Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/c6XpWbRocI7YergK8A0L8caf81g.roa
File: c6XpWbRocI7YergK8A0L8caf81g.roa (raw, json)
Hash identifier: ue+ulsufQyi82TPuFeWaFqoSuIjybJHmqHUEtrLiVZg=
Subject key identifier: 73:A5:E9:59:B4:68:70:8E:D8:7A:B8:0A:F0:0D:0B:F1:C6:9F:F3:58
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 099B5574
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/c6XpWbRocI7YergK8A0L8caf81g.roa
Signing time: Sat 01 Jan 2022 16:05:24 +0000
ROA not before: Sat 01 Jan 2022 16:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 185.84.182.0/24 maxlen: 24
185.84.181.0/24 maxlen: 24
185.84.180.0/24 maxlen: 24
185.84.183.0/24 maxlen: 24
2a05:a740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161174900 (0x99b5574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jan 1 16:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73a5e959b468708ed87ab80af00d0bf1c69ff358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:36:07:0c:d9:26:ba:f7:65:bd:13:fa:a5:
bf:d5:18:72:76:25:f0:9a:fa:ed:04:98:42:c7:5a:
2c:36:94:c5:8a:a0:ab:5a:85:4e:c7:00:08:ed:a2:
4f:01:9a:a2:d2:0d:c0:7e:91:3f:e6:6f:9d:3f:98:
44:65:7c:3f:22:81:ee:e4:5d:5e:49:fc:c5:8e:42:
be:19:85:45:e8:aa:8d:3d:58:67:02:5a:9d:bf:00:
0c:e0:49:c8:76:2d:88:aa:d0:bb:37:8a:f0:ca:29:
72:c7:29:b5:1f:c5:c7:f6:8b:03:6e:ee:a2:af:e8:
78:05:b7:d7:0a:cb:8e:14:72:eb:2e:9d:29:30:6d:
a8:2b:91:67:66:f1:ef:2e:aa:b6:21:f4:50:1b:ae:
cf:85:47:35:62:70:f0:47:5a:9a:5e:6a:1b:ef:ff:
59:aa:0d:56:8d:15:12:a7:cb:b5:55:20:c6:76:9f:
a2:76:78:c3:90:47:60:9a:60:93:bd:16:0a:c6:dc:
29:16:e2:c3:e7:f4:12:60:67:22:57:bc:2b:b8:73:
f0:ed:53:c6:31:53:87:ce:dd:e0:3b:c5:0a:02:ec:
38:c5:fb:aa:33:c2:05:b6:46:b4:c7:50:57:50:89:
d7:77:bf:cd:7f:80:ab:7e:4d:50:ae:dc:81:44:c7:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A5:E9:59:B4:68:70:8E:D8:7A:B8:0A:F0:0D:0B:F1:C6:9F:F3:58
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/c6XpWbRocI7YergK8A0L8caf81g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.180.0/22
IPv6:
2a05:a740::/29
Signature Algorithm: sha256WithRSAEncryption
1d:6d:5c:5b:1b:8a:6f:79:e8:d1:23:6a:8d:84:fe:eb:9d:45:
30:01:b1:e8:c3:fb:16:c8:bd:cd:a1:00:e4:90:fd:07:bd:63:
b6:a1:25:57:f8:f5:ba:27:37:67:54:c1:9d:fc:eb:8d:81:1e:
57:48:bf:e5:7c:da:cf:bb:89:53:cb:31:15:00:a8:02:eb:5e:
74:19:2f:28:7a:fb:fd:96:64:68:c3:c4:42:da:0e:b1:69:97:
9a:0e:ae:92:12:f2:2c:9f:2f:d7:3f:55:4e:18:6c:ec:e9:9f:
f8:d4:95:c9:b0:2d:17:7b:d9:5f:eb:4f:e0:25:72:2a:d8:d7:
53:58:c7:39:a6:35:d3:94:bb:10:2a:47:13:db:24:db:99:60:
17:c5:a1:75:de:29:ef:8a:d4:6e:3d:71:6a:b9:fe:f0:46:eb:
55:80:97:4a:b2:d0:05:d5:2d:cd:11:85:f6:3f:49:cc:2d:a6:
ee:19:53:8b:2d:9d:aa:dd:17:e2:58:90:55:4c:8b:97:3d:af:
4d:a9:fc:97:76:00:92:4d:8a:99:2a:79:b6:b9:60:a6:de:2a:
cf:a8:e7:8b:c7:f2:7c:d4:7e:fc:f0:70:a0:d7:2d:05:77:ee:
0b:fd:64:e2:18:7a:40:2d:c2:69:b5:46:36:6b:2f:6c:ee:66:
cb:a3:9b:0e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECZtVdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OTI1Mzg4NmEwMjUwYTA0ZWM2OWJlMDBiYmY4NDMzYzJmMDE0YjdjMB4XDTIyMDEw
MTE2MDUyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzNhNWU5NTliNDY4
NzA4ZWQ4N2FiODBhZjAwZDBiZjFjNjlmZjM1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI+bNgcM2Sa692W9E/qlv9UYcnYl8Jr67QSYQsdaLDaUxYqg
q1qFTscACO2iTwGaotINwH6RP+ZvnT+YRGV8PyKB7uRdXkn8xY5CvhmFReiqjT1Y
ZwJanb8ADOBJyHYtiKrQuzeK8MopcscptR/Fx/aLA27uoq/oeAW31wrLjhRy6y6d
KTBtqCuRZ2bx7y6qtiH0UBuuz4VHNWJw8Edaml5qG+//WaoNVo0VEqfLtVUgxnaf
onZ4w5BHYJpgk70WCsbcKRbiw+f0EmBnIle8K7hz8O1TxjFTh87d4DvFCgLsOMX7
qjPCBbZGtMdQV1CJ13e/zX+Aq35NUK7cgUTHGyECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRzpelZtGhwjth6uArwDQvxxp/zWDAfBgNVHSMEGDAWgBQJJTiGoCUKBOxp
vgC7+EM8LwFLfDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NTVTRocUFsQ2dUc2FiNEF1X2hEUEM4QlMzdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvMzZmODNlLTZiZTYtNDJjNS04MzgwLTExNGFkNDFjZjMzMS8x
L2M2WHBXYlJvY0k3WWVyZ0s4QTBMOGNhZjgxZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
MzZmODNlLTZiZTYtNDJjNS04MzgwLTExNGFkNDFjZjMzMS8xL0NTVTRocUFsQ2dU
c2FiNEF1X2hEUEM4QlMzdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlUtDANBAIAAjAHAwUDKgWnQDAN
BgkqhkiG9w0BAQsFAAOCAQEAHW1cWxuKb3no0SNqjYT+651FMAGx6MP7Fsi9zaEA
5JD9B71jtqElV/j1uic3Z1TBnfzrjYEeV0i/5Xzaz7uJU8sxFQCoAutedBkvKHr7
/ZZkaMPEQtoOsWmXmg6ukhLyLJ8v1z9VThhs7Omf+NSVybAtF3vZX+tP4CVyKtjX
U1jHOaY105S7ECpHE9sk25lgF8Whdd4p74rUbj1xarn+8EbrVYCXSrLQBdUtzRGF
9j9JzC2m7hlTiy2dqt0X4liQVUyLlz2vTan8l3YAkk2KmSp5trlgpt4qz6jni8fy
fNR+/PBwoNctBXfuC/1k4hh6QC3CabVGNmsvbO5my6ObDg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net