Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yUbXxMrZ_Brjh9FHtYt7IpznIvc.roa
File: yUbXxMrZ_Brjh9FHtYt7IpznIvc.roa (raw, json)
Hash identifier: tLaRWbIEqFNQiU0GlT5MRVFU7Qe08BoojYNyx4mu9/g=
Subject key identifier: C9:46:D7:C4:CA:D9:FC:1A:E3:87:D1:47:B5:8B:7B:22:9C:E7:22:F7
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 4873911C
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yUbXxMrZ_Brjh9FHtYt7IpznIvc.roa
Signing time: Sat 01 Jan 2022 03:00:34 +0000
ROA not before: Sat 01 Jan 2022 03:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59947
IP address blocks: 5.189.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215533340 (0x4873911c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c946d7c4cad9fc1ae387d147b58b7b229ce722f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:65:b2:3f:fc:91:3e:a2:6b:ad:e5:fe:35:d6:
0f:1c:33:07:45:bb:5b:f1:59:8d:46:48:6c:ee:3c:
e1:bb:fa:42:e2:93:6e:60:ee:44:e0:46:a0:27:d7:
11:04:83:73:c4:c8:18:0d:b9:20:d9:0a:2d:4b:1e:
dd:9b:29:14:0b:48:7c:eb:e5:68:fa:c5:84:46:6d:
75:e5:19:fe:bc:12:cd:c5:64:24:a3:6e:0d:2e:be:
cc:2a:7f:29:7e:b3:95:00:87:b0:31:e5:94:64:ba:
6e:b2:d9:5f:44:b1:8a:51:67:99:0c:46:25:17:85:
ec:80:dc:da:2e:21:32:fb:91:14:08:78:45:fc:74:
1f:15:55:dc:b2:64:43:ac:32:6e:c8:7f:b8:3c:2d:
af:d7:48:45:74:e6:b8:84:67:76:4c:a2:18:97:d6:
11:06:d7:11:b4:5b:11:f9:59:13:18:04:c9:e4:64:
8d:7b:47:61:29:4e:7d:da:94:41:7f:37:f1:23:c7:
b4:7f:5f:85:3e:8c:ae:b8:30:c6:d0:9d:79:b6:70:
0c:75:b4:10:28:7e:13:57:6c:b2:cd:8f:81:61:6f:
6e:89:75:5b:00:fe:e1:30:ce:e9:18:b0:8b:77:e4:
9a:ee:be:7a:59:d2:f5:88:4a:45:1f:52:4e:5a:fa:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:46:D7:C4:CA:D9:FC:1A:E3:87:D1:47:B5:8B:7B:22:9C:E7:22:F7
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/yUbXxMrZ_Brjh9FHtYt7IpznIvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.189.254.0/24
Signature Algorithm: sha256WithRSAEncryption
65:1f:ad:3e:2e:fb:bf:39:22:73:c9:d9:97:58:66:fd:f1:dd:
31:41:a5:b0:34:af:be:34:92:c1:c9:6b:27:7d:45:ee:94:3c:
9a:a4:60:a9:2f:e2:f3:62:cb:74:61:d4:7c:f1:85:4b:38:d9:
6a:7b:b8:3c:4d:5c:92:01:f2:d6:3a:d5:16:7d:43:6d:a8:5e:
86:67:1d:c0:54:09:d1:2e:f5:32:6d:0b:e5:69:3e:29:62:f5:
7e:d2:c0:e5:1c:57:91:d4:0a:a5:05:f9:c7:53:fa:26:5c:3f:
e8:02:68:7a:1b:ba:11:98:41:ac:1c:a2:95:aa:8e:c4:de:82:
35:ee:8e:3d:73:95:3d:ca:12:25:8c:3a:a0:a8:d6:b1:20:a3:
a9:a4:75:1f:e0:0e:e6:07:aa:47:f1:cb:12:2d:a0:9b:8e:87:
c0:c7:c7:a2:f3:0a:d7:05:10:14:95:58:44:cd:fb:cc:f8:23:
92:3a:56:e6:b8:6f:eb:fb:f1:5d:4c:73:9e:2a:ed:b5:4d:07:
15:fc:7b:85:14:87:52:ed:24:0f:84:0c:67:20:d2:79:85:c4:
50:23:fb:53:7e:da:0d:58:23:50:63:e4:65:41:87:77:a8:fe:
bb:62:96:1b:f8:36:45:eb:97:73:91:da:1e:a2:db:62:02:9f:
23:9c:33:51
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIESHORHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWFhOGEwYTVmZGZkNjk4ZTEwNGJlMzZhMmFlZWM4MTNhZWNhMDcxMB4XDTIyMDEw
MTAzMDAzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzk0NmQ3YzRjYWQ5
ZmMxYWUzODdkMTQ3YjU4YjdiMjI5Y2U3MjJmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI1lsj/8kT6ia63l/jXWDxwzB0W7W/FZjUZIbO484bv6QuKT
bmDuROBGoCfXEQSDc8TIGA25INkKLUse3ZspFAtIfOvlaPrFhEZtdeUZ/rwSzcVk
JKNuDS6+zCp/KX6zlQCHsDHllGS6brLZX0SxilFnmQxGJReF7IDc2i4hMvuRFAh4
Rfx0HxVV3LJkQ6wybsh/uDwtr9dIRXTmuIRndkyiGJfWEQbXEbRbEflZExgEyeRk
jXtHYSlOfdqUQX838SPHtH9fhT6MrrgwxtCdebZwDHW0ECh+E1dsss2PgWFvbol1
WwD+4TDO6Riwi3fkmu6+elnS9YhKRR9STlr6TbUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTJRtfEytn8GuOH0Ue1i3sinOci9zAfBgNVHSMEGDAWgBTqqooKX9/WmOEE
vjairuyBOuygcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZxcUtDbF9mMXBqaEJMNDJvcTdzZ1Ryc29IRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvMjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8x
L3lVYlh4TXJaX0Jyamg5Rkh0WXQ3SXB6bkl2Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
MjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8xLzZxcUtDbF9mMXBq
aEJMNDJvcTdzZ1Ryc29IRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW9/jANBgkqhkiG9w0BAQsFAAOC
AQEAZR+tPi77vzkic8nZl1hm/fHdMUGlsDSvvjSSwclrJ31F7pQ8mqRgqS/i82LL
dGHUfPGFSzjZanu4PE1ckgHy1jrVFn1DbahehmcdwFQJ0S71Mm0L5Wk+KWL1ftLA
5RxXkdQKpQX5x1P6Jlw/6AJoehu6EZhBrByilaqOxN6CNe6OPXOVPcoSJYw6oKjW
sSCjqaR1H+AO5geqR/HLEi2gm46HwMfHovMK1wUQFJVYRM37zPgjkjpW5rhv6/vx
XUxznirttU0HFfx7hRSHUu0kD4QMZyDSeYXEUCP7U37aDVgjUGPkZUGHd6j+u2KW
G/g2ReuXc5HaHqLbYgKfI5wzUQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org