Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/lFRUwtrULHZb0QcLKa2p0d0FRKI.roa
File: lFRUwtrULHZb0QcLKa2p0d0FRKI.roa (raw, json)
Hash identifier: 9HwA5/GiiXxLDMVAK11CmIef0lx6BwV9vtIyK3EolRI=
Subject key identifier: 94:54:54:C2:DA:D4:2C:76:5B:D1:07:0B:29:AD:A9:D1:DD:05:44:A2
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 486C8E9B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/lFRUwtrULHZb0QcLKa2p0d0FRKI.roa
Signing time: Sat 01 Jan 2022 03:00:31 +0000
ROA not before: Sat 01 Jan 2022 03:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50896
IP address blocks: 5.188.219.0/24 maxlen: 24
37.9.41.0/24 maxlen: 24
37.9.40.0/24 maxlen: 24
146.185.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215073947 (0x486c8e9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=945454c2dad42c765bd1070b29ada9d1dd0544a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:06:8d:09:6d:53:3c:dd:bc:a7:29:c8:13:
27:d5:a8:f5:6d:5d:70:32:9e:80:11:80:d6:3b:0f:
29:1b:9f:d5:48:4d:07:f8:b1:4a:ca:73:fd:18:1e:
89:47:57:15:70:9f:af:d0:58:e3:61:48:2d:5e:33:
fd:33:ae:68:16:e6:92:0b:d5:ee:99:08:27:52:23:
0e:02:01:9f:d4:a6:fd:3e:38:19:5c:20:b7:3e:3b:
b2:b8:b0:65:d7:0e:4c:69:8d:e1:1c:f5:1b:0b:b6:
78:3f:3e:1f:7d:2d:e6:b7:5c:46:5a:c3:fa:11:5d:
d4:34:8d:88:b9:fd:5d:77:11:ed:ce:c0:dc:0d:3d:
e7:db:22:62:88:25:00:f3:64:0c:db:43:c7:88:1d:
dd:44:f3:1d:00:da:8c:45:1b:9c:e7:7a:74:7c:bf:
19:b3:48:b4:a5:8f:54:ac:ab:06:2b:aa:66:c6:75:
5c:46:5a:93:11:8f:7b:6d:45:e1:3e:f6:81:07:20:
64:02:c4:0e:c0:68:d0:9e:7e:70:34:c2:51:c1:23:
1e:d1:24:2b:d6:7e:53:3f:0b:67:20:f5:75:a6:1d:
cc:0b:88:ea:45:f2:69:ba:f3:58:d1:88:47:39:88:
b0:9f:93:e4:71:44:2e:3c:97:61:bb:e9:7d:55:9c:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:54:54:C2:DA:D4:2C:76:5B:D1:07:0B:29:AD:A9:D1:DD:05:44:A2
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/lFRUwtrULHZb0QcLKa2p0d0FRKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.219.0/24
37.9.40.0/23
146.185.207.0/24
Signature Algorithm: sha256WithRSAEncryption
42:56:f6:3d:96:64:4d:5e:3a:22:7a:48:7f:8f:5d:d4:84:55:
88:7a:7e:a2:10:af:b6:f3:42:65:d5:ca:a2:e6:41:2b:4b:cb:
48:ad:96:33:5a:9b:f7:7c:9f:8c:45:17:db:ab:eb:da:2b:b0:
eb:a6:b4:e8:21:e2:5f:3c:c8:7a:12:4b:1d:48:37:93:8e:dc:
86:4a:20:0d:8c:93:4f:45:98:83:d0:d5:c1:4c:b9:1e:b6:b7:
26:f4:71:b5:30:d4:4c:27:a9:ea:0c:63:bc:5b:db:76:12:c7:
04:48:2e:6d:ab:40:f6:35:84:e3:a4:cd:f7:d6:22:3e:40:47:
c8:43:1e:d3:13:e6:c2:56:57:e3:cf:a5:5a:12:a4:31:a1:b9:
8e:f9:5a:a3:8e:b0:71:11:fd:85:08:3b:7d:91:a8:1c:a0:57:
66:5c:bd:ab:5b:cb:07:95:52:dc:8c:ca:75:8f:7d:59:e9:04:
96:34:eb:5c:2b:63:d1:17:f6:2f:44:da:24:ba:ab:ae:84:34:
11:98:1b:3b:ee:d2:58:1d:ac:0b:10:a4:41:88:19:47:7a:65:
ff:15:74:4e:85:8b:a1:0b:7d:ab:ba:30:ce:2d:d6:13:b0:11:
39:23:d7:61:0b:9c:13:ee:86:c2:e0:c6:ab:38:e5:eb:d5:ca:
cc:cd:fb:b0
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIESGyOmzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWFhOGEwYTVmZGZkNjk4ZTEwNGJlMzZhMmFlZWM4MTNhZWNhMDcxMB4XDTIyMDEw
MTAzMDAzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQ1NDU0YzJkYWQ0
MmM3NjViZDEwNzBiMjlhZGE5ZDFkZDA1NDRhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAML7Bo0JbVM83bynKcgTJ9Wo9W1dcDKegBGA1jsPKRuf1UhN
B/ixSspz/RgeiUdXFXCfr9BY42FILV4z/TOuaBbmkgvV7pkIJ1IjDgIBn9Sm/T44
GVwgtz47sriwZdcOTGmN4Rz1Gwu2eD8+H30t5rdcRlrD+hFd1DSNiLn9XXcR7c7A
3A0959siYoglAPNkDNtDx4gd3UTzHQDajEUbnOd6dHy/GbNItKWPVKyrBiuqZsZ1
XEZakxGPe21F4T72gQcgZALEDsBo0J5+cDTCUcEjHtEkK9Z+Uz8LZyD1daYdzAuI
6kXyabrzWNGIRzmIsJ+T5HFELjyXYbvpfVWczeECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSUVFTC2tQsdlvRBwspranR3QVEojAfBgNVHSMEGDAWgBTqqooKX9/WmOEE
vjairuyBOuygcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZxcUtDbF9mMXBqaEJMNDJvcTdzZ1Ryc29IRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvMjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8x
L2xGUlV3dHJVTEhaYjBRY0xLYTJwMGQwRlJLSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
MjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8xLzZxcUtDbF9mMXBq
aEJMNDJvcTdzZ1Ryc29IRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAAW82wMEASUJKAMEAJK5zzANBgkq
hkiG9w0BAQsFAAOCAQEAQlb2PZZkTV46InpIf49d1IRViHp+ohCvtvNCZdXKouZB
K0vLSK2WM1qb93yfjEUX26vr2iuw66a06CHiXzzIehJLHUg3k47chkogDYyTT0WY
g9DVwUy5Hra3JvRxtTDUTCep6gxjvFvbdhLHBEgubatA9jWE46TN99YiPkBHyEMe
0xPmwlZX48+lWhKkMaG5jvlao46wcRH9hQg7fZGoHKBXZly9q1vLB5VS3IzKdY99
WekEljTrXCtj0Rf2L0TaJLqrroQ0EZgbO+7SWB2sCxCkQYgZR3pl/xV0ToWLoQt9
q7owzi3WE7AROSPXYQucE+6GwuDGqzjl69XKzM37sA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org