Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5NPfrkNJadtCckwicp-h_-W7toY.roa
File: 5NPfrkNJadtCckwicp-h_-W7toY.roa (raw, json)
Hash identifier: 9i8MOw2fKJl1i6lCsqev0ge424xM089Bhr9tB9cUO3g=
Subject key identifier: E4:D3:DF:AE:43:49:69:DB:42:72:4C:22:72:9F:A1:FF:E5:BB:B6:86
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 38955833
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5NPfrkNJadtCckwicp-h_-W7toY.roa
Signing time: Sat 01 Jan 2022 05:54:28 +0000
ROA not before: Sat 01 Jan 2022 05:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205472
IP address blocks: 85.254.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949311539 (0x38955833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4d3dfae434969db42724c22729fa1ffe5bbb686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:b0:45:49:4e:98:2c:22:3b:ba:75:71:36:
36:b9:46:f9:73:6c:79:c4:6b:74:5d:66:d7:6d:2e:
63:c6:8e:9d:33:1e:54:87:bc:28:fb:6c:fa:de:97:
83:94:5d:30:45:cd:84:fe:7b:a8:dc:47:7f:79:cc:
2f:65:41:e6:89:af:fe:8b:d6:e9:0a:3e:63:8c:2a:
0f:a0:56:af:7f:3b:4a:df:d0:66:0c:fc:ba:95:5b:
a2:56:89:3b:d7:90:c2:c7:21:e4:fc:11:f6:84:b3:
ff:81:ea:89:e1:3b:32:0d:59:ee:89:ae:30:25:e5:
5e:fc:fe:c9:70:4c:b6:00:7f:e9:56:3a:68:cd:cc:
72:58:6a:a9:74:78:54:0c:b3:22:2c:fd:6d:61:75:
29:eb:60:bd:4a:69:be:64:a2:24:a7:53:19:bc:7f:
df:fb:83:7d:72:c3:a7:12:69:91:bf:d8:56:2b:ef:
eb:7f:6c:9a:78:60:39:99:df:8f:b8:d4:7c:78:23:
64:57:97:eb:92:73:1a:c3:b2:1f:87:68:5c:6a:6b:
94:22:22:af:b3:32:49:10:7c:cc:e7:4f:7e:bf:44:
e0:5b:f5:dd:e7:45:f3:e5:82:7c:54:57:7f:5b:e8:
42:c4:bb:52:9f:1a:df:8b:a8:30:55:dc:ad:57:dd:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D3:DF:AE:43:49:69:DB:42:72:4C:22:72:9F:A1:FF:E5:BB:B6:86
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5NPfrkNJadtCckwicp-h_-W7toY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
67:74:a7:02:14:73:81:dc:67:55:f9:14:65:35:86:4f:21:69:
c1:d3:3c:a8:5b:30:fd:9e:5a:9a:cb:00:c8:71:7f:57:9d:83:
81:47:a5:49:94:64:f5:ca:91:63:11:b4:23:d9:fa:5f:1f:e5:
f9:35:e4:fb:08:9f:79:27:8b:02:87:10:7e:e6:7e:b0:ac:d6:
4d:0a:ad:bc:9b:15:14:d5:4b:2f:ec:9a:17:2a:39:cb:c2:e8:
2b:28:ab:bd:3b:9f:a7:25:7d:cc:da:e6:20:31:8e:86:97:98:
de:15:f9:c7:a7:48:d9:56:ba:83:0c:a6:f8:44:b8:60:fe:36:
fc:22:c2:7f:6b:8c:cc:a7:0c:f7:98:22:23:c3:85:43:88:44:
6b:e5:d6:e0:e5:5d:6b:96:cc:bd:63:08:58:68:d8:fa:dd:48:
b3:ee:e1:67:df:f0:c6:97:aa:51:f5:31:1d:30:c9:18:a0:ff:
9f:f8:e0:c3:28:a9:79:dd:43:51:c1:75:0d:82:a3:fd:15:ea:
8a:fe:f3:ca:4b:be:1d:4d:ef:38:2b:3a:7b:97:91:32:3c:55:
22:f9:c5:19:8a:c8:01:d3:95:03:5a:1f:88:c1:da:b8:71:9f:
1d:24:62:b4:ad:8b:69:bf:89:68:86:e9:a9:82:4e:ea:87:0c:
d7:34:e2:2b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOJVYMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjA5NTJjOGJhOGRhZGIxZDM0ZGU2YzZhOTM4NjRhNjA5ZmM0MWVjMB4XDTIyMDEw
MTA1NTQyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTRkM2RmYWU0MzQ5
NjlkYjQyNzI0YzIyNzI5ZmExZmZlNWJiYjY4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJnUsEVJTpgsIju6dXE2NrlG+XNsecRrdF1m120uY8aOnTMe
VIe8KPts+t6Xg5RdMEXNhP57qNxHf3nML2VB5omv/ovW6Qo+Y4wqD6BWr387St/Q
Zgz8upVbolaJO9eQwsch5PwR9oSz/4HqieE7Mg1Z7omuMCXlXvz+yXBMtgB/6VY6
aM3MclhqqXR4VAyzIiz9bWF1KetgvUppvmSiJKdTGbx/3/uDfXLDpxJpkb/YVivv
639smnhgOZnfj7jUfHgjZFeX65JzGsOyH4doXGprlCIir7MySRB8zOdPfr9E4Fv1
3edF8+WCfFRXf1voQsS7Up8a34uoMFXcrVfd6s8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTk09+uQ0lp20JyTCJyn6H/5bu2hjAfBgNVHSMEGDAWgBSrCVLIuo2tsdNN
5sapOGSmCfxB7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3F3bFN5THFOcmJIVFRlYkdxVGhrcGduOFFldy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvMzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8x
LzVOUGZya05KYWR0Q2Nrd2ljcC1oXy1XN3RvWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
MzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8xL3F3bFN5THFOcmJI
VFRlYkdxVGhrcGduOFFldy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFX+HzANBgkqhkiG9w0BAQsFAAOC
AQEAZ3SnAhRzgdxnVfkUZTWGTyFpwdM8qFsw/Z5amssAyHF/V52DgUelSZRk9cqR
YxG0I9n6Xx/l+TXk+wifeSeLAocQfuZ+sKzWTQqtvJsVFNVLL+yaFyo5y8LoKyir
vTufpyV9zNrmIDGOhpeY3hX5x6dI2Va6gwym+ES4YP42/CLCf2uMzKcM95giI8OF
Q4hEa+XW4OVda5bMvWMIWGjY+t1Is+7hZ9/wxpeqUfUxHTDJGKD/n/jgwyiped1D
UcF1DYKj/RXqiv7zyku+HU3vOCs6e5eRMjxVIvnFGYrIAdOVA1ofiMHauHGfHSRi
tK2Lab+JaIbpqYJO6ocM1zTiKw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-fra.rpki-client.org