Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XvKKxhWxabdV0ksHdlkdmHd9dZE.roa
File: XvKKxhWxabdV0ksHdlkdmHd9dZE.roa (raw, json)
Hash identifier: J8SkOlo0iQ/ZSC2ZiMFXzUu2f8fIv90GgeATMAWgIy0=
Subject key identifier: 5E:F2:8A:C6:15:B1:69:B7:55:D2:4B:07:76:59:1D:98:77:7D:75:91
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1B2B08C6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XvKKxhWxabdV0ksHdlkdmHd9dZE.roa
Signing time: Thu 19 May 2022 16:56:30 +0000
ROA not before: Thu 19 May 2022 16:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5606
IP address blocks: 217.156.47.0/24 maxlen: 24
217.156.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455805126 (0x1b2b08c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 19 16:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ef28ac615b169b755d24b0776591d98777d7591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:78:42:b3:d2:3d:e5:71:2a:42:44:58:ee:
20:61:f3:c7:f2:fd:bb:6f:44:0d:8e:a7:d9:b0:d8:
3c:46:cf:e5:c4:63:e6:85:5f:03:47:c4:c2:2a:fe:
e5:c9:45:ab:8f:d2:a6:68:9a:ee:5e:e1:a9:47:f6:
c7:b6:20:53:af:1f:e3:d0:96:66:2d:38:0f:76:ef:
82:1f:71:d4:dd:8d:57:73:a1:f4:af:d8:5f:2c:32:
86:6a:75:03:cd:08:1d:ea:2b:30:57:5b:13:01:8e:
15:21:6d:3b:e8:9b:26:a6:38:86:fa:92:de:08:4c:
b7:d7:b4:64:d6:7e:86:0e:91:39:47:59:d3:65:53:
a2:5a:c8:2e:9c:61:30:8c:f1:17:90:7a:de:92:55:
3f:69:9a:86:b7:5d:6f:f5:60:0d:c0:fd:7b:87:e7:
60:ac:7c:03:29:65:ff:05:6d:ae:9d:83:d3:7e:d5:
33:68:63:87:58:f3:86:13:eb:75:be:bd:fa:e3:b5:
0f:d4:3b:58:de:8d:95:c4:ae:c7:e2:9f:22:bd:ad:
c1:50:95:2a:15:56:32:aa:cc:28:b1:c4:32:89:e2:
bb:3a:99:9c:1e:58:51:41:48:c8:d8:d9:83:79:82:
30:04:90:c1:74:de:fd:c1:2f:69:7e:9d:86:48:08:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F2:8A:C6:15:B1:69:B7:55:D2:4B:07:76:59:1D:98:77:7D:75:91
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XvKKxhWxabdV0ksHdlkdmHd9dZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.46.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:0e:bf:f4:4b:9e:1a:6e:56:e6:f4:79:a1:08:74:6c:09:2b:
c9:0e:7d:b8:45:07:3f:6e:43:34:ad:21:96:85:44:f5:f2:02:
2b:83:b5:6a:5e:93:c1:84:63:38:21:42:88:1c:19:0d:dd:0c:
73:de:dd:8b:dd:ec:cc:87:a3:6a:62:c9:0d:ab:f2:c2:af:b6:
96:7f:5b:fb:5f:56:ed:ca:ca:0b:1e:4f:73:6a:15:ae:ba:12:
97:7d:bb:1b:0d:35:d8:49:39:fd:12:3d:97:d8:76:8b:c4:c6:
70:73:8b:23:66:0d:60:b2:fe:2a:ef:d1:05:e1:ee:a7:38:9f:
3e:66:72:f7:2c:55:95:fd:d3:d4:f2:b0:8d:b7:60:3e:de:92:
0c:6b:12:1c:d6:b6:da:69:e6:bb:64:32:74:56:e1:d3:e9:66:
3f:1d:6d:f1:8d:f3:91:d3:1d:f7:55:20:a1:ab:18:51:02:c5:
6c:b0:bf:4f:01:8f:d3:9a:cd:28:1c:e1:f5:e4:ef:d8:0c:2a:
dc:73:37:90:8f:aa:0e:16:00:c0:49:83:2c:81:ac:51:79:66:
b1:f2:f2:de:87:bd:af:69:04:c9:49:7f:5c:30:e3:e2:d2:49:
78:94:b0:48:31:d6:0d:25:d3:28:80:a6:8b:aa:ea:af:a6:8a:
1d:54:7e:95
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGysIxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDUx
OTE2NTYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWVmMjhhYzYxNWIx
NjliNzU1ZDI0YjA3NzY1OTFkOTg3NzdkNzU5MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMvEeEKz0j3lcSpCRFjuIGHzx/L9u29EDY6n2bDYPEbP5cRj
5oVfA0fEwir+5clFq4/Spmia7l7hqUf2x7YgU68f49CWZi04D3bvgh9x1N2NV3Oh
9K/YXywyhmp1A80IHeorMFdbEwGOFSFtO+ibJqY4hvqS3ghMt9e0ZNZ+hg6ROUdZ
02VTolrILpxhMIzxF5B63pJVP2mahrddb/VgDcD9e4fnYKx8Ayll/wVtrp2D037V
M2hjh1jzhhPrdb69+uO1D9Q7WN6NlcSux+KfIr2twVCVKhVWMqrMKLHEMoniuzqZ
nB5YUUFIyNjZg3mCMASQwXTe/cEvaX6dhkgIPgkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRe8orGFbFpt1XSSwd2WR2Yd311kTAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L1h2S0t4aFd4YWJkVjBrc0hkbGtkbUhkOWRaRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdmcLjANBgkqhkiG9w0BAQsFAAOC
AQEAtg6/9EueGm5W5vR5oQh0bAkryQ59uEUHP25DNK0hloVE9fICK4O1al6TwYRj
OCFCiBwZDd0Mc97di93szIejamLJDavywq+2ln9b+19W7crKCx5Pc2oVrroSl327
Gw012Ek5/RI9l9h2i8TGcHOLI2YNYLL+Ku/RBeHupzifPmZy9yxVlf3T1PKwjbdg
Pt6SDGsSHNa22mnmu2QydFbh0+lmPx1t8Y3zkdMd91UgoasYUQLFbLC/TwGP05rN
KBzh9eTv2Awq3HM3kI+qDhYAwEmDLIGsUXlmsfLy3oe9r2kEyUl/XDDj4tJJeJSw
SDHWDSXTKICmi6rqr6aKHVR+lQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org