Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/w_ejTwA6_otT1chjTHckTrsopV0.roa
File: w_ejTwA6_otT1chjTHckTrsopV0.roa (raw, json)
Hash identifier: Dnbvphd05aALmJgmSnrAk5FgOXcVS9dun70wfMk0Uhc=
Subject key identifier: C3:F7:A3:4F:00:3A:FE:8B:53:D5:C8:63:4C:77:24:4E:BB:28:A5:5D
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 090D1E56
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/w_ejTwA6_otT1chjTHckTrsopV0.roa
Signing time: Sat 01 Jan 2022 15:55:10 +0000
ROA not before: Sat 01 Jan 2022 15:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137
IP address blocks: 192.146.242.0/24 maxlen: 24
192.160.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151854678 (0x90d1e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Jan 1 15:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3f7a34f003afe8b53d5c8634c77244ebb28a55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:4a:9f:ea:55:e4:f3:2f:d7:16:ca:e6:c3:
db:99:37:c8:14:a4:0e:09:6e:88:57:a4:4b:c7:3b:
bc:f2:3a:31:21:8b:1c:1d:11:04:08:2b:d6:7d:0a:
5d:c9:0e:5f:75:13:ab:34:91:a1:10:0b:c7:00:92:
34:7b:72:0b:62:b8:73:7f:a6:da:c5:46:a9:6f:df:
b8:2a:33:88:7f:49:d8:4b:10:b3:f5:0b:d1:8c:00:
81:c1:23:10:49:ca:b7:68:11:8e:44:0c:4a:7f:10:
ab:42:c9:95:f9:fc:81:d9:0b:e1:2c:b6:b8:8d:aa:
fe:9f:b4:fd:26:0b:ef:20:ae:31:97:92:3b:ee:ba:
81:25:ff:f0:ff:eb:da:cf:8f:4e:e1:49:45:92:59:
bf:26:dc:69:78:b0:1a:9f:46:69:d3:43:9d:34:e3:
63:fa:8d:ac:c9:0f:a1:0d:eb:79:87:42:b4:48:2b:
0c:84:65:b7:fb:cc:4a:1b:be:7b:e8:d3:2a:f8:52:
5f:96:a9:cf:88:6b:41:06:01:45:fd:da:a7:94:f2:
60:45:d8:54:27:96:4b:62:09:60:ce:b0:2d:15:1e:
9f:f1:c9:a4:40:24:ec:7c:19:a3:1e:3c:d9:cf:10:
6a:9f:91:10:cd:a8:06:d8:b5:0b:72:c8:fa:f9:76:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F7:A3:4F:00:3A:FE:8B:53:D5:C8:63:4C:77:24:4E:BB:28:A5:5D
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/w_ejTwA6_otT1chjTHckTrsopV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.146.242.0/24
192.160.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1d:95:73:9f:ad:d3:52:c6:b9:68:98:80:4a:05:a8:75:1d:
34:f0:bb:36:37:f5:4f:42:1b:da:59:f7:93:10:5a:a6:be:1a:
5d:86:f1:97:ed:2f:88:b6:35:d0:bb:20:20:46:f0:08:5b:86:
a1:ab:bd:0f:e5:b2:3e:cf:5c:04:83:fb:1b:f3:86:8c:d2:f4:
10:81:a3:97:2d:dd:d8:68:00:43:f5:db:6a:e3:9d:50:3e:38:
66:8b:fd:d7:b9:08:69:4e:c1:aa:0a:c4:d0:c5:7d:9e:00:17:
4e:ec:f2:39:9b:6b:15:c0:5f:22:05:03:5c:03:8f:d8:d8:47:
4c:78:a4:4b:25:43:d3:7f:20:0c:59:6c:28:96:b2:d8:44:64:
17:bf:8d:9f:4f:ab:e8:97:60:b9:81:b3:3d:18:32:c6:1b:ab:
44:50:f4:8c:b5:f2:cb:69:ef:7e:b7:2c:07:6b:02:15:4a:c3:
da:7e:98:42:e3:01:60:e9:e4:13:c8:2e:30:f7:04:f4:07:49:
ea:f4:b9:f5:d9:64:14:1d:9d:75:63:ee:f8:7e:6f:da:44:43:
1c:d7:3e:89:63:6e:7a:31:86:25:30:f6:3a:d6:3b:71:b1:8d:
85:ba:b6:93:36:f0:0d:d2:56:61:78:58:43:ce:9e:de:65:10:
13:f4:c3:de
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECQ0eVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZWI2MTA1N2I4MjY1NDFkMjE2Y2Q1OTVjZjg2YzZhMDZmYjJhZTExMB4XDTIyMDEw
MTE1NTUxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzNmN2EzNGYwMDNh
ZmU4YjUzZDVjODYzNGM3NzI0NGViYjI4YTU1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJovSp/qVeTzL9cWyubD25k3yBSkDgluiFekS8c7vPI6MSGL
HB0RBAgr1n0KXckOX3UTqzSRoRALxwCSNHtyC2K4c3+m2sVGqW/fuCoziH9J2EsQ
s/UL0YwAgcEjEEnKt2gRjkQMSn8Qq0LJlfn8gdkL4Sy2uI2q/p+0/SYL7yCuMZeS
O+66gSX/8P/r2s+PTuFJRZJZvybcaXiwGp9GadNDnTTjY/qNrMkPoQ3reYdCtEgr
DIRlt/vMShu+e+jTKvhSX5apz4hrQQYBRf3ap5TyYEXYVCeWS2IJYM6wLRUen/HJ
pEAk7HwZox482c8Qap+REM2oBti1C3LI+vl2rwUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTD96NPADr+i1PVyGNMdyROuyilXTAfBgNVHSMEGDAWgBRuthBXuCZUHSFs
1ZXPhsagb7KuETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JyWVFWN2dtVkIwaGJOV1Z6NGJHb0cteXJoRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDMvNjZjYTY0LTZmY2UtNGI4NC04YzE1LWNiODY4MTI3YTliMS8x
L3dfZWpUd0E2X290VDFjaGpUSGNrVHJzb3BWMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMv
NjZjYTY0LTZmY2UtNGI4NC04YzE1LWNiODY4MTI3YTliMS8xL2JyWVFWN2dtVkIw
aGJOV1Z6NGJHb0cteXJoRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMCS8gMEAMCgnDANBgkqhkiG9w0B
AQsFAAOCAQEAbR2Vc5+t01LGuWiYgEoFqHUdNPC7Njf1T0Ib2ln3kxBapr4aXYbx
l+0viLY10LsgIEbwCFuGoau9D+WyPs9cBIP7G/OGjNL0EIGjly3d2GgAQ/XbauOd
UD44Zov917kIaU7BqgrE0MV9ngAXTuzyOZtrFcBfIgUDXAOP2NhHTHikSyVD038g
DFlsKJay2ERkF7+Nn0+r6JdguYGzPRgyxhurRFD0jLXyy2nvfrcsB2sCFUrD2n6Y
QuMBYOnkE8guMPcE9AdJ6vS59dlkFB2ddWPu+H5v2kRDHNc+iWNuejGGJTD2OtY7
cbGNhbq2kzbwDdJWYXhYQ86e3mUQE/TD3g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net