Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/eK6ZpHz3cDjWg0t5Dvc9af56QS8.roa
File: eK6ZpHz3cDjWg0t5Dvc9af56QS8.roa (raw, json)
Hash identifier: bbjxVPrrh2wbB7NJeKP9kXVvufuLOFQTzM0y6rU7Ge0=
Subject key identifier: 78:AE:99:A4:7C:F7:70:38:D6:83:4B:79:0E:F7:3D:69:FE:7A:41:2F
Certificate issuer: /CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Certificate serial: 0C81641C
Authority key identifier: 6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/eK6ZpHz3cDjWg0t5Dvc9af56QS8.roa
Signing time: Sat 01 Jan 2022 09:56:48 +0000
ROA not before: Sat 01 Jan 2022 09:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15693
IP address blocks: 195.191.120.0/23 maxlen: 23
46.183.248.0/21 maxlen: 21
185.29.62.0/23 maxlen: 23
185.29.60.0/24 maxlen: 24
2a01:8800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209806364 (0xc81641c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Validity
Not Before: Jan 1 09:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78ae99a47cf77038d6834b790ef73d69fe7a412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:47:90:ec:d0:e6:69:b6:b7:d3:61:0f:7d:
32:14:a4:d6:02:33:62:44:e3:d6:7c:53:8b:e7:20:
36:33:40:04:f7:60:59:cb:1c:06:c2:b8:f6:32:d4:
7b:93:5f:0e:75:3d:55:be:69:34:97:75:25:2f:c5:
55:70:6f:4d:3c:69:fa:8d:90:4b:58:12:77:3b:b8:
71:8a:ee:c0:45:68:ce:a4:a4:3a:6f:18:d0:f1:73:
14:6e:1d:70:ed:08:a2:9a:68:d7:e7:be:1f:53:ba:
9e:ec:71:ac:7d:ae:3e:a9:30:79:17:55:08:2c:d7:
18:c2:24:ca:6b:dc:93:27:97:68:c2:7f:90:79:a6:
54:e8:ce:5a:61:cd:82:43:1c:c9:0a:72:ce:80:cc:
5b:76:f4:5b:40:54:f0:56:76:5e:07:a4:5a:a1:23:
8e:46:aa:b2:9a:d0:f4:05:55:3b:0a:4f:a2:af:e2:
37:78:b8:a0:b3:ec:80:9e:70:a7:88:49:f6:87:dd:
2a:23:82:21:f5:41:b5:00:bc:00:7e:41:1d:61:8a:
c0:c8:e1:26:0a:20:d9:89:c7:52:a5:c8:85:2b:a2:
c2:94:a6:b4:46:5f:d9:98:d6:90:52:64:b8:8a:5d:
dc:a1:42:d7:4b:22:0e:99:dd:1c:b3:7e:64:a3:69:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AE:99:A4:7C:F7:70:38:D6:83:4B:79:0E:F7:3D:69:FE:7A:41:2F
X509v3 Authority Key Identifier:
keyid:6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/eK6ZpHz3cDjWg0t5Dvc9af56QS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.248.0/21
185.29.60.0/24
185.29.62.0/23
195.191.120.0/23
IPv6:
2a01:8800::/29
Signature Algorithm: sha256WithRSAEncryption
50:d4:b4:b3:d3:0f:c8:a5:da:5f:69:c4:81:79:c6:70:26:3b:
84:5f:ba:e0:39:9b:f9:fd:3f:0a:09:47:3f:b0:d8:13:d0:d3:
2e:60:8c:26:16:cd:45:e9:aa:13:67:bc:c4:bf:52:4d:f0:96:
ff:d5:46:41:e0:d3:11:72:20:05:f2:d6:cd:6e:eb:57:d1:fd:
eb:61:1d:87:ed:18:93:e1:f5:c9:45:f9:d3:cb:f3:79:1c:ed:
ef:ac:67:89:29:d0:4d:92:ed:2a:78:5f:e5:b6:75:6f:ed:4c:
21:a1:0f:f7:de:64:e7:e0:7e:64:b6:a4:5b:bc:6b:df:e3:77:
c6:04:cf:6e:46:86:e1:f6:dd:a1:2a:96:b2:5b:39:22:00:9b:
9f:78:07:f2:41:af:97:7a:d2:13:99:86:8e:d9:00:aa:df:49:
84:28:ff:1a:4a:a9:51:a7:7e:e4:a4:a3:65:51:17:7c:c9:75:
86:0a:2b:db:7a:48:3e:3c:e7:be:b2:80:a8:5b:bd:1e:3a:47:
07:10:f0:d4:05:d6:fe:ea:8c:46:30:9f:f3:52:5d:be:8f:61:
23:1a:c1:92:a6:9d:b6:bb:dd:eb:fd:71:34:b9:e0:c0:51:32:
39:60:f4:7a:a9:a2:7b:f5:f5:55:d4:54:71:e5:37:68:f3:60:
c3:39:cb:23
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEDIFkHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YTFhN2I4MGM2ODQ2Mjg1OTIzMmI4NmYyYjQ1MjY1OGQ4ZjdmODQ5MB4XDTIyMDEw
MTA5NTY0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzhhZTk5YTQ3Y2Y3
NzAzOGQ2ODM0Yjc5MGVmNzNkNjlmZTdhNDEyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDrR5Ds0OZptrfTYQ99MhSk1gIzYkTj1nxTi+cgNjNABPdg
WcscBsK49jLUe5NfDnU9Vb5pNJd1JS/FVXBvTTxp+o2QS1gSdzu4cYruwEVozqSk
Om8Y0PFzFG4dcO0Ioppo1+e+H1O6nuxxrH2uPqkweRdVCCzXGMIkymvckyeXaMJ/
kHmmVOjOWmHNgkMcyQpyzoDMW3b0W0BU8FZ2XgekWqEjjkaqsprQ9AVVOwpPoq/i
N3i4oLPsgJ5wp4hJ9ofdKiOCIfVBtQC8AH5BHWGKwMjhJgog2YnHUqXIhSuiwpSm
tEZf2ZjWkFJkuIpd3KFC10siDpndHLN+ZKNpNTECAwEAAaOCAiowggImMB0GA1Ud
DgQWBBR4rpmkfPdwONaDS3kO9z1p/npBLzAfBgNVHSMEGDAWgBRqGnuAxoRihZIy
uG8rRSZY2Pf4STAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FocDdnTWFFWW9XU01yaHZLMFVtV05qMy1Fay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2YvNDllOGQ2LWJiZjYtNGNhNy1iYTVkLWYxZDNjZmY1NTI3YS8x
L2VLNlpwSHozY0RqV2cwdDVEdmM5YWY1NlFTOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Yv
NDllOGQ2LWJiZjYtNGNhNy1iYTVkLWYxZDNjZmY1NTI3YS8xL2FocDdnTWFFWW9X
U01yaHZLMFVtV05qMy1Fay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAy63+AMEALkdPAMEAbkdPgMEAcO/
eDANBAIAAjAHAwUDKgGIADANBgkqhkiG9w0BAQsFAAOCAQEAUNS0s9MPyKXaX2nE
gXnGcCY7hF+64Dmb+f0/CglHP7DYE9DTLmCMJhbNRemqE2e8xL9STfCW/9VGQeDT
EXIgBfLWzW7rV9H962Edh+0Yk+H1yUX508vzeRzt76xniSnQTZLtKnhf5bZ1b+1M
IaEP995k5+B+ZLakW7xr3+N3xgTPbkaG4fbdoSqWsls5IgCbn3gH8kGvl3rSE5mG
jtkAqt9JhCj/GkqpUad+5KSjZVEXfMl1hgor23pIPjznvrKAqFu9HjpHBxDw1AXW
/uqMRjCf81Jdvo9hIxrBkqadtrvd6/1xNLngwFEyOWD0eqmie/X1VdRUceU3aPNg
wznLIw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net