Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/EsKH5BMVJsw1p_I3UlupVu7FYs8.roa
File: EsKH5BMVJsw1p_I3UlupVu7FYs8.roa (raw, json)
Hash identifier: MQypRtqiKlNqt0tjF+0iItqRBr8pfFCRMj9Pyn7j/5A=
Subject key identifier: 12:C2:87:E4:13:15:26:CC:35:A7:F2:37:52:5B:A9:56:EE:C5:62:CF
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 37F9E4A6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/EsKH5BMVJsw1p_I3UlupVu7FYs8.roa
Signing time: Thu 28 Apr 2022 12:25:40 +0000
ROA not before: Thu 28 Apr 2022 12:25:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8672
IP address blocks: 151.251.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939123878 (0x37f9e4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 28 12:25:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12c287e4131526cc35a7f237525ba956eec562cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:bb:d2:f1:f6:09:e6:fe:af:6d:2d:89:be:
91:ea:a9:d8:54:1e:69:e2:e9:d3:8a:07:4b:2e:7f:
2f:70:0a:92:bf:4e:4c:f6:2b:24:6e:aa:74:87:1f:
46:66:89:a9:93:8f:0c:2c:c5:cb:d2:77:8c:5c:e4:
ae:9f:ca:eb:9e:a0:6d:33:34:ae:44:42:90:85:a0:
2f:90:64:6d:32:c5:b7:74:4f:aa:3c:9f:bf:9e:47:
73:f4:40:f1:95:0c:88:c3:23:4f:af:6e:12:a7:a8:
71:9b:5b:1b:fe:02:31:f5:b1:8e:78:77:4e:36:ed:
5e:c2:7d:8e:13:3d:a7:7a:43:78:91:70:ff:db:85:
ea:1c:dc:5a:0d:88:56:f6:70:8e:ff:11:01:7b:2e:
2c:0b:ba:87:f2:03:0c:8c:75:85:f5:15:68:bc:ef:
d6:d3:a8:42:d0:aa:95:a2:f6:8f:a0:57:fb:4d:cb:
0d:66:e1:ee:8b:7d:0e:11:a3:91:87:7e:59:77:a2:
c0:7a:7a:4d:05:39:9b:6d:b9:08:b2:92:48:17:dd:
bf:76:46:04:a9:36:ad:e7:c9:cf:cf:bc:2e:bb:f2:
99:e1:20:41:65:77:28:a6:11:59:db:30:ee:ef:b6:
14:d2:42:d5:3f:f6:61:5f:fc:f8:5e:31:f6:ff:c5:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:87:E4:13:15:26:CC:35:A7:F2:37:52:5B:A9:56:EE:C5:62:CF
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/EsKH5BMVJsw1p_I3UlupVu7FYs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.39.0/24
Signature Algorithm: sha256WithRSAEncryption
06:39:d1:83:c9:8f:f0:92:dc:a9:45:c1:0b:08:7a:55:01:9c:
19:f7:33:ad:29:02:1f:e3:f9:bd:12:62:ba:68:4e:e5:f8:f1:
19:63:78:02:ee:65:cf:d8:dc:69:ec:0a:d7:81:bc:c7:ef:fa:
55:a1:66:5e:df:8a:95:e9:25:73:db:b9:3b:39:06:63:4e:83:
71:cd:aa:0a:5f:e1:c2:6b:6b:0a:4b:09:02:e0:2b:a0:7b:65:
f0:db:76:9c:f3:c3:1a:b4:51:19:c5:5e:21:f3:5f:af:8d:a8:
69:83:2e:2c:1b:bf:51:d8:8d:17:80:e0:2d:69:14:81:13:fa:
96:1e:90:e9:cb:a2:b6:63:93:8d:3a:d3:a8:de:a8:91:25:94:
b7:8d:d0:58:95:85:9e:03:1b:4e:c5:b9:36:bb:dd:cb:bf:02:
73:d5:79:5e:87:b0:00:14:9a:1d:8f:be:de:06:fb:da:04:4e:
06:eb:7d:e6:63:5b:0d:42:b4:2f:51:e8:ab:d1:23:1e:05:26:
73:d0:a4:31:31:3a:0f:9c:31:ad:f7:3b:02:48:46:bf:8a:35:
15:05:82:d9:cf:9b:45:a1:85:31:5e:25:4d:d4:6e:ed:cf:d5:
54:57:4d:de:c2:b6:fe:81:e5:39:42:b7:b2:d0:68:d8:95:3f:
95:b2:aa:9f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN/nkpjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMB4XDTIyMDQy
ODEyMjU0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJjMjg3ZTQxMzE1
MjZjYzM1YTdmMjM3NTI1YmE5NTZlZWM1NjJjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOGpu9Lx9gnm/q9tLYm+keqp2FQeaeLp04oHSy5/L3AKkr9O
TPYrJG6qdIcfRmaJqZOPDCzFy9J3jFzkrp/K656gbTM0rkRCkIWgL5BkbTLFt3RP
qjyfv55Hc/RA8ZUMiMMjT69uEqeocZtbG/4CMfWxjnh3TjbtXsJ9jhM9p3pDeJFw
/9uF6hzcWg2IVvZwjv8RAXsuLAu6h/IDDIx1hfUVaLzv1tOoQtCqlaL2j6BX+03L
DWbh7ot9DhGjkYd+WXeiwHp6TQU5m225CLKSSBfdv3ZGBKk2refJz8+8LrvymeEg
QWV3KKYRWdsw7u+2FNJC1T/2YV/8+F4x9v/FFg0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQSwofkExUmzDWn8jdSW6lW7sVizzAfBgNVHSMEGDAWgBQFSM7fFwKe2YoQ
gRPGwQnsrM2C7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JVak8zeGNDbnRtS0VJRVR4c0VKN0t6Tmd1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8x
L0VzS0g1Qk1WSnN3MXBfSTNVbHVwVnU3RllzOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRt
S0VJRVR4c0VKN0t6Tmd1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJf7JzANBgkqhkiG9w0BAQsFAAOC
AQEABjnRg8mP8JLcqUXBCwh6VQGcGfczrSkCH+P5vRJiumhO5fjxGWN4Au5lz9jc
aewK14G8x+/6VaFmXt+Kleklc9u5OzkGY06Dcc2qCl/hwmtrCksJAuAroHtl8Nt2
nPPDGrRRGcVeIfNfr42oaYMuLBu/UdiNF4DgLWkUgRP6lh6Q6cuitmOTjTrTqN6o
kSWUt43QWJWFngMbTsW5Nrvdy78Cc9V5XoewABSaHY++3gb72gROBut95mNbDUK0
L1Hoq9EjHgUmc9CkMTE6D5wxrfc7AkhGv4o1FQWC2c+bRaGFMV4lTdRu7c/VVFdN
3sK2/oHlOUK3stBo2JU/lbKqnw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:18 2023 by rpki-client on console-fra.rpki-client.org