Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/K1o5hq4IdWqiocb2X8CnkSmHx-E.roa
File: K1o5hq4IdWqiocb2X8CnkSmHx-E.roa (raw, json)
Hash identifier: 6w/t9kOHpQFOqHtnveqvkpvUoedC80K0k+QLsSuyQ5Q=
Subject key identifier: 2B:5A:39:86:AE:08:75:6A:A2:A1:C6:F6:5F:C0:A7:91:29:87:C7:E1
Certificate issuer: /CN=185d46b7c9d321c9ba189e66b1933c1324197cec
Certificate serial: 092C0BB9
Authority key identifier: 18:5D:46:B7:C9:D3:21:C9:BA:18:9E:66:B1:93:3C:13:24:19:7C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/K1o5hq4IdWqiocb2X8CnkSmHx-E.roa
Signing time: Sat 01 Jan 2022 12:02:50 +0000
ROA not before: Sat 01 Jan 2022 12:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62200
IP address blocks: 82.202.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153881529 (0x92c0bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185d46b7c9d321c9ba189e66b1933c1324197cec
Validity
Not Before: Jan 1 12:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b5a3986ae08756aa2a1c6f65fc0a7912987c7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:ab:9f:5c:b5:09:98:3f:05:97:5d:76:35:
8a:5e:ff:0a:5a:ca:e2:80:d8:e7:e8:31:42:17:a8:
4c:cf:bc:48:33:d7:47:b2:83:76:96:a6:7c:e5:8e:
39:e4:8d:86:03:ba:a7:a8:9d:d3:a9:e6:63:8a:03:
fc:61:5a:7d:d7:12:16:43:77:8a:70:c3:93:e1:71:
0b:ff:75:a4:cb:cd:d7:5d:82:c9:10:49:70:45:9e:
ad:c6:b9:3d:98:cc:be:f0:a7:e0:a9:30:07:35:d0:
4f:58:e7:45:5e:e1:66:9a:61:ba:ae:92:9b:cf:9b:
d6:4d:b4:dc:fc:5a:f4:10:f3:cc:2c:c7:1e:c3:07:
f9:1e:dd:d1:3f:9a:2b:c0:40:e9:ef:8b:f7:71:c3:
95:9c:9c:7e:8b:a2:6f:0c:ce:0e:2a:85:24:95:68:
bc:9e:5a:8c:6c:f8:9b:54:ac:50:c4:7f:2d:b8:b8:
65:90:42:ab:9b:f5:90:51:4d:d4:d3:0f:83:6d:73:
b9:fe:4d:e9:52:97:d6:d4:6c:62:5e:76:f4:04:f3:
90:9a:13:f4:f4:fa:47:17:b2:c3:1b:fc:8e:a6:ac:
52:69:97:cf:6a:fe:e2:67:57:fd:1d:7e:9b:d9:13:
ed:ac:0e:1e:54:ea:7c:8b:02:f1:90:17:01:2c:a0:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5A:39:86:AE:08:75:6A:A2:A1:C6:F6:5F:C0:A7:91:29:87:C7:E1
X509v3 Authority Key Identifier:
keyid:18:5D:46:B7:C9:D3:21:C9:BA:18:9E:66:B1:93:3C:13:24:19:7C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/K1o5hq4IdWqiocb2X8CnkSmHx-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.202.164.0/24
Signature Algorithm: sha256WithRSAEncryption
24:59:86:f1:12:6e:8d:4b:bf:94:2c:51:38:67:ab:29:61:3d:
ce:cb:6c:be:9a:c4:50:01:75:91:fb:de:c4:81:7f:a7:a9:82:
01:a1:59:91:e1:07:f6:d6:0a:98:a5:45:00:60:ed:f9:a7:b3:
73:e5:06:60:38:d5:e8:5a:69:31:9f:dc:2b:34:e4:f6:a7:50:
7b:8b:10:b5:f1:66:35:c1:92:37:49:81:39:60:5e:cc:f8:a0:
dd:75:45:e5:07:e1:04:88:b4:75:c1:bf:80:86:80:b3:b1:4f:
0f:e6:0e:19:5c:4b:df:e3:41:18:f3:3b:dd:c2:2e:a6:ad:67:
e8:72:e3:ff:4e:b4:83:60:a0:f3:7a:f4:72:9f:55:73:14:08:
14:95:ec:1f:f8:03:f1:9a:d2:f1:f7:2f:da:9e:43:ac:85:08:
4a:e7:d5:2b:56:8b:52:cd:00:ad:90:37:56:0d:91:d2:ab:28:
f3:a9:c8:b7:8c:58:e4:79:ac:f1:ef:0a:91:c5:a3:2c:7c:27:
0d:08:9c:11:bd:7b:9c:38:d5:a2:f0:c0:f1:e4:53:42:fe:96:
7d:92:3a:6d:24:d6:e2:c7:55:6d:92:87:94:02:e2:99:51:f9:
65:4d:d0:3e:fc:d4:75:63:27:b8:a7:45:a7:da:cd:c3:49:8d:
bc:22:a0:71
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECSwLuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ODVkNDZiN2M5ZDMyMWM5YmExODllNjZiMTkzM2MxMzI0MTk3Y2VjMB4XDTIyMDEw
MTEyMDI1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmI1YTM5ODZhZTA4
NzU2YWEyYTFjNmY2NWZjMGE3OTEyOTg3YzdlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM75q59ctQmYPwWXXXY1il7/ClrK4oDY5+gxQheoTM+8SDPX
R7KDdpamfOWOOeSNhgO6p6id06nmY4oD/GFafdcSFkN3inDDk+FxC/91pMvN112C
yRBJcEWerca5PZjMvvCn4KkwBzXQT1jnRV7hZpphuq6Sm8+b1k203Pxa9BDzzCzH
HsMH+R7d0T+aK8BA6e+L93HDlZycfouibwzODiqFJJVovJ5ajGz4m1SsUMR/Lbi4
ZZBCq5v1kFFN1NMPg21zuf5N6VKX1tRsYl529ATzkJoT9PT6Rxeywxv8jqasUmmX
z2r+4mdX/R1+m9kT7awOHlTqfIsC8ZAXASygdY8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQrWjmGrgh1aqKhxvZfwKeRKYfH4TAfBgNVHSMEGDAWgBQYXUa3ydMhyboY
nmaxkzwTJBl87DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dGMUd0OG5USWNtNkdKNW1zWk04RXlRWmZPdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDQvYmNhYmI5LWZiZGItNDMxMS1hMjljLWMxN2RlNTBmZDVmYi8x
L0sxbzVocTRJZFdxaW9jYjJYOENua1NtSHgtRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQv
YmNhYmI5LWZiZGItNDMxMS1hMjljLWMxN2RlNTBmZDVmYi8xL0dGMUd0OG5USWNt
NkdKNW1zWk04RXlRWmZPdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFLKpDANBgkqhkiG9w0BAQsFAAOC
AQEAJFmG8RJujUu/lCxROGerKWE9zstsvprEUAF1kfvexIF/p6mCAaFZkeEH9tYK
mKVFAGDt+aezc+UGYDjV6FppMZ/cKzTk9qdQe4sQtfFmNcGSN0mBOWBezPig3XVF
5QfhBIi0dcG/gIaAs7FPD+YOGVxL3+NBGPM73cIupq1n6HLj/060g2Cg83r0cp9V
cxQIFJXsH/gD8ZrS8fcv2p5DrIUISufVK1aLUs0ArZA3Vg2R0qso86nIt4xY5Hms
8e8KkcWjLHwnDQicEb17nDjVovDA8eRTQv6WfZI6bSTW4sdVbZKHlALimVH5ZU3Q
PvzUdWMnuKdFp9rNw0mNvCKgcQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:49 2023 by rpki-client on console-ams.rpki-client.org