Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/1bLksHqK9MK_AAtaOS3BICpiqQ4.roa
File: 1bLksHqK9MK_AAtaOS3BICpiqQ4.roa (raw, json)
Hash identifier: G5bOxaKl6Vert/KfzrEhscCF0Bc6vk+VmU/fJM+cI7E=
Subject key identifier: D5:B2:E4:B0:7A:8A:F4:C2:BF:00:0B:5A:39:2D:C1:20:2A:62:A9:0E
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 10ECE849
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/1bLksHqK9MK_AAtaOS3BICpiqQ4.roa
Signing time: Sat 01 Jan 2022 08:53:00 +0000
ROA not before: Sat 01 Jan 2022 08:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48227
IP address blocks: 81.6.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283961417 (0x10ece849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jan 1 08:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5b2e4b07a8af4c2bf000b5a392dc1202a62a90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:8a:69:99:e5:05:65:c6:f7:6a:51:07:ea:
5e:cb:a1:0f:88:45:15:0a:4a:8f:9e:f2:02:9f:28:
31:fc:23:65:68:56:7a:69:48:83:c6:9d:99:20:21:
f5:92:41:08:87:18:49:92:2b:15:be:90:ea:9e:66:
50:27:46:19:3c:12:28:66:a9:07:4e:aa:da:54:6e:
34:2e:9a:2e:b7:16:5e:18:f4:90:cd:6b:df:e8:c8:
cd:2f:65:99:f9:87:0f:13:53:cf:c4:ba:a3:55:99:
42:af:f8:29:f3:0d:ec:1f:48:09:5a:e2:c5:d2:05:
bb:70:ff:2b:eb:9e:73:b9:97:07:25:33:15:db:47:
6d:c1:6d:43:90:48:2a:99:59:b4:58:99:5c:04:ec:
85:31:dd:28:fc:f8:10:74:dc:14:9c:8a:97:7e:18:
b2:09:bc:18:eb:53:9f:4c:cd:2b:9c:0e:52:8a:4a:
12:49:d7:3e:6e:b4:14:d2:00:63:fc:52:c7:6c:b3:
10:cc:a5:17:9a:94:ff:49:5c:b1:53:e6:c9:92:8e:
52:6b:31:f7:08:1b:10:d1:52:cf:67:01:1d:d7:2e:
68:24:ac:a5:76:e6:dc:07:59:7c:60:b8:1a:74:18:
d5:12:b5:27:2a:a2:9e:95:03:93:8a:1f:00:8f:61:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:E4:B0:7A:8A:F4:C2:BF:00:0B:5A:39:2D:C1:20:2A:62:A9:0E
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/1bLksHqK9MK_AAtaOS3BICpiqQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:bd:50:da:f5:5b:f0:77:4d:a6:72:89:2f:85:49:42:d5:49:
17:2d:f8:8a:85:22:67:f9:ed:14:3c:7e:96:23:ad:8a:cf:94:
a2:79:30:bf:34:da:a1:fd:6d:03:08:7c:12:49:f9:39:ac:e7:
7e:67:e3:a5:70:da:93:b4:e0:ac:83:da:5f:d2:18:d7:34:66:
ba:bd:29:b7:6f:e3:44:ea:2e:ba:ba:9f:92:53:5f:e5:f1:6e:
b2:29:53:25:df:0a:ba:31:5a:0b:ee:50:82:89:3e:11:84:89:
40:d0:66:ff:ab:74:56:25:b9:ce:7e:99:31:ab:49:d0:7b:c5:
4a:75:ab:f3:97:0a:a8:4a:b8:9a:be:69:d8:61:e3:e9:b1:58:
72:cd:e7:37:55:f6:c0:25:3e:5c:85:14:58:15:75:ce:e3:33:
22:27:f6:c3:9a:66:bd:6f:80:6c:de:45:aa:7d:f7:4b:54:b9:
df:8a:53:d1:1b:c6:23:0a:4f:36:63:ed:14:3f:b8:e4:82:be:
e0:7f:cc:d1:ba:83:58:99:52:15:c0:42:39:ab:f6:ef:d2:fc:
bf:2a:de:7c:03:81:95:ab:aa:fb:28:8b:f6:cd:48:63:4a:88:
8a:e7:f2:dd:09:be:2e:ae:bd:d1:fd:8c:4f:87:91:53:4c:ca:
43:5e:9b:b2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEOzoSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MzAzNDBkMjdlNGIyNGY5MTI0OTc3MzIyZWRiMzY5NDJlMmQxNjBjMB4XDTIyMDEw
MTA4NTMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDViMmU0YjA3YThh
ZjRjMmJmMDAwYjVhMzkyZGMxMjAyYTYyYTkwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKueimmZ5QVlxvdqUQfqXsuhD4hFFQpKj57yAp8oMfwjZWhW
emlIg8admSAh9ZJBCIcYSZIrFb6Q6p5mUCdGGTwSKGapB06q2lRuNC6aLrcWXhj0
kM1r3+jIzS9lmfmHDxNTz8S6o1WZQq/4KfMN7B9ICVrixdIFu3D/K+uec7mXByUz
FdtHbcFtQ5BIKplZtFiZXATshTHdKPz4EHTcFJyKl34Ysgm8GOtTn0zNK5wOUopK
EknXPm60FNIAY/xSx2yzEMylF5qU/0lcsVPmyZKOUmsx9wgbENFSz2cBHdcuaCSs
pXbm3AdZfGC4GnQY1RK1JyqinpUDk4ofAI9hlLUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTVsuSweor0wr8AC1o5LcEgKmKpDjAfBgNVHSMEGDAWgBQjA0DSfksk+RJJ
dzIu2zaULi0WDDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0l3TkEwbjVMSlBrU1NYY3lMdHMybEM0dEZndy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjkvN2JkZjUyLTZhYzUtNGMyNC1iZmQwLWI1NzA5MDdiNTllYi8x
LzFiTGtzSHFLOU1LX0FBdGFPUzNCSUNwaXFRNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkv
N2JkZjUyLTZhYzUtNGMyNC1iZmQwLWI1NzA5MDdiNTllYi8xL0l3TkEwbjVMSlBr
U1NYY3lMdHMybEM0dEZndy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEGuzANBgkqhkiG9w0BAQsFAAOC
AQEAer1Q2vVb8HdNpnKJL4VJQtVJFy34ioUiZ/ntFDx+liOtis+UonkwvzTaof1t
Awh8Ekn5OaznfmfjpXDak7TgrIPaX9IY1zRmur0pt2/jROouurqfklNf5fFusilT
Jd8KujFaC+5Qgok+EYSJQNBm/6t0ViW5zn6ZMatJ0HvFSnWr85cKqEq4mr5p2GHj
6bFYcs3nN1X2wCU+XIUUWBV1zuMzIif2w5pmvW+AbN5Fqn33S1S534pT0RvGIwpP
NmPtFD+45IK+4H/M0bqDWJlSFcBCOav279L8vyrefAOBlauq+yiL9s1IY0qIiufy
3Qm+Lq690f2MT4eRU0zKQ16bsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org