Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/5R7GHfrC7lwa_Ml_QTt3F0KJuRk.roa
File: 5R7GHfrC7lwa_Ml_QTt3F0KJuRk.roa (raw, json)
Hash identifier: voflMly0u9fpDEAcQiNZQd0T72lhBNu1IFK7nQC6t7Q=
Subject key identifier: E5:1E:C6:1D:FA:C2:EE:5C:1A:FC:C9:7F:41:3B:77:17:42:89:B9:19
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: AA5662
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/5R7GHfrC7lwa_Ml_QTt3F0KJuRk.roa
Signing time: Fri 07 Jan 2022 10:42:15 +0000
ROA not before: Fri 07 Jan 2022 10:42:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198622
IP address blocks: 185.167.164.0/22 maxlen: 24
2a0b:7e00::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11163234 (0xaa5662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Jan 7 10:42:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e51ec61dfac2ee5c1afcc97f413b77174289b919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:a5:9d:df:1d:51:e6:0f:9a:ba:c8:c5:48:
57:29:01:5b:0b:85:d2:82:41:08:e7:e8:71:e5:a5:
6e:d4:10:96:37:db:b6:f7:5d:20:3d:39:21:9b:4f:
a2:e4:83:66:58:42:d6:8b:4c:d9:12:0f:7e:af:47:
94:cd:e0:a5:47:16:2c:ed:00:4c:14:a4:a9:6f:d1:
ea:1c:82:1c:70:d8:ee:43:bf:7d:b6:a4:8d:c0:44:
be:0f:91:10:0e:61:33:b7:a0:4f:2a:e3:15:81:40:
62:b0:f9:36:58:4b:5d:23:69:cf:a8:56:c8:e0:15:
c4:94:92:26:c3:27:7b:f3:90:f7:16:3d:60:f6:5f:
af:ed:df:0a:73:77:85:ff:14:b2:17:e3:3d:88:22:
b2:3c:80:c7:ee:fe:57:9e:95:af:6b:66:6b:fe:eb:
2a:cc:f9:3b:14:2d:ae:a9:62:e4:51:c8:eb:3d:f2:
4c:ec:44:45:3b:ac:7f:8c:b9:87:d0:6a:73:16:d4:
72:6c:40:af:a6:c8:c1:b0:ea:7c:c1:f0:e5:72:7d:
8f:37:9d:69:fc:4a:c7:ed:76:ff:c2:4f:d6:5e:86:
fe:c2:af:fe:4f:b6:86:ad:b8:8f:0a:9c:a3:4b:e0:
23:f5:fd:03:85:20:3b:46:d3:94:04:fa:7c:74:5a:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1E:C6:1D:FA:C2:EE:5C:1A:FC:C9:7F:41:3B:77:17:42:89:B9:19
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/5R7GHfrC7lwa_Ml_QTt3F0KJuRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.164.0/22
IPv6:
2a0b:7e00::/36
Signature Algorithm: sha256WithRSAEncryption
ab:e0:9b:1c:15:0d:39:bc:d8:f1:01:80:df:15:f0:ce:83:5d:
58:bd:8f:ae:0c:3e:34:83:fa:98:7c:e1:8e:2b:ed:76:2d:b5:
6d:0c:61:8d:80:51:e0:63:4e:3a:45:5c:10:cd:79:b3:02:85:
cb:6e:78:be:f8:92:ec:d1:ba:fa:e5:c1:b8:e1:3a:68:c3:71:
f9:88:81:99:5d:47:87:5b:e2:1b:ff:f9:41:96:60:25:95:85:
7b:ba:16:3b:e0:30:23:0f:b1:1f:28:1a:24:4a:8a:4d:5f:3a:
12:83:9b:83:4d:c8:24:63:0f:d9:59:70:38:ae:c8:37:c7:8d:
42:2f:7c:03:b4:6c:bd:d2:63:cb:08:d1:8b:e0:94:61:ab:dc:
7a:1f:c6:dd:9d:aa:1a:1f:0e:61:c0:fe:14:60:68:0f:76:22:
28:fa:d0:9c:10:81:4e:c4:e3:2f:f0:14:b5:89:82:b6:4e:37:
5d:ff:e6:d0:29:33:b9:9a:ae:27:d8:d2:9b:89:b7:00:19:f8:
b7:4a:e6:82:ad:07:8f:36:70:6f:73:e3:f6:86:da:ce:95:09:
a4:05:8e:e7:46:bb:91:26:9e:1f:d9:43:13:4f:23:58:cc:73:
ca:e0:9d:03:f5:0d:1b:4b:a3:64:bd:35:aa:94:83:0a:48:5a:
e6:45:1d:b7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIEAKpWYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
N2FjNzgwZWIyMDQyYzhjNTcwMDFiNjVlZjE1NmU2ZjU5MzEyMzliMB4XDTIyMDEw
NzEwNDIxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTUxZWM2MWRmYWMy
ZWU1YzFhZmNjOTdmNDEzYjc3MTc0Mjg5YjkxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMIcpZ3fHVHmD5q6yMVIVykBWwuF0oJBCOfoceWlbtQQljfb
tvddID05IZtPouSDZlhC1otM2RIPfq9HlM3gpUcWLO0ATBSkqW/R6hyCHHDY7kO/
fbakjcBEvg+REA5hM7egTyrjFYFAYrD5NlhLXSNpz6hWyOAVxJSSJsMne/OQ9xY9
YPZfr+3fCnN3hf8UshfjPYgisjyAx+7+V56Vr2tma/7rKsz5OxQtrqli5FHI6z3y
TOxERTusf4y5h9BqcxbUcmxAr6bIwbDqfMHw5XJ9jzedafxKx+12/8JP1l6G/sKv
/k+2hq24jwqco0vgI/X9A4UgO0bTlAT6fHRaZMMCAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBTlHsYd+sLuXBr8yX9BO3cXQom5GTAfBgNVHSMEGDAWgBS3rHgOsgQsjFcA
G2XvFW5vWTEjmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Q2eDREcklFTEl4WEFCdGw3eFZ1YjFreEk1cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvMTkwZDQ3LTY4ZGEtNDRkMi05NTBlLTM3NjY0ZDc1YjI1NC8x
LzVSN0dIZnJDN2x3YV9NbF9RVHQzRjBLSnVSay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
MTkwZDQ3LTY4ZGEtNDRkMi05NTBlLTM3NjY0ZDc1YjI1NC8xL3Q2eDREcklFTEl4
WEFCdGw3eFZ1YjFreEk1cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEArmnpDAOBAIAAjAIAwYEKgt+AAAw
DQYJKoZIhvcNAQELBQADggEBAKvgmxwVDTm82PEBgN8V8M6DXVi9j64MPjSD+ph8
4Y4r7XYttW0MYY2AUeBjTjpFXBDNebMChctueL74kuzRuvrlwbjhOmjDcfmIgZld
R4db4hv/+UGWYCWVhXu6FjvgMCMPsR8oGiRKik1fOhKDm4NNyCRjD9lZcDiuyDfH
jUIvfAO0bL3SY8sI0YvglGGr3Hofxt2dqhofDmHA/hRgaA92Iij60JwQgU7E4y/w
FLWJgrZON13/5tApM7marifY0puJtwAZ+LdK5oKtB482cG9z4/aG2s6VCaQFjudG
u5Emnh/ZQxNPI1jMc8rgnQP1DRtLo2S9NaqUgwpIWuZFHbc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org