Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/5eTH8C3DEEeOgXu-0Jntmq4vqSc.roa
File: 5eTH8C3DEEeOgXu-0Jntmq4vqSc.roa (raw, json)
Hash identifier: Os+aY37aKnHrEj/IZs589PquESyacgqvy3k7a9bciRE=
Subject key identifier: E5:E4:C7:F0:2D:C3:10:47:8E:81:7B:BE:D0:99:ED:9A:AE:2F:A9:27
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 01839DCAAC1BD67ADCD8A68D114E6A6406B4
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/5eTH8C3DEEeOgXu-0Jntmq4vqSc.roa
Signing time: Mon 03 Oct 2022 12:20:48 +0000
ROA not before: Mon 03 Oct 2022 12:20:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61098
IP address blocks: 91.92.116.0/23 maxlen: 23
91.92.227.0/24 maxlen: 24
194.182.176.0/22 maxlen: 22
85.217.186.0/23 maxlen: 23
85.217.184.0/23 maxlen: 23
2a04:c47::/32 maxlen: 32
2a04:c41::/32 maxlen: 32
2a07:6cc0:60::/48 maxlen: 48
2a04:c47:f12::/48 maxlen: 48
2a07:6cc1::/32 maxlen: 32
2a04:c47:f11::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:ca:ac:1b:d6:7a:dc:d8:a6:8d:11:4e:6a:64:06:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Oct 3 12:20:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5e4c7f02dc310478e817bbed099ed9aae2fa927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:52:d7:d1:6f:ef:14:8c:59:a1:c7:ae:4b:
65:5a:6c:91:45:2c:a7:2d:48:4c:e7:8b:67:b3:35:
75:bb:01:bb:f5:8f:1d:37:53:b5:51:4b:26:26:bb:
6b:84:9d:e3:a4:9f:ef:58:ca:58:a5:58:01:62:bd:
8c:a0:a4:3a:b6:b8:97:43:4b:45:5d:10:cc:4e:4c:
b4:06:56:bc:e9:d7:19:8d:cf:58:8b:98:3d:e5:aa:
2c:c4:95:3f:57:93:cd:fb:61:de:21:73:ad:60:0c:
e6:08:e7:43:9a:bd:d6:1c:aa:fa:ba:52:67:a7:38:
b4:8a:82:21:02:22:f5:2d:ec:d7:36:67:6b:a6:72:
a4:4f:4e:9b:f2:c8:60:79:c4:56:d2:d2:7f:a2:a5:
18:c0:7f:b3:f8:65:33:79:42:c4:81:9f:df:1a:1e:
7a:0d:20:d6:aa:1b:34:2e:4d:ac:3f:0a:fc:53:d3:
c0:2b:b3:ea:4c:7e:af:f7:a8:bc:44:18:6d:4c:ae:
c5:6d:1d:b4:9e:ea:61:98:a9:96:6f:ef:1e:8c:f3:
56:72:4d:0e:96:56:89:fb:61:cd:bc:5f:22:d6:72:
e8:71:0f:1f:75:c3:0d:9e:7b:7d:bc:25:0e:54:9e:
1c:62:77:23:45:25:a0:ec:a6:b8:88:48:ef:2d:fb:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E4:C7:F0:2D:C3:10:47:8E:81:7B:BE:D0:99:ED:9A:AE:2F:A9:27
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/5eTH8C3DEEeOgXu-0Jntmq4vqSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.184.0/22
91.92.116.0/23
91.92.227.0/24
194.182.176.0/22
IPv6:
2a04:c41::/32
2a04:c47::/32
2a07:6cc0:60::/48
2a07:6cc1::/32
Signature Algorithm: sha256WithRSAEncryption
86:77:e9:31:9e:c6:69:4d:c5:b4:57:cc:29:0c:64:eb:08:ba:
37:2d:a8:38:ca:af:d3:84:5a:84:1c:c6:e6:a7:8e:34:7d:10:
50:72:ce:ba:c3:a2:2b:a3:7a:c2:63:42:51:10:6a:82:ee:b9:
95:66:60:4f:de:05:5d:1c:8a:84:e9:ca:c5:ed:31:b0:ac:23:
62:50:32:67:a4:a0:0c:67:fa:da:a5:9b:a1:27:2e:2f:91:bb:
8d:1f:5b:94:ef:96:f1:c5:32:3b:e1:47:c0:fb:17:e7:c2:b4:
9c:ae:fd:82:6a:7c:ae:72:3a:f5:0e:b1:ba:ba:ba:9e:1e:07:
ff:77:30:84:c1:f5:22:83:8f:60:5d:2c:d6:b2:74:4a:0a:d7:
45:70:71:03:0a:91:f2:d1:d2:19:d6:7e:c1:54:38:45:c7:70:
ce:41:7a:73:d8:da:ca:57:3d:a6:00:79:04:d0:a2:d1:0c:3e:
d4:4f:46:42:a1:1a:7e:34:3d:93:a9:99:bc:cb:66:81:c7:e6:
7a:71:bf:44:88:8c:94:d2:e6:df:c5:8d:01:71:a6:22:50:fb:
0e:63:dc:aa:79:a8:58:1f:8a:2d:ab:0a:c4:26:36:17:61:55:
9b:d8:b2:af:cd:1d:7d:30:a4:33:a3:db:d7:2e:0d:bf:7f:15:
f5:89:d7:4a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYOdyqwb1nrc2KaNEU5qZAa0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy
ODQyOGMwHhcNMjIxMDAzMTIyMDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWU0YzdmMDJkYzMxMDQ3OGU4MTdiYmVkMDk5ZWQ5YWFlMmZhOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KpS19Fv7xSMWaHHrktlWmyRRSyn
LUhM54tnszV1uwG79Y8dN1O1UUsmJrtrhJ3jpJ/vWMpYpVgBYr2MoKQ6triXQ0tF
XRDMTky0Bla86dcZjc9Yi5g95aosxJU/V5PN+2HeIXOtYAzmCOdDmr3WHKr6ulJn
pzi0ioIhAiL1LezXNmdrpnKkT06b8shgecRW0tJ/oqUYwH+z+GUzeULEgZ/fGh56
DSDWqhs0Lk2sPwr8U9PAK7PqTH6v96i8RBhtTK7FbR20nuphmKmWb+8ejPNWck0O
llaJ+2HNvF8i1nLocQ8fdcMNnnt9vCUOVJ4cYncjRSWg7Ka4iEjvLfuXSwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFOXkx/AtwxBHjoF7vtCZ7ZquL6knMB8GA1UdIwQY
MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt
NmU0NTI0MjVhMTkzLzEvNWVUSDhDM0RFRWVPZ1h1LTBKbnRtcTR2cVNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz
LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAeBAIAATAYAwQCVdm4AwQB
W1x0AwQAW1zjAwQCwrawMCQEAgACMB4DBQAqBAxBAwUAKgQMRwMHACoHbMAAYAMF
ACoHbMEwDQYJKoZIhvcNAQELBQADggEBAIZ36TGexmlNxbRXzCkMZOsIujctqDjK
r9OEWoQcxuanjjR9EFByzrrDoiujesJjQlEQaoLuuZVmYE/eBV0cioTpysXtMbCs
I2JQMmekoAxn+tqlm6EnLi+Ru40fW5TvlvHFMjvhR8D7F+fCtJyu/YJqfK5yOvUO
sbq6up4eB/93MITB9SKDj2BdLNaydEoK10VwcQMKkfLR0hnWfsFUOEXHcM5BenPY
2spXPaYAeQTQotEMPtRPRkKhGn40PZOpmbzLZoHH5npxv0SIjJTS5t/FjQFxpiJQ
+w5j3Kp5qFgfii2rCsQmNhdhVZvYsq/NHX0wpDOj29cuDb9/FfWJ10o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:46 2024 by rpki-client on console-ams.rpki-client.org