Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/pNFeNquG1EiE4s_fRL7h9GVyL_s.roa
File: pNFeNquG1EiE4s_fRL7h9GVyL_s.roa (raw, json)
Hash identifier: xHI84WWX+/v80BLfn3rAhPiTr6sGmvlZ3yHwIPuEmEI=
Subject key identifier: A4:D1:5E:36:AB:86:D4:48:84:E2:CF:DF:44:BE:E1:F4:65:72:2F:FB
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 094EAAB3
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/pNFeNquG1EiE4s_fRL7h9GVyL_s.roa
Signing time: Sat 01 Jan 2022 06:00:39 +0000
ROA not before: Sat 01 Jan 2022 06:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213021
IP address blocks: 185.132.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156150451 (0x94eaab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4d15e36ab86d44884e2cfdf44bee1f465722ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b9:3c:cc:63:50:e5:7d:2d:d3:06:ef:82:80:
22:13:50:23:94:06:e4:19:82:a4:e8:b4:d7:47:c4:
c5:14:27:c4:ea:11:e4:fe:0d:55:6d:6f:01:d2:40:
0f:25:41:d1:11:92:bc:38:9b:8a:7a:37:36:99:cc:
80:bd:2e:a9:47:f6:69:e1:1d:3c:a3:fb:fa:9f:8f:
cb:1c:c4:33:7c:75:66:59:6d:63:44:33:d0:57:ff:
d1:a0:ac:54:af:80:64:4d:68:29:33:4c:79:36:bd:
c4:4c:80:9e:b5:43:40:4c:df:b5:54:52:d2:d7:69:
40:b1:3c:2d:d2:04:96:ce:0b:b5:52:24:83:5a:5a:
2f:2a:48:96:7d:35:e2:bb:33:1b:85:1a:38:be:5f:
59:1e:41:f3:a4:73:24:29:c5:96:9a:bd:0a:27:a1:
b4:27:fb:62:2e:ce:15:f2:97:06:2a:42:0f:36:8b:
dd:a8:c9:30:b6:f2:83:05:a2:ba:e3:0b:a0:da:f7:
d0:2c:aa:62:f6:e8:a2:31:5a:32:68:06:16:33:fc:
ee:35:c7:2b:bc:a6:eb:45:89:c6:ae:12:51:84:8c:
19:94:d2:a3:97:4a:bd:80:d3:1b:d3:59:9c:65:01:
59:40:d6:79:e8:93:e5:cf:48:2a:7d:b4:77:a0:82:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:5E:36:AB:86:D4:48:84:E2:CF:DF:44:BE:E1:F4:65:72:2F:FB
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/pNFeNquG1EiE4s_fRL7h9GVyL_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.53.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9e:1b:cd:46:fa:85:e8:f9:b8:33:8f:e0:0b:37:a6:88:97:
45:96:f7:12:87:39:1e:d9:da:4c:96:60:d9:0d:6d:86:20:f2:
15:8b:15:57:98:0c:54:bd:c8:be:7e:56:43:f2:12:6a:fc:f9:
75:04:29:05:87:07:83:e3:7c:98:0a:9b:0f:11:31:0d:a8:75:
8d:20:46:c0:5a:88:3b:5a:8e:40:b0:bb:ba:8b:0e:2f:02:a2:
53:6c:c9:26:34:2c:ba:16:13:f4:6b:94:8b:91:68:55:0f:30:
e1:dc:7a:a7:03:13:63:56:c4:ba:e4:b6:c7:3a:80:02:cc:f2:
e3:5c:cc:10:eb:60:83:36:fa:0b:ff:f5:41:d3:8b:15:5d:1b:
0f:66:16:48:57:16:ad:20:8c:38:a1:30:e9:80:27:e3:01:e5:
b9:2a:b5:5f:03:21:9c:c9:4e:fb:27:5e:c4:90:67:4f:42:34:
a6:8d:74:bc:55:4d:3e:e3:01:96:80:fa:b1:d9:8c:9b:41:d7:
55:01:96:cd:c9:61:09:8d:fd:4d:83:f2:ff:2e:9d:79:47:ad:
85:47:f4:40:51:ba:3f:0b:4a:a7:5e:26:6e:5d:e2:df:6d:da:
55:ed:9a:73:e7:10:49:61:9f:41:4e:ee:6b:cf:9a:34:1e:29:
8a:6b:87:14
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECU6qszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjA0MTViZmM0M2IzOGU5Y2ZkMWExMjk5NTIwMmU4NzYzNzUyZmRlMB4XDTIyMDEw
MTA2MDAzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTRkMTVlMzZhYjg2
ZDQ0ODg0ZTJjZmRmNDRiZWUxZjQ2NTcyMmZmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPe5PMxjUOV9LdMG74KAIhNQI5QG5BmCpOi010fExRQnxOoR
5P4NVW1vAdJADyVB0RGSvDibino3NpnMgL0uqUf2aeEdPKP7+p+PyxzEM3x1Zllt
Y0Qz0Ff/0aCsVK+AZE1oKTNMeTa9xEyAnrVDQEzftVRS0tdpQLE8LdIEls4LtVIk
g1paLypIln014rszG4UaOL5fWR5B86RzJCnFlpq9CiehtCf7Yi7OFfKXBipCDzaL
3ajJMLbygwWiuuMLoNr30CyqYvboojFaMmgGFjP87jXHK7ym60WJxq4SUYSMGZTS
o5dKvYDTG9NZnGUBWUDWeeiT5c9IKn20d6CCP50CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSk0V42q4bUSITiz99EvuH0ZXIv+zAfBgNVHSMEGDAWgBQbBBW/xDs46c/R
oSmVIC6HY3Uv3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0d3UVZ2OFE3T09uUDBhRXBsU0F1aDJOMUw5NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvMDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8x
L3BORmVOcXVHMUVpRTRzX2ZSTDdoOUdWeUxfcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
MDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8xL0d3UVZ2OFE3T09u
UDBhRXBsU0F1aDJOMUw5NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmENTANBgkqhkiG9w0BAQsFAAOC
AQEAcp4bzUb6hej5uDOP4As3poiXRZb3Eoc5HtnaTJZg2Q1thiDyFYsVV5gMVL3I
vn5WQ/ISavz5dQQpBYcHg+N8mAqbDxExDah1jSBGwFqIO1qOQLC7uosOLwKiU2zJ
JjQsuhYT9GuUi5FoVQ8w4dx6pwMTY1bEuuS2xzqAAszy41zMEOtggzb6C//1QdOL
FV0bD2YWSFcWrSCMOKEw6YAn4wHluSq1XwMhnMlO+ydexJBnT0I0po10vFVNPuMB
loD6sdmMm0HXVQGWzclhCY39TYPy/y6deUethUf0QFG6PwtKp14mbl3i323aVe2a
c+cQSWGfQU7ua8+aNB4pimuHFA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org