Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yc9cq9eV8tH5_gdavV0axs4PrG0.roa
File: yc9cq9eV8tH5_gdavV0axs4PrG0.roa (raw, json)
Hash identifier: zllupbDBGSyYf+gG102WclUsmN6R6nPXoKrLVtmwLJA=
Subject key identifier: C9:CF:5C:AB:D7:95:F2:D1:F9:FE:07:5A:BD:5D:1A:C6:CE:0F:AC:6D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 42AD5E20
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yc9cq9eV8tH5_gdavV0axs4PrG0.roa
Signing time: Sat 01 Jan 2022 06:05:08 +0000
ROA not before: Sat 01 Jan 2022 06:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212732
IP address blocks: 46.61.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118658080 (0x42ad5e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9cf5cabd795f2d1f9fe075abd5d1ac6ce0fac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:da:d9:b3:7c:11:02:59:87:92:6d:16:8d:cd:
02:aa:f0:28:98:1f:18:1c:ea:1d:be:76:b3:e1:aa:
a2:7c:50:4f:11:cd:bc:bf:96:d4:33:11:e1:c4:f6:
17:33:c2:20:0c:11:d9:c3:58:aa:b5:29:e6:fc:21:
ee:7f:8a:d3:f1:8b:fc:87:51:00:bc:b0:be:6d:a1:
19:fb:20:a9:dd:64:2e:e3:1f:94:d7:59:c7:e7:03:
79:49:b2:dd:9d:df:c2:56:a7:16:ec:18:71:dd:0f:
12:4e:65:6b:2d:0b:65:6b:a3:aa:0e:49:db:88:7d:
27:b7:82:1b:d2:7c:c8:ef:8e:37:37:bb:1b:9c:b3:
87:cb:eb:7e:2f:0d:34:b0:dd:63:8d:af:9a:c4:e0:
a7:17:ec:88:6b:60:57:4a:73:e3:1e:45:25:bf:35:
27:9c:10:3a:12:eb:2b:27:ad:96:9a:20:67:4f:8f:
a0:02:13:ee:97:1c:3b:e6:55:e0:ee:6b:60:b8:de:
e3:65:d7:ba:b6:b5:97:16:b0:77:3f:ba:60:8a:cd:
7b:24:f0:6c:31:65:21:d1:f2:19:ea:05:3c:6c:e9:
a2:76:76:7c:50:a3:b9:5c:e0:97:68:58:b4:bf:4b:
65:53:d9:cb:d6:b9:44:71:8a:01:26:7e:10:41:a5:
72:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:5C:AB:D7:95:F2:D1:F9:FE:07:5A:BD:5D:1A:C6:CE:0F:AC:6D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yc9cq9eV8tH5_gdavV0axs4PrG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.61.181.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c2:f2:89:ba:bf:aa:36:e2:fc:a5:85:95:62:fe:59:7f:74:
b8:fc:c9:07:f3:6f:e7:fe:f3:d7:2f:c7:c2:45:a6:01:c5:cf:
34:06:16:21:c6:11:08:93:32:c3:3e:64:b9:5c:53:cc:a7:56:
3e:91:3f:b4:05:19:c6:e7:26:6e:7b:14:ae:9f:93:d5:b3:4e:
04:2f:c7:89:fc:5f:34:86:93:5c:1c:99:c7:e7:8b:66:f3:11:
be:42:1f:43:5b:c8:2f:b1:02:cd:09:24:3b:39:05:e6:f8:89:
d0:45:21:6c:21:51:64:55:98:75:39:fd:9b:6a:80:9d:9f:b3:
7a:0e:ed:3d:13:32:2b:39:73:92:8e:66:15:2e:f5:31:58:86:
00:bc:25:7b:55:7e:7c:02:1e:c8:ef:bb:49:db:39:28:02:96:
ac:04:26:96:b6:11:14:34:89:51:54:45:61:eb:9c:5d:c9:9d:
d7:51:57:9b:ab:37:8a:9a:f2:20:71:8e:51:3d:a9:83:bd:22:
8a:24:f8:65:08:31:cb:6d:bb:e3:1c:99:4e:63:11:ea:aa:7f:
80:37:90:75:98:7f:07:cb:a9:ad:59:2f:64:68:63:92:19:a9:
96:50:82:2e:18:13:7b:ad:8f:fc:76:35:54:67:6f:e4:4b:32:
27:b3:bd:93
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQq1eIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZWU1MzFiOWFjMjk5MGQ2OWE4YTVjMzAyM2U3MmU2ZDg0MWU2YzA5MB4XDTIyMDEw
MTA2MDUwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzljZjVjYWJkNzk1
ZjJkMWY5ZmUwNzVhYmQ1ZDFhYzZjZTBmYWM2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJDa2bN8EQJZh5JtFo3NAqrwKJgfGBzqHb52s+GqonxQTxHN
vL+W1DMR4cT2FzPCIAwR2cNYqrUp5vwh7n+K0/GL/IdRALywvm2hGfsgqd1kLuMf
lNdZx+cDeUmy3Z3fwlanFuwYcd0PEk5lay0LZWujqg5J24h9J7eCG9J8yO+ONze7
G5yzh8vrfi8NNLDdY42vmsTgpxfsiGtgV0pz4x5FJb81J5wQOhLrKyetlpogZ0+P
oAIT7pccO+ZV4O5rYLje42XXura1lxawdz+6YIrNeyTwbDFlIdHyGeoFPGzponZ2
fFCjuVzgl2hYtL9LZVPZy9a5RHGKASZ+EEGlcokCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTJz1yr15Xy0fn+B1q9XRrGzg+sbTAfBgNVHSMEGDAWgBRe5TG5rCmQ1pqK
XDAj5y5thB5sCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1h1VXh1YXdwa05hYWlsd3dJLWN1YllRZWJBay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvOWExZDQ0LTg2MDktNGU1ZS1iYTk0LTVhODZjMjc1N2MxZS8x
L3ljOWNxOWVWOHRINV9nZGF2VjBheHM0UHJHMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
OWExZDQ0LTg2MDktNGU1ZS1iYTk0LTVhODZjMjc1N2MxZS8xL1h1VXh1YXdwa05h
YWlsd3dJLWN1YllRZWJBay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC49tTANBgkqhkiG9w0BAQsFAAOC
AQEAasLyibq/qjbi/KWFlWL+WX90uPzJB/Nv5/7z1y/HwkWmAcXPNAYWIcYRCJMy
wz5kuVxTzKdWPpE/tAUZxucmbnsUrp+T1bNOBC/HifxfNIaTXByZx+eLZvMRvkIf
Q1vIL7ECzQkkOzkF5viJ0EUhbCFRZFWYdTn9m2qAnZ+zeg7tPRMyKzlzko5mFS71
MViGALwle1V+fAIeyO+7Sds5KAKWrAQmlrYRFDSJUVRFYeucXcmd11FXm6s3ipry
IHGOUT2pg70iiiT4ZQgxy2274xyZTmMR6qp/gDeQdZh/B8uprVkvZGhjkhmpllCC
LhgTe62P/HY1VGdv5EsyJ7O9kw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org