Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EQ1yGo1Z-ORW6uSf3wNzWN10x_Q.roa
File: EQ1yGo1Z-ORW6uSf3wNzWN10x_Q.roa (raw, json)
Hash identifier: 9khKN2EVoEZi/KK99IG1el7qvFNFIqR8yb+SsiRtieY=
Subject key identifier: 11:0D:72:1A:8D:59:F8:E4:56:EA:E4:9F:DF:03:73:58:DD:74:C7:F4
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 388890ED
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EQ1yGo1Z-ORW6uSf3wNzWN10x_Q.roa
Signing time: Sat 01 Jan 2022 05:54:22 +0000
ROA not before: Sat 01 Jan 2022 05:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56560
IP address blocks: 159.148.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948474093 (0x388890ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=110d721a8d59f8e456eae49fdf037358dd74c7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:c2:08:4b:97:6e:46:39:06:34:03:e0:e1:
d7:3e:f1:ff:21:30:f9:b3:cd:f8:16:10:80:b5:91:
b6:03:82:bd:3e:4f:f4:0d:7d:cf:db:50:d1:eb:5c:
3a:0d:c4:2f:c6:c5:1e:ce:0d:7c:9a:33:2d:0b:83:
51:c4:4e:d6:63:ab:ee:6f:2f:da:08:07:ea:d1:3a:
58:3b:d0:40:f2:97:9b:e4:23:9e:a4:f0:bf:6c:a6:
44:4b:30:bf:a6:d4:93:8b:32:1a:55:58:d7:08:f3:
de:20:a1:5a:12:71:2a:ac:d4:a8:20:ac:fc:fe:01:
fe:d6:1f:44:b4:6b:1e:ab:ac:58:87:fa:83:1c:72:
08:10:14:bf:c9:1c:1f:d9:42:d8:b3:d3:42:e6:c5:
08:ae:bf:5c:09:b9:4d:2b:ca:25:c0:05:15:ad:54:
f9:ed:a7:45:42:05:2e:d2:3b:01:e5:6d:26:26:41:
a3:da:ff:14:cd:d7:9d:2a:a5:2c:05:ae:26:9d:a6:
a4:a6:d4:db:a3:cd:b6:9e:3d:2b:8b:54:fd:88:df:
b6:f8:fe:3d:05:cf:2c:21:f9:8e:4d:04:ef:f9:13:
16:af:a4:7c:c8:48:bc:fd:9c:74:9f:cb:cb:05:5b:
fc:53:2e:25:da:a8:4d:ab:03:47:6c:2f:26:5f:cc:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0D:72:1A:8D:59:F8:E4:56:EA:E4:9F:DF:03:73:58:DD:74:C7:F4
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EQ1yGo1Z-ORW6uSf3wNzWN10x_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.124.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f8:90:bc:0b:d7:5a:c8:02:3b:cd:3b:98:dd:d0:a4:3b:f1:
3d:2d:7d:6a:f8:31:51:f3:ac:dc:6d:d1:90:04:22:42:0d:1c:
0e:19:a3:ec:4e:3a:06:a2:d4:5e:b8:a4:00:64:8a:5a:a5:a9:
e4:29:96:78:b5:dd:0d:ae:b8:bb:7b:9e:e9:b9:61:be:7b:68:
e2:fa:65:34:5f:53:88:9e:0e:b2:bb:53:94:27:23:93:8b:ac:
19:a7:39:b5:c8:6c:8a:c7:68:45:6d:b8:e8:5b:67:3d:31:aa:
aa:52:6d:42:50:73:ed:8a:47:39:8d:01:9c:8a:9e:0b:c0:6d:
20:4b:06:2a:6d:90:3f:ca:73:9d:4a:9d:8b:12:98:ec:11:f1:
50:f3:d9:0e:d6:52:21:50:a6:dc:5e:0a:c5:af:28:f6:46:44:
83:2c:5b:e2:c1:e6:a8:99:cd:0d:86:d7:c8:b1:f2:7f:3c:3f:
ce:d8:79:f5:7c:74:5c:a2:66:f4:84:f1:1c:80:b2:25:8a:bd:
e6:76:3f:c5:f1:f6:be:f5:4a:46:15:76:16:60:86:a5:33:f5:
20:10:6d:47:49:76:3b:3f:2d:78:d5:06:c1:1c:c5:e7:15:a5:
a4:f0:ae:67:98:29:04:c1:f2:38:3e:ff:27:f5:45:0c:3a:1f:
b1:1f:eb:2a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOIiQ7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjA5NTJjOGJhOGRhZGIxZDM0ZGU2YzZhOTM4NjRhNjA5ZmM0MWVjMB4XDTIyMDEw
MTA1NTQyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTEwZDcyMWE4ZDU5
ZjhlNDU2ZWFlNDlmZGYwMzczNThkZDc0YzdmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKLCwghLl25GOQY0A+Dh1z7x/yEw+bPN+BYQgLWRtgOCvT5P
9A19z9tQ0etcOg3EL8bFHs4NfJozLQuDUcRO1mOr7m8v2ggH6tE6WDvQQPKXm+Qj
nqTwv2ymREswv6bUk4syGlVY1wjz3iChWhJxKqzUqCCs/P4B/tYfRLRrHqusWIf6
gxxyCBAUv8kcH9lC2LPTQubFCK6/XAm5TSvKJcAFFa1U+e2nRUIFLtI7AeVtJiZB
o9r/FM3XnSqlLAWuJp2mpKbU26PNtp49K4tU/Yjftvj+PQXPLCH5jk0E7/kTFq+k
fMhIvP2cdJ/LywVb/FMuJdqoTasDR2wvJl/M0nsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQRDXIajVn45Fbq5J/fA3NY3XTH9DAfBgNVHSMEGDAWgBSrCVLIuo2tsdNN
5sapOGSmCfxB7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3F3bFN5THFOcmJIVFRlYkdxVGhrcGduOFFldy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvMzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8x
L0VRMXlHbzFaLU9SVzZ1U2Yzd056V04xMHhfUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
MzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8xL3F3bFN5THFOcmJI
VFRlYkdxVGhrcGduOFFldy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ+UfDANBgkqhkiG9w0BAQsFAAOC
AQEABfiQvAvXWsgCO807mN3QpDvxPS19avgxUfOs3G3RkAQiQg0cDhmj7E46BqLU
XrikAGSKWqWp5CmWeLXdDa64u3ue6blhvnto4vplNF9TiJ4OsrtTlCcjk4usGac5
tchsisdoRW246FtnPTGqqlJtQlBz7YpHOY0BnIqeC8BtIEsGKm2QP8pznUqdixKY
7BHxUPPZDtZSIVCm3F4Kxa8o9kZEgyxb4sHmqJnNDYbXyLHyfzw/zth59Xx0XKJm
9ITxHICyJYq95nY/xfH2vvVKRhV2FmCGpTP1IBBtR0l2Oz8teNUGwRzF5xWlpPCu
Z5gpBMHyOD7/J/VFDDofsR/rKg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-ams.rpki-client.org