Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5G9LiYEg1_cq4QIgg6z9tEZbAtk.roa
File: 5G9LiYEg1_cq4QIgg6z9tEZbAtk.roa (raw, json)
Hash identifier: tLUEumN0oRaeW2xGXDSRTIDyA3puWmsLpqVjtbpRHQU=
Subject key identifier: E4:6F:4B:89:81:20:D7:F7:2A:E1:02:20:83:AC:FD:B4:46:5B:02:D9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183A7DF9D9D50C8CC385FD34ACB25F8E3AD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5G9LiYEg1_cq4QIgg6z9tEZbAtk.roa
Signing time: Wed 05 Oct 2022 11:19:53 +0000
ROA not before: Wed 05 Oct 2022 11:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203647
IP address blocks: 194.135.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:df:9d:9d:50:c8:cc:38:5f:d3:4a:cb:25:f8:e3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 5 11:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e46f4b898120d7f72ae1022083acfdb4465b02d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:9d:29:78:d3:5c:96:1e:9c:ba:f5:34:73:
c1:bc:b6:73:ea:4b:e3:65:51:4f:c0:ef:64:a3:33:
4b:18:8a:44:a0:a2:df:b8:4f:46:49:db:6f:b4:13:
65:5d:69:20:c9:7b:71:99:3c:7d:fa:97:44:c5:c7:
09:12:a6:e2:78:a0:0e:8b:f7:c8:92:6c:a2:37:b5:
41:e4:27:c1:f4:40:6f:ea:99:88:3b:12:d4:28:02:
e1:dc:a6:2d:51:7a:32:95:05:9d:51:80:08:5c:31:
1c:48:7a:37:a2:7e:43:c6:17:64:95:c0:9f:44:15:
b1:68:3b:20:4b:71:18:34:11:76:01:54:49:0f:30:
c2:ef:13:7e:76:22:61:92:b5:f3:b0:be:d1:50:3e:
b2:4a:fc:ea:42:42:b1:0d:0d:a2:c4:e5:c8:4b:96:
ba:94:56:83:e0:be:d9:97:52:f1:26:da:55:08:82:
aa:a8:1f:43:37:8f:0f:67:bf:61:7e:e0:6f:2c:2d:
83:95:eb:fd:49:af:e1:c5:1e:14:d3:a1:2b:52:d5:
7c:44:07:8c:43:0d:a1:9a:56:d5:5f:05:cf:7e:18:
75:6b:91:1f:d2:d4:1d:f2:a8:fe:79:3d:f2:c7:b3:
69:f7:99:bc:17:d6:40:ef:27:29:18:6a:b0:d9:73:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6F:4B:89:81:20:D7:F7:2A:E1:02:20:83:AC:FD:B4:46:5B:02:D9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5G9LiYEg1_cq4QIgg6z9tEZbAtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ec:6c:b7:86:6a:8a:ad:2d:5f:96:64:f2:7c:26:6f:2b:75:
61:b2:ad:64:6f:43:68:a1:6b:9b:64:ae:6f:5f:4b:12:44:56:
61:fb:80:15:d7:e4:54:23:bb:87:14:c3:13:84:4c:4e:55:46:
c2:6c:e7:a9:24:d4:6f:9d:74:bc:83:5f:67:5d:6e:66:d4:1c:
43:fd:20:da:6b:a8:9b:70:9e:c7:de:ad:5e:85:84:42:4c:7c:
1e:28:97:e0:cb:d4:9a:a7:56:1f:40:30:0c:0d:d7:f7:05:75:
1b:0d:f6:6c:05:3a:08:8d:31:6f:1f:aa:eb:16:64:ef:f7:d5:
ad:2d:8d:01:0b:3c:32:1f:df:de:09:fe:08:52:6c:98:60:f7:
4e:17:ad:b3:0c:e8:1b:2b:76:54:f7:e6:31:13:de:30:de:bf:
32:93:61:8e:d9:7b:05:cc:ec:a3:a6:5f:89:e2:8a:e1:c5:64:
ec:07:04:9e:30:f6:a3:19:7d:1c:00:12:fc:1e:68:f9:47:46:
d5:d7:e1:da:a4:49:40:f2:0a:3f:de:e5:d0:57:e3:6f:3e:cf:
01:70:6e:2f:8f:4a:03:86:a2:00:78:c6:bc:5c:c0:31:48:d0:
c4:5d:5c:cb:d0:60:1a:65:93:4d:f8:4f:e8:8c:3e:9f:f4:06:
ba:0f:98:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOn352dUMjMOF/TSssl+OOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMDA1MTExOTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDZmNGI4OTgxMjBkN2Y3MmFlMTAyMjA4M2FjZmRiNDQ2NWIwMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVydKXjTXJYenLr1NHPBvLZz6kvj
ZVFPwO9kozNLGIpEoKLfuE9GSdtvtBNlXWkgyXtxmTx9+pdExccJEqbieKAOi/fI
kmyiN7VB5CfB9EBv6pmIOxLUKALh3KYtUXoylQWdUYAIXDEcSHo3on5DxhdklcCf
RBWxaDsgS3EYNBF2AVRJDzDC7xN+diJhkrXzsL7RUD6ySvzqQkKxDQ2ixOXIS5a6
lFaD4L7Zl1LxJtpVCIKqqB9DN48PZ79hfuBvLC2Dlev9Sa/hxR4U06ErUtV8RAeM
Qw2hmlbVXwXPfhh1a5Ef0tQd8qj+eT3yx7Np95m8F9ZA7ycpGGqw2XModQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFORvS4mBINf3KuECIIOs/bRGWwLZMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNUc5TGlZRWcxX2NxNFFJZ2c2ejl0RVpiQXRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwod3MA0G
CSqGSIb3DQEBCwUAA4IBAQCK7Gy3hmqKrS1flmTyfCZvK3Vhsq1kb0NooWubZK5v
X0sSRFZh+4AV1+RUI7uHFMMThExOVUbCbOepJNRvnXS8g19nXW5m1BxD/SDaa6ib
cJ7H3q1ehYRCTHweKJfgy9Sap1YfQDAMDdf3BXUbDfZsBToIjTFvH6rrFmTv99Wt
LY0BCzwyH9/eCf4IUmyYYPdOF62zDOgbK3ZU9+YxE94w3r8yk2GO2XsFzOyjpl+J
4orhxWTsBwSeMPajGX0cABL8Hmj5R0bV1+HapElA8go/3uXQV+NvPs8BcG4vj0oD
hqIAeMa8XMAxSNDEXVzL0GAaZZNN+E/ojD6f9Aa6D5hv
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org