Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/f5rkQ_SVJ1aL_nmqroBWJYXZWEA.roa
File: f5rkQ_SVJ1aL_nmqroBWJYXZWEA.roa (raw, json)
Hash identifier: mHUHC5RUAERn1M4qi+0WyjYJJHSCygcxJvrmbWbXimE=
Subject key identifier: 7F:9A:E4:43:F4:95:27:56:8B:FE:79:AA:AE:80:56:25:85:D9:58:40
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 0184A5E6C8E05E6EFF35F3F620C74547E26E
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/f5rkQ_SVJ1aL_nmqroBWJYXZWEA.roa
Signing time: Wed 23 Nov 2022 19:11:16 +0000
ROA not before: Wed 23 Nov 2022 19:11:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201905
IP address blocks: 185.60.116.0/22 maxlen: 24
185.60.116.0/24 maxlen: 24
2a02:71e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:e6:c8:e0:5e:6e:ff:35:f3:f6:20:c7:45:47:e2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Nov 23 19:11:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f9ae443f49527568bfe79aaae80562585d95840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:2f:44:ea:6a:99:a6:80:27:b3:e5:ee:57:
df:4a:fe:e3:52:31:32:2a:cf:5c:9b:99:3f:9e:f9:
14:cc:70:e6:36:8f:ee:b6:50:ed:05:0b:0b:c5:17:
fa:d5:24:a3:f7:91:21:eb:79:72:e2:2c:77:f0:56:
e6:de:21:84:58:89:c3:3f:ee:59:ac:11:c7:96:e3:
bf:05:78:44:0b:4b:31:a2:02:8f:3f:54:78:40:dc:
95:25:62:1f:1f:49:83:17:77:e6:96:b2:4b:88:a6:
ac:eb:09:d6:91:d6:82:4e:68:5f:74:f8:e3:cc:59:
da:ff:2d:d5:06:ef:db:13:95:b6:3c:5b:46:a8:de:
aa:8e:e9:cf:21:79:9b:f7:0b:28:f0:e6:66:d0:db:
22:c9:1a:a3:4c:70:6e:df:c4:a2:7a:b1:1c:c4:6b:
15:4e:89:63:8b:16:67:bf:60:49:b0:2b:86:8d:f2:
49:ea:1a:e3:0d:d7:a2:61:1b:52:47:b6:e5:3a:4e:
bb:cd:a1:93:6b:fc:32:95:4b:4b:56:2c:e5:e0:70:
b6:47:02:a2:dd:f0:e7:d6:a6:2d:9a:99:c7:c2:62:
8c:30:44:db:e2:cd:1c:9b:39:d9:01:65:e5:7c:a7:
b7:b6:2a:5e:86:34:2a:4c:45:09:3f:7b:9c:93:2f:
98:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9A:E4:43:F4:95:27:56:8B:FE:79:AA:AE:80:56:25:85:D9:58:40
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/f5rkQ_SVJ1aL_nmqroBWJYXZWEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.116.0/22
IPv6:
2a02:71e0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:17:53:6a:5a:08:73:d1:4f:d3:5d:45:4e:0b:ba:51:f0:22:
65:da:0b:1c:c4:26:ba:12:ff:24:6c:3c:63:d0:3f:f1:9b:79:
1d:8e:4d:9f:f4:cb:5c:82:52:34:6b:73:eb:93:87:4d:2a:10:
1d:b2:83:3d:d9:5e:24:77:58:c8:24:47:9d:40:b2:a1:42:3b:
5e:f8:b9:52:1c:1b:a5:13:12:3e:5f:7b:f9:43:99:a5:6e:4e:
22:3a:0a:ce:76:75:13:c8:46:db:69:a3:f9:43:72:e4:f5:28:
e4:71:9a:f6:89:c4:3b:23:44:79:a6:3c:53:2c:29:f3:01:78:
6e:fc:23:00:4f:b1:45:82:ca:d1:eb:82:ce:14:9a:00:6a:85:
c9:8a:76:b5:76:73:e8:92:28:80:66:09:35:9c:27:8a:4a:3a:
03:ee:46:08:11:37:86:a3:33:8f:fd:62:21:ff:4a:08:d0:d1:
fc:82:c9:99:40:04:45:ca:cc:6e:1b:a4:80:5e:80:cf:74:d1:
0c:96:27:16:d2:cc:36:81:60:fe:df:b0:ef:4c:ea:0b:73:3c:
51:9a:f1:63:65:d2:40:84:27:6f:1d:ed:05:48:a5:76:0a:16:
ac:96:ce:45:13:29:16:8e:1b:85:4d:5d:78:91:0d:89:45:ce:
fa:ef:a3:d9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYSl5sjgXm7/NfP2IMdFR+JuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyODRjZmE3ODQ0MzQwMjM3ZmU1OWEzODI1YjU0ZjNmNzdl
ZDg1MzIwHhcNMjIxMTIzMTkxMTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjlhZTQ0M2Y0OTUyNzU2OGJmZTc5YWFhZTgwNTYyNTg1ZDk1ODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbcvROpqmaaAJ7Pl7lffSv7jUjEy
Ks9cm5k/nvkUzHDmNo/utlDtBQsLxRf61SSj95Eh63ly4ix38Fbm3iGEWInDP+5Z
rBHHluO/BXhEC0sxogKPP1R4QNyVJWIfH0mDF3fmlrJLiKas6wnWkdaCTmhfdPjj
zFna/y3VBu/bE5W2PFtGqN6qjunPIXmb9wso8OZm0NsiyRqjTHBu38SierEcxGsV
ToljixZnv2BJsCuGjfJJ6hrjDdeiYRtSR7blOk67zaGTa/wylUtLVizl4HC2RwKi
3fDn1qYtmpnHwmKMMETb4s0cmznZAWXlfKe3tipehjQqTEUJP3ucky+YCQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH+a5EP0lSdWi/55qq6AViWF2VhAMB8GA1UdIwQY
MBaAFGKEz6eEQ0Ajf+WaOCW1Tz937YUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mYzFlMzItMGJhNy00ZjhkLWE1YWEt
ZjM4ZjhmZTc5NGQ0LzEvZjVya1FfU1ZKMWFMX25tcXJvQldKWVhaV0VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mYzFlMzItMGJhNy00ZjhkLWE1YWEtZjM4ZjhmZTc5NGQ0
LzEvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTx0MA0E
AgACMAcDBQAqAnHgMA0GCSqGSIb3DQEBCwUAA4IBAQCjF1NqWghz0U/TXUVOC7pR
8CJl2gscxCa6Ev8kbDxj0D/xm3kdjk2f9MtcglI0a3Prk4dNKhAdsoM92V4kd1jI
JEedQLKhQjte+LlSHBulExI+X3v5Q5mlbk4iOgrOdnUTyEbbaaP5Q3Lk9SjkcZr2
icQ7I0R5pjxTLCnzAXhu/CMAT7FFgsrR64LOFJoAaoXJina1dnPokiiAZgk1nCeK
SjoD7kYIETeGozOP/WIh/0oI0NH8gsmZQARFysxuG6SAXoDPdNEMlicW0sw2gWD+
37DvTOoLczxRmvFjZdJAhCdvHe0FSKV2Chasls5FEykWjhuFTV14kQ2JRc7676PZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:57 2024 by rpki-client on console-ams.rpki-client.org