Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/5G92BGF-rUtFNnrUe3rRHCYyiBI.roa
File: 5G92BGF-rUtFNnrUe3rRHCYyiBI.roa (raw, json)
Hash identifier: OLVivSvAE3GuNn+lu/4HZiC6Vuy3GuuKVNJvYnIj41Y=
Subject key identifier: E4:6F:76:04:61:7E:AD:4B:45:36:7A:D4:7B:7A:D1:1C:26:32:88:12
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 29E09E
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/5G92BGF-rUtFNnrUe3rRHCYyiBI.roa
Signing time: Sat 01 Jan 2022 02:58:44 +0000
ROA not before: Sat 01 Jan 2022 02:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56697
IP address blocks: 185.130.216.0/22 maxlen: 24
2a06:e2c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744478 (0x29e09e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Jan 1 02:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e46f7604617ead4b45367ad47b7ad11c26328812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:80:9b:6d:63:69:d8:4d:d6:5c:70:58:6f:
6f:96:8c:23:61:f9:15:0a:94:da:29:2d:71:d3:e0:
3c:97:94:03:99:78:b3:57:46:c8:8c:1f:f9:ad:f3:
05:fd:2a:b0:f2:d1:70:6e:6f:e5:52:2a:b9:bf:50:
fb:68:49:63:1d:b2:7f:c0:43:c8:63:0b:87:03:cc:
d4:67:79:f6:63:30:bd:b2:96:cc:cf:3b:1e:f9:36:
db:89:24:62:24:f7:3a:69:ea:9c:fe:b2:80:db:a5:
99:53:1e:12:7b:00:75:cd:e6:34:ff:6d:c1:52:81:
5f:8a:90:f7:52:f6:3e:08:f5:fb:aa:da:04:54:0e:
3b:be:34:39:0a:c6:95:34:ee:2a:62:98:9b:2d:4d:
13:54:37:0a:c5:cb:fb:9f:9b:f5:fc:f7:fe:d7:c9:
12:98:a0:cd:e7:20:59:ea:89:b5:a7:fe:b4:07:00:
7d:2c:f8:69:81:f9:b2:72:20:77:a7:20:28:8c:ef:
0d:a5:88:48:0b:b5:71:12:f1:08:e1:d6:54:87:3e:
ec:af:50:0a:76:bd:30:90:0d:7b:03:76:af:95:37:
42:b9:f7:34:cf:95:f0:83:be:65:3b:4a:72:47:93:
71:83:42:a3:d0:49:3f:98:ee:b4:dc:9e:0c:5a:56:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6F:76:04:61:7E:AD:4B:45:36:7A:D4:7B:7A:D1:1C:26:32:88:12
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/5G92BGF-rUtFNnrUe3rRHCYyiBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.216.0/22
IPv6:
2a06:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:5d:c8:15:0d:29:18:72:8c:00:59:88:8a:6d:8b:4e:28:cd:
47:21:b1:ac:b8:2f:be:cd:f3:e6:b4:40:c3:1b:d6:4c:5b:39:
04:6b:50:87:f9:e6:07:ec:48:8f:4a:bf:03:4c:b2:ef:b2:68:
bc:37:a7:48:41:fe:bf:69:87:fb:b0:18:2d:1b:46:ab:4c:81:
d1:c4:74:66:fe:92:4f:06:5d:6b:56:34:e6:b2:3f:26:5e:8a:
40:20:98:c5:d6:33:5c:14:1e:93:a2:02:89:b8:bf:bd:e3:2d:
10:78:03:8d:de:aa:5c:23:e4:e0:2c:b0:93:74:b7:e0:13:42:
47:ee:a6:2d:91:ee:e3:06:d5:2e:1b:66:5d:0e:9c:6f:f3:84:
b3:6d:41:05:df:0b:04:61:f0:90:65:43:5f:76:a2:67:3c:8a:
e5:a3:8c:da:de:80:c2:75:33:32:04:c4:22:2c:21:73:78:72:
19:85:19:0f:2b:aa:ef:b7:90:60:8f:5d:32:87:60:a9:89:1f:
a7:e8:a9:b6:11:45:0c:52:8e:08:29:93:36:90:e8:cc:18:ab:
cf:af:de:ed:c7:3f:fd:0d:7f:25:50:6f:00:d5:53:bc:07:8a:
e8:5a:f8:d7:65:a0:26:02:39:cc:f0:86:61:dd:11:bd:f1:84:
fa:98:b7:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDKeCeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
ODlkODdmOGU0MWI1MDgyZDM4OTE2MDE1ZTA1OWU1NmRkMDExNGUwHhcNMjIwMTAx
MDI1ODQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlNDZmNzYwNDYxN2Vh
ZDRiNDUzNjdhZDQ3YjdhZDExYzI2MzI4ODEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA14+Am21jadhN1lxwWG9vlowjYfkVCpTaKS1x0+A8l5QDmXiz
V0bIjB/5rfMF/Sqw8tFwbm/lUiq5v1D7aEljHbJ/wEPIYwuHA8zUZ3n2YzC9spbM
zzse+TbbiSRiJPc6aeqc/rKA26WZUx4SewB1zeY0/23BUoFfipD3UvY+CPX7qtoE
VA47vjQ5CsaVNO4qYpibLU0TVDcKxcv7n5v1/Pf+18kSmKDN5yBZ6om1p/60BwB9
LPhpgfmyciB3pyAojO8NpYhIC7VxEvEI4dZUhz7sr1AKdr0wkA17A3avlTdCufc0
z5Xwg75lO0pyR5Nxg0Kj0Ek/mO603J4MWlZhswIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFORvdgRhfq1LRTZ61Ht60RwmMogSMB8GA1UdIwQYMBaAFEuJ2H+OQbUILTiR
YBXgWeVt0BFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
UzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4MzgtNjQyZGM5MTI3NjgwLzEv
NUc5MkJHRi1yVXRGTm5yVWUzclJIQ1l5aUJJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80
YmE5NzMtMGU5Zi00MzUyLTk4MzgtNjQyZGM5MTI3NjgwLzEvUzRuWWY0NUJ0UWd0
T0pGZ0ZlQlo1VzNRRVU0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYLYMA0EAgACMAcDBQMqBuLAMA0G
CSqGSIb3DQEBCwUAA4IBAQC3XcgVDSkYcowAWYiKbYtOKM1HIbGsuC++zfPmtEDD
G9ZMWzkEa1CH+eYH7EiPSr8DTLLvsmi8N6dIQf6/aYf7sBgtG0arTIHRxHRm/pJP
Bl1rVjTmsj8mXopAIJjF1jNcFB6TogKJuL+94y0QeAON3qpcI+TgLLCTdLfgE0JH
7qYtke7jBtUuG2ZdDpxv84SzbUEF3wsEYfCQZUNfdqJnPIrlo4za3oDCdTMyBMQi
LCFzeHIZhRkPK6rvt5Bgj10yh2CpiR+n6Km2EUUMUo4IKZM2kOjMGKvPr97txz/9
DX8lUG8A1VO8B4roWvjXZaAmAjnM8IZh3RG98YT6mLdy
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:20 2024 by rpki-client on console-ams.rpki-client.org