Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5QQx4K2altOZfNxb_jVjucNEBIs.roa
File: 5QQx4K2altOZfNxb_jVjucNEBIs.roa (raw, json)
Hash identifier: o8zGCJROU29OL32KvVEz8YCKhc9J3me6yVr9vYIO+vU=
Subject key identifier: E5:04:31:E0:AD:9A:96:D3:99:7C:DC:5B:FE:35:63:B9:C3:44:04:8B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1ECBB5DA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5QQx4K2altOZfNxb_jVjucNEBIs.roa
Signing time: Tue 31 May 2022 07:59:14 +0000
ROA not before: Tue 31 May 2022 07:59:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 92.249.48.0/24 maxlen: 24
193.35.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516666842 (0x1ecbb5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 31 07:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e50431e0ad9a96d3997cdc5bfe3563b9c344048b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:94:49:d4:fe:d1:05:f6:e2:37:88:9c:b7:
d3:9f:54:dc:ee:55:60:82:2c:f4:79:a3:bd:cb:1e:
ad:53:2f:b1:a8:a1:7c:46:7f:a2:ef:43:51:4e:1b:
da:77:5d:3a:e5:19:16:44:32:7e:5f:14:07:7c:ec:
c1:8e:90:d4:25:97:b2:5c:2e:88:50:ae:9e:d7:fe:
5c:26:f9:30:6a:a3:f2:5b:eb:a3:66:f1:ac:34:c7:
27:40:68:f0:bb:11:68:1e:44:cc:99:75:41:f3:95:
15:9e:e3:0a:6f:63:e4:20:21:3f:6b:3b:c3:41:a0:
22:7c:0e:2e:6c:ae:1b:70:fc:1a:2e:af:e7:39:1a:
7f:d9:b2:c9:2d:d4:5c:f1:4d:eb:0a:4f:8f:1d:9e:
2c:db:35:d5:60:eb:a9:ed:2f:e1:06:90:be:98:63:
ab:f7:1a:dc:fa:f7:a1:00:00:74:4b:70:aa:80:9b:
d8:03:a8:71:c8:0f:87:b7:d1:1b:30:b4:40:b0:14:
00:20:05:f6:63:92:6a:cb:4e:64:02:68:ed:8a:b2:
bd:f0:ea:09:88:90:67:26:bb:a3:7d:6f:4a:3d:3d:
5e:02:e5:a4:8c:c5:34:f1:34:3c:94:ed:d2:44:1f:
34:d9:e6:ba:ab:04:c2:d5:99:7a:b9:0d:b1:8f:b9:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:04:31:E0:AD:9A:96:D3:99:7C:DC:5B:FE:35:63:B9:C3:44:04:8B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5QQx4K2altOZfNxb_jVjucNEBIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.48.0/24
193.35.16.0/23
Signature Algorithm: sha256WithRSAEncryption
05:96:9d:e9:f9:c7:bd:c9:62:99:35:20:5a:e5:96:c4:c1:cb:
33:0c:11:95:70:fc:a8:a8:b7:02:b2:3f:f3:dc:d7:14:72:1b:
3f:4e:fd:f7:25:f1:be:7c:d0:18:53:61:f2:7b:b7:14:50:0e:
88:23:67:38:18:b4:db:8d:d6:31:bb:c0:8f:6b:b3:32:fb:d1:
5a:e3:59:2a:bc:86:b7:2d:7c:73:1a:63:89:1d:c7:5c:f1:4f:
31:63:00:31:68:de:ac:a9:4c:31:a6:c4:47:83:15:4a:e7:d2:
b1:d2:dc:88:0c:0c:b8:b1:49:7d:3d:46:16:6a:3b:24:e9:32:
3e:ac:fa:92:23:3f:a2:74:56:cb:e2:a1:30:1b:4e:4b:38:c5:
94:53:aa:09:c2:40:8a:8e:7b:f7:71:f3:98:83:5c:d9:ae:0d:
11:7e:55:68:04:bc:a8:f5:87:98:ed:a7:7e:ab:29:87:f2:cb:
23:d2:4f:e5:81:5e:42:bd:42:8d:77:8b:e1:14:6c:af:d9:5b:
f2:65:72:73:02:1f:7d:46:3e:d5:d3:66:5d:32:ef:2e:34:ce:
e8:ec:df:3c:b7:ad:09:09:37:39:b6:61:43:5d:5f:92:1c:94:
1d:0d:83:36:d9:ce:87:35:59:a5:68:09:c2:aa:17:19:32:7f:
64:7a:9f:4f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEHsu12jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDUz
MTA3NTkxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTUwNDMxZTBhZDlh
OTZkMzk5N2NkYzViZmUzNTYzYjljMzQ0MDQ4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANkDlEnU/tEF9uI3iJy3059U3O5VYIIs9HmjvcserVMvsaih
fEZ/ou9DUU4b2nddOuUZFkQyfl8UB3zswY6Q1CWXslwuiFCuntf+XCb5MGqj8lvr
o2bxrDTHJ0Bo8LsRaB5EzJl1QfOVFZ7jCm9j5CAhP2s7w0GgInwOLmyuG3D8Gi6v
5zkaf9myyS3UXPFN6wpPjx2eLNs11WDrqe0v4QaQvphjq/ca3Pr3oQAAdEtwqoCb
2AOoccgPh7fRGzC0QLAUACAF9mOSastOZAJo7YqyvfDqCYiQZya7o31vSj09XgLl
pIzFNPE0PJTt0kQfNNnmuqsEwtWZerkNsY+5VnUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTlBDHgrZqW05l83Fv+NWO5w0QEizAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
LzVRUXg0SzJhbHRPWmZOeGJfalZqdWNORUJJcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFz5MAMEAcEjEDANBgkqhkiG9w0B
AQsFAAOCAQEABZad6fnHvclimTUgWuWWxMHLMwwRlXD8qKi3ArI/89zXFHIbP079
9yXxvnzQGFNh8nu3FFAOiCNnOBi0243WMbvAj2uzMvvRWuNZKryGty18cxpjiR3H
XPFPMWMAMWjerKlMMabER4MVSufSsdLciAwMuLFJfT1GFmo7JOkyPqz6kiM/onRW
y+KhMBtOSzjFlFOqCcJAio5793HzmINc2a4NEX5VaAS8qPWHmO2nfqsph/LLI9JP
5YFeQr1CjXeL4RRsr9lb8mVycwIffUY+1dNmXTLvLjTO6OzfPLetCQk3ObZhQ11f
khyUHQ2DNtnOhzVZpWgJwqoXGTJ/ZHqfTw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org