Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2W-FWgP24pzL9g7UtBe0KYbyEZk.roa
File: 2W-FWgP24pzL9g7UtBe0KYbyEZk.roa (raw, json)
Hash identifier: i9/j9+Qhy2UeUlXBtf9XnIKHDGjoAaucqaAqsybToa8=
Subject key identifier: D9:6F:85:5A:03:F6:E2:9C:CB:F6:0E:D4:B4:17:B4:29:86:F2:11:99
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0184A370E7BC8C3E57AE116CB313E76F09F8
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2W-FWgP24pzL9g7UtBe0KYbyEZk.roa
Signing time: Wed 23 Nov 2022 07:43:16 +0000
ROA not before: Wed 23 Nov 2022 07:43:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 5.188.232.0/24 maxlen: 24
5.188.51.0/24 maxlen: 24
5.188.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:70:e7:bc:8c:3e:57:ae:11:6c:b3:13:e7:6f:09:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Nov 23 07:43:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d96f855a03f6e29ccbf60ed4b417b42986f21199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:73:14:2c:e4:f3:1e:f8:7f:c8:26:b9:a0:
d9:33:6d:c4:c7:e8:f4:a5:2b:8d:dd:c3:7f:db:03:
b2:a3:64:98:3a:88:e7:eb:a7:1b:6a:b7:15:1b:ae:
c5:98:58:71:69:8d:c5:eb:d9:fb:8c:0c:4f:e6:0a:
99:48:ad:6e:b0:35:c4:7b:a9:51:f2:7b:18:aa:08:
82:81:e3:35:d5:39:e0:a5:fd:85:11:75:0b:7c:2b:
5c:0d:37:cd:ea:a2:62:c8:dd:e0:91:b9:d0:3a:7a:
ed:0b:4a:ae:fb:2f:78:d2:6e:99:59:2f:0a:c3:32:
23:cf:51:60:4e:f7:16:72:98:e3:bc:de:af:cc:a7:
ff:13:48:9e:6c:39:e4:1e:1c:78:66:3f:4c:53:5a:
1a:54:3d:75:bb:62:45:2a:c5:be:b1:bc:ec:1d:9d:
ba:9a:ca:2b:fa:c0:d2:e3:c4:6e:83:5e:c2:2b:c4:
6c:4b:94:e9:87:09:66:7f:9f:a0:39:d3:da:0a:c0:
a5:d8:ab:51:13:04:0a:fa:38:e1:5f:eb:01:20:3e:
12:3c:03:33:60:6c:09:37:67:ca:c3:38:11:97:c7:
a7:95:d4:5d:07:b1:62:c9:64:52:f0:a0:78:13:34:
fc:f7:de:5a:a5:a9:91:55:57:a0:48:a5:5b:9d:7b:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:85:5A:03:F6:E2:9C:CB:F6:0E:D4:B4:17:B4:29:86:F2:11:99
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2W-FWgP24pzL9g7UtBe0KYbyEZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.51.0/24
5.188.203.0/24
5.188.232.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:03:c8:95:2e:df:ed:f6:68:ad:fa:a2:45:b8:9d:4f:74:92:
ce:90:94:97:a8:11:7a:59:8a:ba:c8:a5:f2:9b:cd:87:cb:e1:
45:07:4f:2d:3f:b1:e2:74:bd:2e:65:6e:0e:41:f3:25:67:19:
0d:95:54:85:59:17:86:e7:05:fe:43:32:df:52:8e:8d:fd:45:
45:4d:d4:e8:90:1a:bd:28:29:d5:93:b2:95:b7:2b:72:c6:2b:
a7:66:ac:5b:5d:c8:a0:80:bb:67:e6:ca:10:e0:37:05:6b:86:
ea:90:fb:3e:45:55:27:bb:92:c2:ea:e6:75:0e:3d:01:14:52:
44:71:4b:d9:5c:8a:f1:42:47:d1:d1:67:2b:f7:e6:9c:fb:db:
c6:fd:38:15:85:a9:db:c2:f7:c8:b9:ac:19:be:35:1a:f5:26:
fe:10:ab:ed:eb:c2:d3:50:1e:a1:fa:86:6d:cb:be:6e:31:9e:
6f:1c:ae:57:d9:ac:a4:df:e7:05:ab:e9:2d:92:6c:0e:38:76:
38:db:ff:d7:45:20:9d:19:1a:df:e9:3b:3f:c2:ec:65:05:59:
9f:e4:23:9d:5e:0a:89:26:24:14:b5:75:fd:44:36:db:2c:4a:
16:b1:e2:a6:78:94:66:5b:f4:09:26:23:51:2c:de:bf:70:bf:
a8:26:9e:af
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYSjcOe8jD5XrhFssxPnbwn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjIxMTIzMDc0MzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTZmODU1YTAzZjZlMjljY2JmNjBlZDRiNDE3YjQyOTg2ZjIxMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rdzFCzk8x74f8gmuaDZM23Ex+j0
pSuN3cN/2wOyo2SYOojn66cbarcVG67FmFhxaY3F69n7jAxP5gqZSK1usDXEe6lR
8nsYqgiCgeM11Tngpf2FEXULfCtcDTfN6qJiyN3gkbnQOnrtC0qu+y940m6ZWS8K
wzIjz1FgTvcWcpjjvN6vzKf/E0iebDnkHhx4Zj9MU1oaVD11u2JFKsW+sbzsHZ26
msor+sDS48Rug17CK8RsS5Tphwlmf5+gOdPaCsCl2KtREwQK+jjhX+sBID4SPAMz
YGwJN2fKwzgRl8enldRdB7FiyWRS8KB4EzT8995apamRVVegSKVbnXvzSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNlvhVoD9uKcy/YO1LQXtCmG8hGZMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvMlctRldnUDI0cHpMOWc3VXRCZTBLWWJ5RVprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbwzAwQA
BbzLAwQABbzoMA0GCSqGSIb3DQEBCwUAA4IBAQDDA8iVLt/t9mit+qJFuJ1PdJLO
kJSXqBF6WYq6yKXym82Hy+FFB08tP7HidL0uZW4OQfMlZxkNlVSFWReG5wX+QzLf
Uo6N/UVFTdTokBq9KCnVk7KVtytyxiunZqxbXciggLtn5soQ4DcFa4bqkPs+RVUn
u5LC6uZ1Dj0BFFJEcUvZXIrxQkfR0Wcr9+ac+9vG/TgVhanbwvfIuawZvjUa9Sb+
EKvt68LTUB6h+oZty75uMZ5vHK5X2ayk3+cFq+ktkmwOOHY42//XRSCdGRrf6Ts/
wuxlBVmf5COdXgqJJiQUtXX9RDbbLEoWseKmeJRmW/QJJiNRLN6/cL+oJp6v
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org