Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/LJ9HeviaNYFE82XYNeFAtjGg6ig.roa
File: LJ9HeviaNYFE82XYNeFAtjGg6ig.roa (raw, json)
Hash identifier: v1Qi0/cfefOpTtrdExbLzaXYKxpgFa3YX+BzU8F2Blo=
Subject key identifier: 2C:9F:47:7A:F8:9A:35:81:44:F3:65:D8:35:E1:40:B6:31:A0:EA:28
Certificate issuer: /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial: 095A6717
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/LJ9HeviaNYFE82XYNeFAtjGg6ig.roa
Signing time: Sat 01 Jan 2022 12:05:19 +0000
ROA not before: Sat 01 Jan 2022 12:05:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 5.253.24.0/22 maxlen: 24
5.253.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156919575 (0x95a6717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
Validity
Not Before: Jan 1 12:05:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c9f477af89a358144f365d835e140b631a0ea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:bd:fd:af:4e:ff:40:93:59:71:fa:10:30:
2f:1b:16:4f:bc:6c:ee:2c:2a:a4:7e:31:43:a6:50:
1b:7e:48:11:d5:3e:80:01:8a:c9:cf:db:f2:55:19:
a4:cd:5c:15:bd:0e:e9:c0:da:91:e9:38:97:37:62:
b4:06:f8:42:d6:fe:f1:52:7f:9b:6b:fb:42:dd:df:
8a:fc:84:1f:74:ee:9a:25:64:a9:53:30:79:06:9c:
fc:6c:af:67:c7:b9:e9:86:1a:86:10:f6:15:3e:3a:
74:10:cd:a6:a4:83:32:e1:03:40:a8:6b:a8:ab:09:
82:a2:89:21:6c:c8:1e:82:fa:a9:c3:75:bb:de:4c:
6c:0e:30:8a:42:80:47:4d:be:92:b6:a6:df:ed:db:
4c:8d:c5:02:ed:d8:7c:04:00:bc:2b:a6:6d:7e:c2:
63:f2:dc:73:c1:58:2c:66:be:53:fb:00:ad:a4:7d:
75:02:e9:04:57:6d:67:ca:4d:58:c2:31:71:17:91:
34:05:25:ed:72:b0:5f:73:91:df:40:c8:49:a6:a1:
02:bc:43:b6:45:68:28:59:ef:01:45:33:cf:c3:c1:
70:24:13:97:83:df:1d:4c:53:99:77:73:25:1f:32:
d8:7e:7a:7a:11:fc:2a:5a:49:a1:73:02:a9:2d:e9:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9F:47:7A:F8:9A:35:81:44:F3:65:D8:35:E1:40:B6:31:A0:EA:28
X509v3 Authority Key Identifier:
keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/LJ9HeviaNYFE82XYNeFAtjGg6ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.24.0/22
Signature Algorithm: sha256WithRSAEncryption
46:04:eb:de:69:c6:8e:ea:05:12:0e:66:e2:0b:40:a5:e7:f1:
76:98:89:0e:09:9f:b2:43:1f:0c:11:93:1d:ea:9e:9f:b8:fb:
4c:61:c0:d9:bb:09:89:d8:90:dd:87:08:b8:aa:75:22:5e:ac:
7c:30:4e:20:8f:bf:d8:6e:8b:53:6a:af:b8:00:e1:20:d6:b9:
4e:f3:7b:cd:c1:cb:ac:d8:0a:39:bb:17:c2:7a:09:7a:db:26:
a5:cd:11:d8:03:f1:91:8b:75:d9:b8:d1:17:11:2e:95:b9:40:
5d:9d:7f:39:16:98:fc:13:23:78:8b:81:f4:48:2d:5a:f4:c2:
57:ea:6e:44:65:df:da:7e:72:8e:49:42:fa:00:27:dd:84:ef:
7a:ac:d9:cd:ae:c7:64:cd:ea:0d:7f:f3:3f:79:b3:0e:e2:d2:
cc:4f:84:e1:46:bb:fe:18:35:b7:93:06:4d:3e:f4:49:c5:eb:
65:ab:f2:23:56:45:f8:54:1c:c6:2d:88:04:49:04:cc:b1:5c:
6f:d8:b0:ba:f8:33:84:c1:43:29:db:bb:87:96:d6:46:79:1e:
a4:4a:8e:2a:fc:11:71:94:0f:b3:c4:c3:14:d1:fa:24:4f:cc:
2a:de:d9:fc:96:08:fa:56:05:60:ca:1e:53:75:46:48:32:fd:
40:31:83:6c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECVpnFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MzdmMzM3MmRmNTdjODE0YWJhOGI1MWE5MDc4NjFkOTJiOWU0ZjU1MB4XDTIyMDEw
MTEyMDUxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmM5ZjQ3N2FmODlh
MzU4MTQ0ZjM2NWQ4MzVlMTQwYjYzMWEwZWEyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVvvf2vTv9Ak1lx+hAwLxsWT7xs7iwqpH4xQ6ZQG35IEdU+
gAGKyc/b8lUZpM1cFb0O6cDakek4lzditAb4Qtb+8VJ/m2v7Qt3fivyEH3TumiVk
qVMweQac/GyvZ8e56YYahhD2FT46dBDNpqSDMuEDQKhrqKsJgqKJIWzIHoL6qcN1
u95MbA4wikKAR02+kram3+3bTI3FAu3YfAQAvCumbX7CY/Lcc8FYLGa+U/sAraR9
dQLpBFdtZ8pNWMIxcReRNAUl7XKwX3OR30DISaahArxDtkVoKFnvAUUzz8PBcCQT
l4PfHUxTmXdzJR8y2H56ehH8KlpJoXMCqS3pO8MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQsn0d6+Jo1gUTzZdg14UC2MaDqKDAfBgNVHSMEGDAWgBQTfzNy31fIFKuo
tRqQeGHZK55PVTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0UzOHpjdDlYeUJTcnFMVWFrSGhoMlN1ZVQxVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvOGIxNDFiLTQ5NGUtNDY2Yi1hMjJjLWEyMjRmZWZhYzIxOC8x
L0xKOUhldmlhTllGRTgyWFlOZUZBdGpHZzZpZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
OGIxNDFiLTQ5NGUtNDY2Yi1hMjJjLWEyMjRmZWZhYzIxOC8xL0UzOHpjdDlYeUJT
cnFMVWFrSGhoMlN1ZVQxVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgX9GDANBgkqhkiG9w0BAQsFAAOC
AQEARgTr3mnGjuoFEg5m4gtApefxdpiJDgmfskMfDBGTHeqen7j7TGHA2bsJidiQ
3YcIuKp1Il6sfDBOII+/2G6LU2qvuADhINa5TvN7zcHLrNgKObsXwnoJetsmpc0R
2APxkYt12bjRFxEulblAXZ1/ORaY/BMjeIuB9EgtWvTCV+puRGXf2n5yjklC+gAn
3YTveqzZza7HZM3qDX/zP3mzDuLSzE+E4Ua7/hg1t5MGTT70ScXrZavyI1ZF+FQc
xi2IBEkEzLFcb9iwuvgzhMFDKdu7h5bWRnkepEqOKvwRcZQPs8TDFNH6JE/MKt7Z
/JYI+lYFYMoeU3VGSDL9QDGDbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org