Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mFyGg9ZXaMEkUcy23v1zIe_5nhk.roa
File: mFyGg9ZXaMEkUcy23v1zIe_5nhk.roa (raw, json)
Hash identifier: ZFWCSOthW6fz9gc1SgVfNf1PdxJUFM0v3kNa+oz+Zig=
Subject key identifier: 98:5C:86:83:D6:57:68:C1:24:51:CC:B6:DE:FD:73:21:EF:F9:9E:19
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856A24E8C55D4E2A3C6FB38379504986CC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mFyGg9ZXaMEkUcy23v1zIe_5nhk.roa
Signing time: Sat 31 Dec 2022 21:44:41 +0000
ROA not before: Sat 31 Dec 2022 21:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 195.58.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:24:e8:c5:5d:4e:2a:3c:6f:b3:83:79:50:49:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 31 21:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=985c8683d65768c12451ccb6defd7321eff99e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:d5:31:a0:a9:c7:61:d5:3c:57:69:d2:4a:
64:0a:14:6b:7f:cd:5f:62:a4:a7:e5:2c:d4:be:59:
c0:27:d0:3c:1d:d2:5c:d0:03:12:6a:bd:22:3b:2c:
ec:bb:b5:a7:24:41:0b:c7:dc:a4:83:b4:1f:2f:4f:
c8:6c:54:76:ef:b8:ef:f1:3a:bc:36:90:8f:71:c7:
8b:a4:ac:34:73:66:52:64:67:3f:69:82:12:7c:ab:
31:21:60:8a:fb:5c:34:85:07:95:14:5d:30:67:58:
04:6a:89:fe:98:5d:57:01:97:ce:49:c4:42:5f:b8:
82:60:79:7c:5f:78:13:18:7f:49:9c:35:8b:09:49:
c3:73:34:1c:01:98:21:69:19:3d:f0:54:71:cb:28:
c4:11:10:ad:0c:d3:18:9e:9b:e0:be:0a:9d:8c:6a:
0b:df:cc:58:1b:94:b5:fe:65:80:bd:c6:81:d3:20:
88:d4:08:14:3a:5b:d7:18:fd:ba:7a:ef:5c:b3:a3:
92:04:26:7f:1a:f5:c3:d0:2f:a4:81:db:d0:72:dc:
d5:98:0d:32:af:42:c6:e8:95:45:2c:be:e4:b1:75:
b8:2e:d2:76:2d:f1:ec:c5:f4:8f:ef:a0:eb:93:a1:
0f:b2:4f:c3:db:70:1e:dc:73:88:9a:9c:8f:89:62:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:86:83:D6:57:68:C1:24:51:CC:B6:DE:FD:73:21:EF:F9:9E:19
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mFyGg9ZXaMEkUcy23v1zIe_5nhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a4:20:22:c9:ab:ed:45:c5:c8:21:6b:00:97:df:7f:65:92:
f3:0f:cc:39:de:b0:0b:5a:29:87:b3:59:7b:90:fe:aa:d7:31:
c5:94:eb:88:63:e9:07:b3:1a:ba:f7:ee:f5:14:17:16:07:5b:
ba:b7:a7:fd:b0:84:2f:a5:00:1d:f3:be:38:d9:3a:4e:03:31:
a4:bd:2a:ce:c6:c7:c4:df:1c:6e:50:2d:fa:bd:f8:c0:6a:01:
2c:62:7f:46:e7:70:e8:79:ff:72:1e:2d:c0:58:42:14:0a:67:
79:60:ec:fe:81:24:7a:75:21:69:8f:66:b9:2f:01:db:69:72:
1d:d8:a5:6f:fa:f0:19:e9:2d:aa:d4:fb:25:f1:69:eb:00:f4:
4e:04:ac:b5:a4:da:2d:e3:38:b4:9c:45:57:70:af:2e:ca:61:
75:b1:d8:43:64:79:02:1f:b4:0d:8d:a8:2a:8c:0e:28:37:eb:
a2:15:19:b3:b2:8e:9a:04:ba:d0:ee:7a:f8:46:7b:ed:b0:c7:
0d:56:fe:54:37:29:85:c4:fa:a1:2b:56:8a:32:5d:ca:2d:61:
36:77:cd:d3:45:7c:cc:59:0b:47:9b:32:82:e5:b0:bc:8b:be:
9b:f6:6c:17:6f:0d:49:1d:28:46:16:8c:c4:ce:6b:c2:f7:fb:
d2:1a:ca:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVqJOjFXU4qPG+zg3lQSYbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMjMxMjE0NDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODVjODY4M2Q2NTc2OGMxMjQ1MWNjYjZkZWZkNzMyMWVmZjk5ZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV/VMaCpx2HVPFdp0kpkChRrf81f
YqSn5SzUvlnAJ9A8HdJc0AMSar0iOyzsu7WnJEELx9ykg7QfL0/IbFR277jv8Tq8
NpCPcceLpKw0c2ZSZGc/aYISfKsxIWCK+1w0hQeVFF0wZ1gEaon+mF1XAZfOScRC
X7iCYHl8X3gTGH9JnDWLCUnDczQcAZghaRk98FRxyyjEERCtDNMYnpvgvgqdjGoL
38xYG5S1/mWAvcaB0yCI1AgUOlvXGP26eu9cs6OSBCZ/GvXD0C+kgdvQctzVmA0y
r0LG6JVFLL7ksXW4LtJ2LfHsxfSP76Drk6EPsk/D23Ae3HOImpyPiWLx8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJhchoPWV2jBJFHMtt79cyHv+Z4ZMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbUZ5R2c5WlhhTUVrVWN5MjN2MXpJZV81bmhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzo1MA0G
CSqGSIb3DQEBCwUAA4IBAQBupCAiyavtRcXIIWsAl99/ZZLzD8w53rALWimHs1l7
kP6q1zHFlOuIY+kHsxq69+71FBcWB1u6t6f9sIQvpQAd87442TpOAzGkvSrOxsfE
3xxuUC36vfjAagEsYn9G53Doef9yHi3AWEIUCmd5YOz+gSR6dSFpj2a5LwHbaXId
2KVv+vAZ6S2q1Psl8WnrAPROBKy1pNot4zi0nEVXcK8uymF1sdhDZHkCH7QNjagq
jA4oN+uiFRmzso6aBLrQ7nr4RnvtsMcNVv5UNymFxPqhK1aKMl3KLWE2d83TRXzM
WQtHmzKC5bC8i76b9mwXbw1JHShGFozEzmvC9/vSGsr5
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:45 2024 by rpki-client on console-ams.rpki-client.org