Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/1-vLiOD-_GUMREgprkn8LcicCZSA.roa
File: 1-vLiOD-_GUMREgprkn8LcicCZSA.roa (raw, json)
Hash identifier: mrmMR9DYWeP3kXV6Xv+vT3/hUgjGgHDJcmbK2/03edo=
Subject key identifier: FA:F2:E2:38:3F:BF:19:43:11:12:0A:6B:92:7F:0B:72:27:02:65:20
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 05E9C6CC
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/1-vLiOD-_GUMREgprkn8LcicCZSA.roa
Signing time: Mon 28 Mar 2022 09:22:34 +0000
ROA not before: Mon 28 Mar 2022 09:22:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47596
IP address blocks: 5.252.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99206860 (0x5e9c6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Mar 28 09:22:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faf2e2383fbf194311120a6b927f0b7227026520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f4:83:82:c3:5d:32:ba:e5:b0:e9:9f:ab:f3:
eb:74:63:8a:9d:d9:2c:08:e0:76:7d:ea:fd:2b:d6:
65:96:1c:99:ab:ff:6d:b2:9e:0a:8b:2a:a5:43:e8:
7c:3e:1b:dd:2c:31:ad:fd:81:82:f1:81:34:c7:64:
bc:73:68:9f:08:5e:23:ce:89:f7:26:4b:75:1e:69:
68:85:1a:b1:a8:e4:4d:56:99:03:de:4e:b1:a0:32:
6a:bf:1d:15:dd:e2:90:a1:3c:ac:ba:a3:55:f9:5b:
d4:eb:a1:00:b5:a8:f9:14:34:30:38:19:28:cd:53:
fc:78:e3:bf:e3:16:bb:46:78:8d:86:a9:37:53:32:
4c:20:d4:f7:67:44:11:62:02:d2:92:09:2d:61:a1:
85:f5:e9:39:3c:79:0c:58:fe:6a:7a:68:cc:16:cd:
70:28:5a:bc:58:f0:df:73:3d:14:5f:e9:02:1f:bc:
92:a7:e6:d1:37:93:e7:b4:de:b8:dd:38:1c:63:6a:
c6:bc:90:5a:33:59:89:d3:d6:7a:37:d2:57:b0:3c:
dc:27:07:c7:3b:52:8d:14:d4:91:16:73:e3:6d:e1:
2d:bb:8e:f4:57:ad:d4:f7:ae:24:5a:7a:57:71:c7:
3f:2a:ff:93:ca:7c:65:82:98:28:50:f3:b2:fc:be:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:E2:38:3F:BF:19:43:11:12:0A:6B:92:7F:0B:72:27:02:65:20
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/1-vLiOD-_GUMREgprkn8LcicCZSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.20.0/24
Signature Algorithm: sha256WithRSAEncryption
24:88:33:dd:60:f2:ea:53:a4:c1:f0:d1:39:eb:d8:3a:34:07:
a1:2d:a9:0d:4b:7c:f3:29:83:ae:f5:03:c7:73:6f:18:c1:9f:
ae:ba:31:3a:3f:a7:ad:f2:c3:22:d1:90:46:7f:92:8d:1c:d5:
d8:42:24:63:79:34:7d:2c:d3:37:d2:42:8f:05:ab:ab:dd:15:
2a:c2:91:ce:22:11:e4:15:b8:be:f9:8a:b9:ea:04:97:cc:b0:
6e:5a:c9:3e:34:1a:75:6d:2b:02:c7:c0:2e:fe:21:0d:21:40:
44:06:e6:bd:71:53:66:27:1e:04:b4:40:d6:d6:cb:ed:10:f1:
26:a4:f9:31:c4:6f:30:b7:68:a9:81:4a:39:21:42:8d:3b:5c:
0e:21:bc:9a:4b:ae:4e:bb:44:da:8f:81:d7:80:07:b5:67:3a:
7e:92:76:f3:22:bd:4d:58:fe:4b:ad:77:d5:c9:18:6c:b0:43:
31:08:8c:ee:6b:bd:7e:59:5a:03:72:a3:f2:2b:15:c6:fa:d1:
50:c2:7f:c3:fb:51:f3:2a:8e:6d:27:1e:f6:48:8c:fa:78:07:
db:ef:72:7e:db:19:19:b9:57:a1:03:ee:0b:00:b6:e6:ea:98:
97:8a:6c:7e:71:8e:2d:d1:52:bf:0d:b7:cc:fb:4d:e2:b8:20:
25:58:a0:15
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBenGzDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDIwZGRkMzk4ZGFjOGY2MmNjMTI1MjYzMjVmMTgyMWZiNzI0Zjc1MB4XDTIyMDMy
ODA5MjIzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmFmMmUyMzgzZmJm
MTk0MzExMTIwYTZiOTI3ZjBiNzIyNzAyNjUyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPL0g4LDXTK65bDpn6vz63Rjip3ZLAjgdn3q/SvWZZYcmav/
bbKeCosqpUPofD4b3Swxrf2BgvGBNMdkvHNonwheI86J9yZLdR5paIUasajkTVaZ
A95OsaAyar8dFd3ikKE8rLqjVflb1OuhALWo+RQ0MDgZKM1T/Hjjv+MWu0Z4jYap
N1MyTCDU92dEEWIC0pIJLWGhhfXpOTx5DFj+anpozBbNcChavFjw33M9FF/pAh+8
kqfm0TeT57TeuN04HGNqxryQWjNZidPWejfSV7A83CcHxztSjRTUkRZz423hLbuO
9Fet1PeuJFp6V3HHPyr/k8p8ZYKYKFDzsvy+lrkCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT68uI4P78ZQxESCmuSfwtyJwJlIDAfBgNVHSMEGDAWgBRtIN3TmNrI9izB
JSYyXxgh+3JPdTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JTRGQwNWpheVBZc3dTVW1NbDhZSWZ0eVQzVS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDEvYTFhODhmLTFkZmYtNGVmZi04MjZiLTM2ZGU2NTcyMzJiZS8x
LzEtdkxpT0QtX0dVTVJFZ3Bya244TGNpY0NaU0Eucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAx
L2ExYTg4Zi0xZGZmLTRlZmYtODI2Yi0zNmRlNjU3MjMyYmUvMS9iU0RkMDVqYXlQ
WXN3U1VtTWw4WUlmdHlUM1UuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAF/BQwDQYJKoZIhvcNAQELBQAD
ggEBACSIM91g8upTpMHw0Tnr2Do0B6EtqQ1LfPMpg671A8dzbxjBn666MTo/p63y
wyLRkEZ/ko0c1dhCJGN5NH0s0zfSQo8Fq6vdFSrCkc4iEeQVuL75irnqBJfMsG5a
yT40GnVtKwLHwC7+IQ0hQEQG5r1xU2YnHgS0QNbWy+0Q8Sak+THEbzC3aKmBSjkh
Qo07XA4hvJpLrk67RNqPgdeAB7VnOn6SdvMivU1Y/kutd9XJGGywQzEIjO5rvX5Z
WgNyo/IrFcb60VDCf8P7UfMqjm0nHvZIjPp4B9vvcn7bGRm5V6ED7gsAtubqmJeK
bH5xji3RUr8Nt8z7TeK4ICVYoBU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org