Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J-6dehWX-dovRIP5Nqmp7vbUDuk.roa
File: J-6dehWX-dovRIP5Nqmp7vbUDuk.roa (raw, json)
Hash identifier: FNoSyfXHOKNhsMsZq+zMBh/HTfsuEiXv9fbvnJyWR2M=
Subject key identifier: 27:EE:9D:7A:15:97:F9:DA:2F:44:83:F9:36:A9:A9:EE:F6:D4:0E:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0A5B4670
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J-6dehWX-dovRIP5Nqmp7vbUDuk.roa
Signing time: Tue 10 May 2022 04:52:05 +0000
ROA not before: Tue 10 May 2022 04:52:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59592
IP address blocks: 5.231.200.0/24 maxlen: 32
5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173753968 (0xa5b4670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 10 04:52:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27ee9d7a1597f9da2f4483f936a9a9eef6d40ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:e1:02:e2:25:dc:5b:21:68:0e:22:d6:ac:
3c:22:d4:a1:bf:5c:47:e3:ec:6b:46:a1:a7:fc:1c:
05:1f:c8:53:38:a8:e9:b8:cf:30:ae:62:e7:e5:26:
b2:9f:b5:a8:a5:5b:ff:60:ae:5a:86:37:12:c5:b2:
39:92:b6:ba:d5:c4:7e:b6:38:07:90:a7:75:da:93:
64:b1:98:7e:c6:32:de:47:fa:70:61:19:b3:09:8d:
ff:38:ac:63:09:8f:93:dd:39:a5:2d:ff:7e:79:59:
4e:08:e3:1f:05:39:50:09:1a:58:bf:56:bb:3a:26:
c1:0f:44:bb:96:df:74:13:34:64:f7:9a:9c:82:df:
07:d7:3b:f2:92:0a:b1:8b:37:51:73:1b:ec:5a:7a:
39:17:d5:c6:af:10:7b:df:c6:73:28:01:8c:8d:83:
af:fd:d5:f7:72:c2:84:0d:d1:ab:c6:1d:a1:4c:c7:
3d:f5:45:8c:25:89:bb:3f:e1:5b:af:fc:fa:ff:96:
08:a9:17:31:7a:56:c3:ee:7f:48:d3:26:49:93:ba:
b9:ec:68:df:90:b5:22:f5:db:ad:4e:22:b0:30:e9:
2d:81:53:c7:17:8d:05:47:ed:10:c2:e7:9f:15:cd:
b6:b2:5d:f3:07:ff:c8:b9:23:a9:b3:a7:52:8e:48:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:9D:7A:15:97:F9:DA:2F:44:83:F9:36:A9:A9:EE:F6:D4:0E:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J-6dehWX-dovRIP5Nqmp7vbUDuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
5.231.200.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c9:f6:d9:e7:be:c4:56:7b:b5:ca:cc:f3:94:05:44:d0:42:
b3:76:14:69:c6:d4:00:90:ab:7a:a1:2b:f7:c2:2e:d7:8e:dc:
03:7f:19:aa:e3:90:0f:73:1b:83:c1:6c:14:97:9a:62:ec:5c:
e8:49:4c:eb:ae:fd:1d:cc:01:45:4e:07:47:e1:bb:de:0c:fd:
b8:47:0e:cd:5b:6a:14:c6:13:31:81:ef:36:97:1f:1c:a0:c8:
f0:68:58:5e:59:fd:0e:f8:45:db:6e:66:c9:8e:65:0e:16:21:
59:dc:60:76:88:f6:f4:29:1f:30:27:0d:3f:8d:d5:23:88:b7:
a2:2f:d7:72:e0:5e:a4:68:9b:16:4c:d2:10:ad:30:2b:b0:5c:
1e:01:75:27:c3:c7:f4:e9:32:6a:fc:b9:45:1b:e9:59:bf:6b:
ba:da:a8:0b:bb:02:b0:d0:bf:38:f8:55:9e:29:93:e6:4e:7f:
df:9b:02:ad:6d:73:32:38:79:64:d7:15:09:75:2f:21:29:67:
83:e7:18:ab:07:f9:81:4b:9f:30:48:03:9d:86:41:ca:77:aa:
2e:82:ef:27:07:53:2c:d9:a5:a7:bf:0b:9e:21:1f:1f:3d:52:
23:f4:af:ce:25:cb:86:f9:b4:b7:b1:a4:8f:b7:bf:e3:5b:ba:
bd:93:2b:07
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECltGcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZTYwOTc2OTg2ODZlMTU1NWY1MWY2Yzg4M2JjNWE1ODU0OWIyMzYyMB4XDTIyMDUx
MDA0NTIwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjdlZTlkN2ExNTk3
ZjlkYTJmNDQ4M2Y5MzZhOWE5ZWVmNmQ0MGVlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMTV4QLiJdxbIWgOItasPCLUob9cR+Psa0ahp/wcBR/IUzio
6bjPMK5i5+Umsp+1qKVb/2CuWoY3EsWyOZK2utXEfrY4B5CnddqTZLGYfsYy3kf6
cGEZswmN/zisYwmPk905pS3/fnlZTgjjHwU5UAkaWL9WuzomwQ9Eu5bfdBM0ZPea
nILfB9c78pIKsYs3UXMb7Fp6ORfVxq8Qe9/GcygBjI2Dr/3V93LChA3Rq8YdoUzH
PfVFjCWJuz/hW6/8+v+WCKkXMXpWw+5/SNMmSZO6uexo35C1IvXbrU4isDDpLYFT
xxeNBUftEMLnnxXNtrJd8wf/yLkjqbOnUo5I6bMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQn7p16FZf52i9Eg/k2qanu9tQO6TAfBgNVHSMEGDAWgBQ+YJdphobhVV9R
9siDvFpYVJsjYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BtQ1hhWWFHNFZWZlVmYklnN3hhV0ZTYkkySS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvOTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQwNy8x
L0otNmRlaFdYLWRvdlJJUDVOcW1wN3ZiVUR1ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
OTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQwNy8xL1BtQ1hhWWFHNFZW
ZlVmYklnN3hhV0ZTYkkySS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAAXmzgMEAAXm3AMEAAXnVwMEAAXn
yDANBgkqhkiG9w0BAQsFAAOCAQEAgMn22ee+xFZ7tcrM85QFRNBCs3YUacbUAJCr
eqEr98Iu147cA38ZquOQD3Mbg8FsFJeaYuxc6ElM6679HcwBRU4HR+G73gz9uEcO
zVtqFMYTMYHvNpcfHKDI8GhYXln9DvhF225myY5lDhYhWdxgdoj29CkfMCcNP43V
I4i3oi/XcuBepGibFkzSEK0wK7BcHgF1J8PH9Okyavy5RRvpWb9rutqoC7sCsNC/
OPhVnimT5k5/35sCrW1zMjh5ZNcVCXUvISlng+cYqwf5gUufMEgDnYZByneqLoLv
JwdTLNmlp78LniEfHz1SI/SvziXLhvm0t7Gkj7e/41u6vZMrBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org