Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/hOULsmYcYIj92Syz50dIfasdUZo.roa
File: hOULsmYcYIj92Syz50dIfasdUZo.roa (raw, json)
Hash identifier: EFNehbp/lVXRGFuNuhJExArRz4jcwUM0YYgTj8/p3AY=
Subject key identifier: 84:E5:0B:B2:66:1C:60:88:FD:D9:2C:B3:E7:47:48:7D:AB:1D:51:9A
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0184D2EABA663DD1114B83A8443F6196BCB7
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/hOULsmYcYIj92Syz50dIfasdUZo.roa
Signing time: Fri 02 Dec 2022 12:58:29 +0000
ROA not before: Fri 02 Dec 2022 12:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21177
IP address blocks: 5.182.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:ea:ba:66:3d:d1:11:4b:83:a8:44:3f:61:96:bc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Dec 2 12:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84e50bb2661c6088fdd92cb3e747487dab1d519a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:c9:27:8d:24:10:64:b2:d4:93:7d:3a:dd:
13:20:a6:ce:9f:f7:95:90:33:bd:94:bb:2f:9b:1b:
49:ff:75:af:7d:f8:7b:43:62:a8:4f:b1:c4:a6:69:
05:ea:2a:0e:d3:84:67:fc:81:49:03:b2:f2:00:07:
3e:f7:8b:55:1d:d0:e4:db:ac:66:cd:86:4c:b3:71:
f6:3c:45:85:b9:17:7c:a1:c0:79:b4:7d:16:78:40:
b8:1e:e8:10:98:de:0b:64:16:c0:4b:30:2f:cb:d3:
a3:71:53:03:2a:7c:a4:cd:be:52:85:0f:b8:a5:dd:
12:57:7e:16:0d:9a:cf:7f:31:f7:f0:48:0d:21:79:
4b:6c:14:66:36:58:70:9c:07:e2:7b:0c:64:87:0e:
bf:d9:50:81:59:77:f1:37:dc:28:d8:0d:31:aa:6c:
fe:8f:23:23:59:54:a5:9b:89:04:b7:2f:77:85:7d:
2e:f4:48:5d:0a:1a:d6:29:c4:97:a7:b4:0d:dd:cd:
9c:4b:52:ae:c4:2f:81:61:6e:7e:e0:2b:83:e0:df:
0d:d0:ec:a1:d9:b4:4f:83:7f:77:37:ba:f3:c6:5c:
7f:cd:b5:93:00:98:3e:9b:5a:42:fa:65:7c:ad:6a:
1b:65:da:b6:53:fa:86:37:52:03:83:ec:ef:f6:04:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E5:0B:B2:66:1C:60:88:FD:D9:2C:B3:E7:47:48:7D:AB:1D:51:9A
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/hOULsmYcYIj92Syz50dIfasdUZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.48.0/24
Signature Algorithm: sha256WithRSAEncryption
55:11:5d:f0:b7:59:7e:9b:d3:d3:96:29:4d:50:3b:78:57:60:
65:ee:6a:90:38:3f:6f:21:3b:e8:7d:9f:c5:20:3f:be:67:28:
96:cc:1e:42:e6:7e:ef:e4:6d:9a:02:32:28:7f:8d:f0:9b:e2:
3c:c6:11:8e:dd:e8:a9:1e:53:65:d5:ac:97:f3:89:ef:bb:51:
9c:b9:fa:a5:cb:59:ab:d8:30:59:51:c7:11:c1:6d:40:88:86:
ba:f8:21:c4:28:ce:88:3c:60:ee:33:f3:4b:8b:c6:cd:be:7e:
7e:43:6d:61:de:d9:96:7b:6a:cb:15:12:47:8c:f5:a0:44:3c:
8e:b2:6a:17:23:b9:5f:ef:d1:64:8f:f3:66:83:d8:24:71:f2:
21:3a:b7:3e:fc:7c:a3:e3:54:52:c7:23:55:9d:f7:61:71:09:
98:42:67:30:56:60:80:8f:d2:21:6c:91:c9:a1:c5:70:13:db:
92:84:37:50:b7:f7:93:1c:c5:76:90:b0:33:11:ad:20:60:2d:
c7:4b:f4:37:d4:2e:a6:36:6c:ef:91:24:37:33:26:7a:d2:3f:
22:cd:3e:7e:68:c8:1d:33:5a:d3:6f:fa:a6:44:f6:20:72:56:
40:fa:1f:cf:b6:ad:0d:09:50:89:38:70:3e:6b:62:ff:53:90:
46:75:b6:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTS6rpmPdERS4OoRD9hlry3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjIxMjAyMTI1ODI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGU1MGJiMjY2MWM2MDg4ZmRkOTJjYjNlNzQ3NDg3ZGFiMWQ1MTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1fJJ40kEGSy1JN9Ot0TIKbOn/eV
kDO9lLsvmxtJ/3Wvffh7Q2KoT7HEpmkF6ioO04Rn/IFJA7LyAAc+94tVHdDk26xm
zYZMs3H2PEWFuRd8ocB5tH0WeEC4HugQmN4LZBbASzAvy9OjcVMDKnykzb5ShQ+4
pd0SV34WDZrPfzH38EgNIXlLbBRmNlhwnAfiewxkhw6/2VCBWXfxN9wo2A0xqmz+
jyMjWVSlm4kEty93hX0u9EhdChrWKcSXp7QN3c2cS1KuxC+BYW5+4CuD4N8N0Oyh
2bRPg393N7rzxlx/zbWTAJg+m1pC+mV8rWobZdq2U/qGN1IDg+zv9gS3VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFITlC7JmHGCI/dkss+dHSH2rHVGaMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvaE9VTHNtWWNZSWo5MlN5ejUwZElmYXNkVVpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbYwMA0G
CSqGSIb3DQEBCwUAA4IBAQBVEV3wt1l+m9PTlilNUDt4V2Bl7mqQOD9vITvofZ/F
ID++ZyiWzB5C5n7v5G2aAjIof43wm+I8xhGO3eipHlNl1ayX84nvu1Gcufqly1mr
2DBZUccRwW1AiIa6+CHEKM6IPGDuM/NLi8bNvn5+Q21h3tmWe2rLFRJHjPWgRDyO
smoXI7lf79Fkj/Nmg9gkcfIhOrc+/Hyj41RSxyNVnfdhcQmYQmcwVmCAj9IhbJHJ
ocVwE9uShDdQt/eTHMV2kLAzEa0gYC3HS/Q31C6mNmzvkSQ3MyZ60j8izT5+aMgd
M1rTb/qmRPYgclZA+h/Ptq0NCVCJOHA+a2L/U5BGdba9
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-ams.rpki-client.org