Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/ENxA_FrxFFlKu78ldVgIL_xQUdk.roa
File: ENxA_FrxFFlKu78ldVgIL_xQUdk.roa (raw, json)
Hash identifier: BtVDWwyN/E8Kxg/QkfE6btRe7HJtv8C826bHHf+JRQg=
Subject key identifier: 10:DC:40:FC:5A:F1:14:59:4A:BB:BF:25:75:58:08:2F:FC:50:51:D9
Certificate issuer: /CN=ff0696719401ebb1ddbba9ad4fb8c66f14ef70a5
Certificate serial: 01847C2D246078195B91C9AD38B2BA8DAC36
Authority key identifier: FF:06:96:71:94:01:EB:B1:DD:BB:A9:AD:4F:B8:C6:6F:14:EF:70:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_waWcZQB67Hdu6mtT7jGbxTvcKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/ENxA_FrxFFlKu78ldVgIL_xQUdk.roa
Signing time: Tue 15 Nov 2022 16:44:04 +0000
ROA not before: Tue 15 Nov 2022 16:44:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48952
IP address blocks: 185.161.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:2d:24:60:78:19:5b:91:c9:ad:38:b2:ba:8d:ac:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0696719401ebb1ddbba9ad4fb8c66f14ef70a5
Validity
Not Before: Nov 15 16:44:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10dc40fc5af114594abbbf257558082ffc5051d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:65:fa:69:23:d1:9f:d4:38:f6:3a:08:e6:
33:0f:a1:e7:fa:60:ca:71:ba:4a:b1:2c:ce:18:4f:
1d:f3:07:51:12:bd:02:04:6c:46:46:74:02:80:f1:
8e:32:f6:ee:f7:c2:d6:16:04:35:1a:9e:aa:91:89:
b2:06:39:6c:45:27:be:2d:23:58:0c:2f:b4:b7:4c:
87:30:e7:1c:5d:96:78:ce:e6:18:70:f3:17:ee:06:
40:ae:fa:2d:d5:68:f7:61:71:5c:d2:6c:f2:05:8f:
2a:4c:67:cb:f8:de:70:67:a2:53:f3:46:e4:1f:12:
a1:52:5e:ee:c5:39:01:f0:47:8c:38:db:da:7d:9e:
15:98:3f:6f:75:06:49:c6:72:df:4f:31:25:cc:f2:
97:00:72:ec:83:e1:bc:7c:b8:59:82:3e:59:c9:a6:
e6:fb:1b:7f:43:10:ce:6f:15:61:85:05:49:70:25:
1d:be:b3:7f:bc:68:dc:35:aa:72:32:b7:ab:e5:f5:
78:46:d7:c1:7a:1e:c7:fc:bb:98:dd:45:8f:45:90:
67:a0:23:8e:31:ef:77:df:7f:e1:42:a0:05:34:b6:
48:95:59:2e:7c:44:75:2b:72:0b:39:8a:0f:ca:8f:
14:88:89:64:a2:50:da:0a:aa:6a:21:c1:50:48:dd:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DC:40:FC:5A:F1:14:59:4A:BB:BF:25:75:58:08:2F:FC:50:51:D9
X509v3 Authority Key Identifier:
keyid:FF:06:96:71:94:01:EB:B1:DD:BB:A9:AD:4F:B8:C6:6F:14:EF:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_waWcZQB67Hdu6mtT7jGbxTvcKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/ENxA_FrxFFlKu78ldVgIL_xQUdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.40.0/22
Signature Algorithm: sha256WithRSAEncryption
11:b3:87:30:33:9d:df:c1:fa:71:6a:9c:3b:85:1e:2f:1d:9f:
69:41:0b:ce:19:0c:5c:2e:64:0b:b1:50:c8:53:44:44:f9:b5:
35:c0:4c:f3:d8:f0:7a:46:4e:be:35:f3:ef:f8:e2:97:ba:29:
bb:f8:a2:6a:ed:9b:8c:7a:50:4f:04:f9:57:1b:92:6d:43:d1:
6e:64:fe:23:f0:28:4b:2e:df:22:e1:0c:8f:ab:70:89:00:cc:
63:c6:da:fc:57:90:3e:17:a0:ba:74:58:61:e6:e6:c9:79:6f:
45:fd:df:92:dc:00:16:47:1c:c6:d9:df:87:50:31:db:ed:b2:
68:2b:99:80:1d:9b:d2:8d:4f:5c:96:f7:e0:c3:e7:ac:91:67:
61:7c:fd:35:e4:d5:89:56:aa:5f:f6:b5:3c:b3:69:61:a8:57:
55:d8:f1:f3:be:f5:f2:02:09:b7:d0:70:44:7c:d0:d5:cc:55:
55:a8:21:bf:a6:5f:64:87:98:90:09:9f:5b:c6:75:b5:c5:f4:
8e:80:00:ca:bb:4b:81:07:ac:ef:26:04:06:c4:82:5b:23:68:
1f:3a:51:4e:29:c0:44:6d:3e:45:b5:e6:e8:15:49:b7:78:20:
84:94:34:fa:a1:1b:02:58:fa:24:5e:d2:b0:04:a6:ae:ab:0d:
5f:21:54:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYR8LSRgeBlbkcmtOLK6jaw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMDY5NjcxOTQwMWViYjFkZGJiYTlhZDRmYjhjNjZmMTRl
ZjcwYTUwHhcNMjIxMTE1MTY0NDA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGRjNDBmYzVhZjExNDU5NGFiYmJmMjU3NTU4MDgyZmZjNTA1MWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRJl+mkj0Z/UOPY6COYzD6Hn+mDK
cbpKsSzOGE8d8wdREr0CBGxGRnQCgPGOMvbu98LWFgQ1Gp6qkYmyBjlsRSe+LSNY
DC+0t0yHMOccXZZ4zuYYcPMX7gZArvot1Wj3YXFc0mzyBY8qTGfL+N5wZ6JT80bk
HxKhUl7uxTkB8EeMONvafZ4VmD9vdQZJxnLfTzElzPKXAHLsg+G8fLhZgj5Zyabm
+xt/QxDObxVhhQVJcCUdvrN/vGjcNapyMrer5fV4RtfBeh7H/LuY3UWPRZBnoCOO
Me9333/hQqAFNLZIlVkufER1K3ILOYoPyo8UiIlkolDaCqpqIcFQSN15PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBDcQPxa8RRZSru/JXVYCC/8UFHZMB8GA1UdIwQY
MBaAFP8GlnGUAeux3buprU+4xm8U73ClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3dhV2NaUUI2N0hkdTZtdFQ3akdieFR2Y0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lNjczY2YtMjdkNy00MTY5LThjNmYt
OTkwMTU2NWRkODUzLzEvRU54QV9GcnhGRmxLdTc4bGRWZ0lMX3hRVWRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lNjczY2YtMjdkNy00MTY5LThjNmYtOTkwMTU2NWRkODUz
LzEvX3dhV2NaUUI2N0hkdTZtdFQ3akdieFR2Y0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaEoMA0G
CSqGSIb3DQEBCwUAA4IBAQARs4cwM53fwfpxapw7hR4vHZ9pQQvOGQxcLmQLsVDI
U0RE+bU1wEzz2PB6Rk6+NfPv+OKXuim7+KJq7ZuMelBPBPlXG5JtQ9FuZP4j8ChL
Lt8i4QyPq3CJAMxjxtr8V5A+F6C6dFhh5ubJeW9F/d+S3AAWRxzG2d+HUDHb7bJo
K5mAHZvSjU9clvfgw+eskWdhfP015NWJVqpf9rU8s2lhqFdV2PHzvvXyAgm30HBE
fNDVzFVVqCG/pl9kh5iQCZ9bxnW1xfSOgADKu0uBB6zvJgQGxIJbI2gfOlFOKcBE
bT5FteboFUm3eCCElDT6oRsCWPokXtKwBKauqw1fIVTp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:06 2024 by rpki-client on console-fra.rpki-client.org