Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/5vBOHNVTqnakPeO6qJ-FA12zrXg.roa
File: 5vBOHNVTqnakPeO6qJ-FA12zrXg.roa (raw, json)
Hash identifier: yqtQK/5VluCvt8NDeI/lYZ8dr9c7ubj7xcqFsteKH78=
Subject key identifier: E6:F0:4E:1C:D5:53:AA:76:A4:3D:E3:BA:A8:9F:85:03:5D:B3:AD:78
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F827589
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/5vBOHNVTqnakPeO6qJ-FA12zrXg.roa
Signing time: Sat 01 Jan 2022 08:05:04 +0000
ROA not before: Sat 01 Jan 2022 08:05:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60308
IP address blocks: 212.193.175.0/24 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260208009 (0xf827589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6f04e1cd553aa76a43de3baa89f85035db3ad78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:c2:bc:98:86:ac:ef:7e:3d:cc:e8:0d:a8:
92:40:b8:ef:2c:c4:9f:4a:86:8e:bd:ac:fe:c2:e4:
d3:21:b9:a7:15:69:f8:a6:bd:7c:51:2d:d2:bc:16:
7a:dd:3e:59:59:4d:ab:52:56:26:36:0c:5d:99:57:
3d:21:bf:d7:c5:b5:8c:71:6a:42:0b:f4:88:79:5d:
e8:17:e1:58:9e:85:26:2b:2f:26:7e:f7:84:83:2f:
dc:47:ff:48:ca:ed:65:6d:ac:23:51:d2:42:e7:63:
1f:98:b1:34:ba:38:f0:b3:7b:d9:ec:d0:28:4f:0f:
95:33:26:ac:1f:9e:31:a1:f3:18:16:91:12:22:b4:
2f:58:cc:ce:ec:37:d0:f7:0f:b5:52:e4:78:66:a2:
ca:47:61:20:b0:74:fd:c0:95:a6:09:b6:d2:4d:b7:
53:4f:42:d7:3d:6e:40:b7:84:44:f1:10:35:44:9f:
8b:a8:be:d4:d9:10:5c:44:99:5a:95:d1:44:45:61:
9e:a8:06:46:e8:8f:9f:0e:f9:98:d3:c0:82:c1:47:
3e:ef:59:c3:de:17:af:22:46:67:3e:67:c8:1d:ae:
cf:4b:63:a2:f3:76:6a:fe:cb:8a:09:e3:87:5e:5d:
3f:49:5f:fd:80:cc:b7:49:e9:eb:83:f6:3f:16:c5:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F0:4E:1C:D5:53:AA:76:A4:3D:E3:BA:A8:9F:85:03:5D:B3:AD:78
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/5vBOHNVTqnakPeO6qJ-FA12zrXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bb:75:4b:ec:ac:27:ff:25:3b:29:4d:f4:7f:0b:48:8e:02:
5f:3f:6f:25:34:8a:c9:7d:b7:9d:55:f4:7a:a1:41:fe:20:48:
90:2d:ed:6d:cf:8e:1c:69:85:53:0d:fd:51:a8:bd:b2:e3:0b:
9b:48:75:8e:93:60:7f:2d:27:9e:5d:a3:f5:49:36:cb:4a:69:
b3:e4:8e:d6:4e:eb:2e:05:a7:e0:0d:54:09:f2:af:c2:d9:2c:
a1:65:d5:a1:7b:ff:7f:74:1f:26:c7:fa:2f:be:3b:c4:ef:70:
39:76:7b:ab:fd:23:ea:5d:4e:2a:a3:91:5b:fe:bb:76:a6:79:
fe:99:26:fc:6f:c5:fe:17:2a:e6:19:9d:02:f0:80:1d:bb:a1:
93:ce:ef:bd:18:dc:c2:ba:a8:05:03:5b:a3:25:b6:4c:fa:f6:
67:aa:63:e5:c8:f6:af:7f:94:1c:ba:d8:d9:97:bc:8f:bc:b1:
dc:2f:46:45:8f:60:64:88:8f:ac:ca:38:fb:d8:f2:47:90:6c:
60:a9:1a:f4:0f:f2:71:3f:49:d5:9c:7a:90:ee:aa:90:94:9a:
14:73:4a:ff:be:38:b7:25:30:4c:d3:19:0d:cd:60:d4:b0:d8:
91:33:d5:bf:37:7a:2d:6d:84:8c:fd:69:42:5c:89:64:8e:e4:
da:99:b1:af
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED4J1iTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NTNhM2I1ZjUxODA4MTY4YzIxMmMwOTRhMmJhYWZmMzhlMTY0NjRhMB4XDTIyMDEw
MTA4MDUwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTZmMDRlMWNkNTUz
YWE3NmE0M2RlM2JhYTg5Zjg1MDM1ZGIzYWQ3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMRmwryYhqzvfj3M6A2okkC47yzEn0qGjr2s/sLk0yG5pxVp
+Ka9fFEt0rwWet0+WVlNq1JWJjYMXZlXPSG/18W1jHFqQgv0iHld6BfhWJ6FJisv
Jn73hIMv3Ef/SMrtZW2sI1HSQudjH5ixNLo48LN72ezQKE8PlTMmrB+eMaHzGBaR
EiK0L1jMzuw30PcPtVLkeGaiykdhILB0/cCVpgm20k23U09C1z1uQLeERPEQNUSf
i6i+1NkQXESZWpXRREVhnqgGRuiPnw75mNPAgsFHPu9Zw94XryJGZz5nyB2uz0tj
ovN2av7Lignjh15dP0lf/YDMt0np64P2PxbF4oUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTm8E4c1VOqdqQ947qon4UDXbOteDAfBgNVHSMEGDAWgBQlOjtfUYCBaMIS
wJSiuq/zjhZGSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pUbzdYMUdBZ1dqQ0VzQ1VvcnF2ODQ0V1Jrby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvOTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8x
LzV2Qk9ITlZUcW5ha1BlTzZxSi1GQTEyenJYZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
OTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8xL0pUbzdYMUdBZ1dq
Q0VzQ1VvcnF2ODQ0V1Jrby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANTBrzANBgkqhkiG9w0BAQsFAAOC
AQEAjLt1S+ysJ/8lOylN9H8LSI4CXz9vJTSKyX23nVX0eqFB/iBIkC3tbc+OHGmF
Uw39Uai9suMLm0h1jpNgfy0nnl2j9Uk2y0pps+SO1k7rLgWn4A1UCfKvwtksoWXV
oXv/f3QfJsf6L747xO9wOXZ7q/0j6l1OKqORW/67dqZ5/pkm/G/F/hcq5hmdAvCA
Hbuhk87vvRjcwrqoBQNboyW2TPr2Z6pj5cj2r3+UHLrY2Ze8j7yx3C9GRY9gZIiP
rMo4+9jyR5BsYKka9A/ycT9J1Zx6kO6qkJSaFHNK/744tyUwTNMZDc1g1LDYkTPV
vzd6LW2EjP1pQlyJZI7k2pmxrw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org