Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/5jBB3DqQJknP7y05b76rzCHYVio.roa
File: 5jBB3DqQJknP7y05b76rzCHYVio.roa (raw, json)
Hash identifier: tUdRmhGlG/2/RlStuUbwaoCGPCZD5vEQan2W/CtXjIU=
Subject key identifier: E6:30:41:DC:3A:90:26:49:CF:EF:2D:39:6F:BE:AB:CC:21:D8:56:2A
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 0181FC0EFE3DA7D5F0B9B47122464FE8ACAA
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/5jBB3DqQJknP7y05b76rzCHYVio.roa
Signing time: Thu 14 Jul 2022 09:34:09 +0000
ROA not before: Thu 14 Jul 2022 09:34:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8448
IP address blocks: 188.44.128.0/17 maxlen: 17
217.79.128.0/20 maxlen: 20
84.225.192.0/18 maxlen: 18
2a00:1878::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:0e:fe:3d:a7:d5:f0:b9:b4:71:22:46:4f:e8:ac:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Jul 14 09:34:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e63041dc3a902649cfef2d396fbeabcc21d8562a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c9:5f:7b:09:c3:52:27:42:96:26:e9:38:1b:
fc:53:76:1a:f3:bf:35:9b:b4:54:78:03:8b:4e:df:
ba:13:2c:3d:bf:0f:92:c0:f7:f1:a1:3f:2b:e3:84:
c8:31:1f:71:1e:0c:8a:18:13:5d:9e:0f:86:da:c1:
73:80:58:0a:b3:fe:3b:fd:d4:f9:ac:6e:49:a0:7a:
41:6b:dd:d7:1d:30:ca:3d:4e:24:24:a0:33:40:5d:
b6:37:64:d3:41:c6:ee:51:b9:43:03:da:a0:bc:4a:
45:09:47:a9:6e:8e:07:17:3a:5b:d0:d7:33:7d:bb:
4c:aa:6b:d2:7b:46:b7:3c:4f:64:d3:8a:62:98:35:
7b:79:20:f1:c1:f8:87:06:84:cd:87:e5:d6:98:d2:
49:3c:44:2b:50:ed:6f:45:b9:b6:ee:f6:40:0e:0c:
f0:55:ef:a5:94:35:dc:57:15:59:57:3b:5b:9a:fe:
55:9a:50:6f:36:82:97:75:7b:c0:8f:46:86:7c:cc:
e4:af:e4:28:b1:a7:18:42:3a:74:67:b5:9d:cc:e0:
27:e2:e4:ea:34:ba:de:fb:d7:48:5a:dc:72:dc:04:
92:da:02:27:8f:08:ab:c4:d9:3f:e1:49:46:b3:87:
59:3f:59:7e:98:aa:e6:0e:94:09:3b:e7:8d:82:db:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:41:DC:3A:90:26:49:CF:EF:2D:39:6F:BE:AB:CC:21:D8:56:2A
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/5jBB3DqQJknP7y05b76rzCHYVio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.225.192.0/18
188.44.128.0/17
217.79.128.0/20
IPv6:
2a00:1878::/29
Signature Algorithm: sha256WithRSAEncryption
2f:0f:15:8e:3c:31:5d:58:ee:41:9e:bc:fb:7a:f4:00:fe:bd:
9b:ef:48:5b:e7:32:82:25:65:81:44:f0:7d:44:97:8a:cb:39:
9d:bf:c5:8f:e7:20:27:97:fb:4f:e0:e5:ef:63:53:0a:7d:93:
d8:9d:74:5e:fb:31:da:83:4e:24:00:fd:84:55:2c:41:59:24:
81:8e:c6:aa:f0:e4:b2:65:f8:33:ce:7b:75:d0:60:b8:77:1c:
43:fc:66:24:85:61:6a:b6:94:87:7c:f4:52:cc:66:4c:51:8f:
3b:e5:36:f0:55:89:a5:86:3e:ba:f5:e2:8e:dd:d0:0f:b3:9b:
1e:fa:54:76:cd:02:d2:40:36:93:73:d6:e7:5a:9b:d8:fd:8c:
1a:6e:45:49:99:ec:6d:04:ce:54:6a:fb:ad:11:a4:64:e3:8e:
0c:10:31:af:95:76:26:a1:95:a6:95:ca:0f:d5:6f:2a:ee:68:
1d:07:0a:22:3d:e3:80:3c:fd:3f:5b:8b:ac:fc:76:ee:0d:d8:
ba:04:d9:56:3c:9b:d7:17:2f:76:8b:20:66:ae:75:54:8a:bf:
e7:e6:ae:48:b0:e5:78:76:61:cb:94:45:23:a1:0e:99:75:ea:
3b:2f:d3:35:2d:d7:34:96:44:68:5d:ff:c3:5a:23:46:f6:31:
cc:a7:84:95
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYH8Dv49p9XwubRxIkZP6KyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0
YzQwNjMwHhcNMjIwNzE0MDkzNDA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjMwNDFkYzNhOTAyNjQ5Y2ZlZjJkMzk2ZmJlYWJjYzIxZDg1NjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMlfewnDUidClibpOBv8U3Ya8781
m7RUeAOLTt+6Eyw9vw+SwPfxoT8r44TIMR9xHgyKGBNdng+G2sFzgFgKs/47/dT5
rG5JoHpBa93XHTDKPU4kJKAzQF22N2TTQcbuUblDA9qgvEpFCUepbo4HFzpb0Ncz
fbtMqmvSe0a3PE9k04pimDV7eSDxwfiHBoTNh+XWmNJJPEQrUO1vRbm27vZADgzw
Ve+llDXcVxVZVztbmv5VmlBvNoKXdXvAj0aGfMzkr+QosacYQjp0Z7WdzOAn4uTq
NLre+9dIWtxy3ASS2gInjwirxNk/4UlGs4dZP1l+mKrmDpQJO+eNgtvlzwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOYwQdw6kCZJz+8tOW++q8wh2FYqMB8GA1UdIwQY
MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt
MjY5NzE1OTlhNTU0LzEvNWpCQjNEcVFKa25QN3kwNWI3NnJ6Q0hZVmlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0
LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGVOHAAwQH
vCyAAwQE2U+AMA0EAgACMAcDBQMqABh4MA0GCSqGSIb3DQEBCwUAA4IBAQAvDxWO
PDFdWO5Bnrz7evQA/r2b70hb5zKCJWWBRPB9RJeKyzmdv8WP5yAnl/tP4OXvY1MK
fZPYnXRe+zHag04kAP2EVSxBWSSBjsaq8OSyZfgzznt10GC4dxxD/GYkhWFqtpSH
fPRSzGZMUY875TbwVYmlhj669eKO3dAPs5se+lR2zQLSQDaTc9bnWpvY/YwabkVJ
mextBM5UavutEaRk444MEDGvlXYmoZWmlcoP1W8q7mgdBwoiPeOAPP0/W4us/Hbu
Ddi6BNlWPJvXFy92iyBmrnVUir/n5q5IsOV4dmHLlEUjoQ6Zdeo7L9M1Ldc0lkRo
Xf/DWiNG9jHMp4SV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-fra.rpki-client.org