:bc:ec:96:ba:b1:05:2a:2f:ac:a4:6a:e9:9e:d5:d5:b8:05:
4e:76:51:a9:61:73:b4:b4:9e:4c:8b:f6:3e:1a:27:87:a2:5a:
75:32:89:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLokdyq4t1YZ25aeXvQbVN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjIwODI5MDc0NzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmEzNjQzMmI0ODU5YTgwOTRhZjkyOGQzNDM5OGQ4OTVkZjQwYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAongH0+4lak44tnpGgqFFYhSn5wGi
PeUPgv8aA1984U54ocTFbTI6UFKMpVc8KpXMtsnXVKwnvhVAHsg3CqJZrnUDMryS
9HGexzhBVYp2Ex3kREjdX1eQpuAmbPN/tCmPf7y178Ox+ZHpDMoXEXXNVfvoi07o
9pO8lDWUDFJDmFNCP4B5yjuGhLQ72PgFBiAKr5HkT4Jotbgvuj9NikLJqUTJmNX5
iig+DT03AcHCNAQl/d1be+tC8nSZILBPZGQA/3yVEnQMJgCC5V5NXFCOQM456Upm
mPtopeIM5igA/Z/GU6A/f1hYi83Xfqm+3GH8pvQ+4iO7Se37+VEnzi87wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP+jZDK0hZqAlK+SjTQ5jYld9ArEMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvXzZOa01yU0Ztb0NVcjVLTk5EbU5pVjMwQ3NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS4JMA0G
CSqGSIb3DQEBCwUAA4IBAQBMSXY2Q4/9T/8P5on5tWn6jz5wWnX3+67lZi7ofA/k
qmLxkfwMx/L+gEYhWqch0UDAARD0na+4qCfwdTeE2R+A0tMJCMMUNq4V9ZMhIpRJ
c2OWks8mH4ZHHAIrl8/6DdsOneObNktdQO+6TwAk7FXuoBdcHCtEKvJ6Lv4/f4i8
Op/6VkxmcfCjKRHGzwcmrGD1J57uMoS4lgX4FEzgc7t9LxC94QMkbN5fMnzKcyVu
pygYcXGJW6IkcfH+5ZtYP6KsDNneagqigzIvzUZviAsCe40bwDkEdvJcvOyWurEF
Ki+spGrpntXVuAVOdlGpYXO0tJ5Mi/Y+GieHolp1MokB
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net