Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/kuWTPBd2f-PAn_3HsD-frPQQ1IE.roa
File: kuWTPBd2f-PAn_3HsD-frPQQ1IE.roa (raw, json)
Hash identifier: jw+rlZQYufe2fbxQ5EbLxjYeX5LHAZNfeG2l9+tdNZU=
Subject key identifier: 92:E5:93:3C:17:76:7F:E3:C0:9F:FD:C7:B0:3F:9F:AC:F4:10:D4:81
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 09AC3934
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/kuWTPBd2f-PAn_3HsD-frPQQ1IE.roa
Signing time: Wed 15 Jun 2022 10:18:44 +0000
ROA not before: Wed 15 Jun 2022 10:18:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62080
IP address blocks: 194.145.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162281780 (0x9ac3934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jun 15 10:18:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92e5933c17767fe3c09ffdc7b03f9facf410d481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:ad:ec:b8:4e:13:7f:fb:35:bb:a5:ac:2b:
4a:e9:1d:c3:25:d0:ca:b8:13:79:33:82:c8:9a:9f:
21:59:5c:a8:f4:aa:23:f4:b7:c1:4a:8b:6b:7b:65:
d8:73:61:54:bc:6d:c9:29:3c:77:a9:bd:d2:53:23:
53:81:b9:d0:2a:ec:6d:2d:aa:99:01:4f:ed:da:f4:
37:f9:6d:f8:a4:9c:f2:bf:e0:91:a1:29:1b:84:fd:
bd:d0:17:17:ac:32:92:e7:c5:d3:b0:0e:cb:35:8d:
37:af:46:e9:8a:48:68:51:ea:f3:c0:14:31:c7:e9:
1b:5a:c5:5b:f2:cc:90:ed:8f:d6:e0:bc:8c:70:60:
54:c5:30:f2:f9:ca:78:bc:51:d6:77:b8:d3:a4:e0:
60:f4:47:de:e5:5d:03:df:d4:dd:15:bc:9e:4e:13:
5b:86:dd:67:ed:c2:c7:bf:9e:ab:bd:5b:30:e4:7d:
43:dd:ba:85:87:ef:78:a5:fb:30:6d:28:bf:52:f0:
d7:bf:d1:79:90:0d:3d:3f:ea:23:47:ee:80:1b:f4:
62:77:0b:f3:27:93:ac:78:df:7c:2d:48:1c:bd:76:
e5:64:be:50:50:9e:06:8b:43:8d:54:d8:69:00:39:
80:fe:79:32:80:88:99:b8:52:1b:1f:9b:c6:7a:38:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:93:3C:17:76:7F:E3:C0:9F:FD:C7:B0:3F:9F:AC:F4:10:D4:81
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/kuWTPBd2f-PAn_3HsD-frPQQ1IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.141.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e6:2e:89:ef:89:0b:fb:83:cf:10:06:3c:b2:6e:9a:4f:37:
30:cd:41:fa:ef:4e:11:a9:59:39:5d:16:13:6d:f8:7d:55:01:
24:ce:0b:d8:df:e8:3c:9c:06:69:a4:6b:a7:c7:d7:a0:4e:9a:
f4:ec:f9:db:0c:e2:93:6a:dd:0c:13:2b:fa:0a:10:c7:db:97:
ce:42:01:ba:e9:58:3d:6a:cc:e0:a7:21:5f:9f:41:3a:b3:10:
5a:dc:5b:39:11:7f:07:1f:34:0a:79:77:45:27:55:16:c4:87:
92:c9:4e:f7:3f:1e:0c:8f:ab:7e:d3:55:f2:6b:d3:3f:c2:5b:
3e:69:e6:34:33:ee:03:14:7b:5e:a8:11:1b:7b:da:56:18:b7:
4b:f2:1e:70:01:a7:dd:36:d3:ef:40:e0:76:38:5c:28:58:f8:
ca:cd:d8:af:be:94:ba:57:6a:b3:59:42:5e:f2:40:59:48:81:
9f:8c:e3:79:be:ed:97:03:bf:e9:07:2d:d1:16:d1:12:87:4d:
09:64:83:fd:3c:72:1f:60:da:4d:71:99:98:63:5f:85:85:b0:
60:bc:b3:7a:f8:86:91:ac:4e:a1:3b:cb:89:2c:55:2c:0f:8b:
f1:ce:06:91:69:f3:4c:df:ee:20:23:c6:2f:9f:8d:8a:33:07:
72:c2:c3:4d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECaw5NDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MTY3OTk5NjQ1ZTE1YjY1MjY4YTBkOTNiYjE0YzRmNTE3MjQ0NTFiMB4XDTIyMDYx
NTEwMTg0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTJlNTkzM2MxNzc2
N2ZlM2MwOWZmZGM3YjAzZjlmYWNmNDEwZDQ4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN78rey4ThN/+zW7pawrSukdwyXQyrgTeTOCyJqfIVlcqPSq
I/S3wUqLa3tl2HNhVLxtySk8d6m90lMjU4G50CrsbS2qmQFP7dr0N/lt+KSc8r/g
kaEpG4T9vdAXF6wykufF07AOyzWNN69G6YpIaFHq88AUMcfpG1rFW/LMkO2P1uC8
jHBgVMUw8vnKeLxR1ne406TgYPRH3uVdA9/U3RW8nk4TW4bdZ+3Cx7+eq71bMOR9
Q926hYfveKX7MG0ov1Lw17/ReZANPT/qI0fugBv0YncL8yeTrHjffC1IHL125WS+
UFCeBotDjVTYaQA5gP55MoCImbhSGx+bxno4zikCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSS5ZM8F3Z/48Cf/cewP5+s9BDUgTAfBgNVHSMEGDAWgBRhZ5mWReFbZSaK
DZO7FMT1FyRFGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lXZVpsa1hoVzJVbWlnMlR1eFRFOVJja1JScy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvZDMxYTI1LTI1MDctNDcxZC1hZGM3LTg4MDdmOTVhZTc1ZC8x
L2t1V1RQQmQyZi1QQW5fM0hzRC1mclBRUTFJRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
ZDMxYTI1LTI1MDctNDcxZC1hZGM3LTg4MDdmOTVhZTc1ZC8xL1lXZVpsa1hoVzJV
bWlnMlR1eFRFOVJja1JScy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKRjTANBgkqhkiG9w0BAQsFAAOC
AQEAeeYuie+JC/uDzxAGPLJumk83MM1B+u9OEalZOV0WE234fVUBJM4L2N/oPJwG
aaRrp8fXoE6a9Oz52wzik2rdDBMr+goQx9uXzkIBuulYPWrM4KchX59BOrMQWtxb
ORF/Bx80Cnl3RSdVFsSHkslO9z8eDI+rftNV8mvTP8JbPmnmNDPuAxR7XqgRG3va
Vhi3S/IecAGn3TbT70DgdjhcKFj4ys3Yr76Uuldqs1lCXvJAWUiBn4zjeb7tlwO/
6Qct0RbREodNCWSD/TxyH2DaTXGZmGNfhYWwYLyzeviGkaxOoTvLiSxVLA+L8c4G
kWnzTN/uICPGL5+NijMHcsLDTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:10 2024 by rpki-client on console-fra.rpki-client.org