Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/44EVUfKyuN81EzFuqjvZF46YPfo.roa
File: 44EVUfKyuN81EzFuqjvZF46YPfo.roa (raw, json)
Hash identifier: nUV/l+3PJHo3TemODmUA759p40k5v5h3T1xRSeRTTE0=
Subject key identifier: E3:81:15:51:F2:B2:B8:DF:35:13:31:6E:AA:3B:D9:17:8E:98:3D:FA
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 38ECF3FF
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/44EVUfKyuN81EzFuqjvZF46YPfo.roa
Signing time: Fri 08 Apr 2022 12:48:05 +0000
ROA not before: Fri 08 Apr 2022 12:48:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 87.251.22.0/24 maxlen: 24
87.251.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955053055 (0x38ecf3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Apr 8 12:48:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3811551f2b2b8df3513316eaa3bd9178e983dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:8e:ac:79:79:e3:5f:2a:6d:78:32:c6:1f:
be:31:5c:b4:9c:06:7f:e9:3e:5d:d6:51:69:21:16:
ff:0e:58:5e:b5:fc:15:23:d2:62:07:cc:3f:1c:35:
07:59:fa:5a:80:6c:95:b0:c0:cc:87:b5:c4:74:f8:
e7:a5:52:82:0c:18:59:d7:0b:a3:63:f6:1e:25:83:
43:d3:ba:d0:46:c5:0a:1e:80:26:9e:35:8c:4b:c2:
4a:02:4b:d7:42:78:05:1b:db:15:4c:e3:8a:2c:c1:
b1:d5:e0:33:76:a7:62:ea:59:39:9d:7c:84:cb:8f:
b9:75:a0:f6:14:80:14:67:1c:39:84:ab:55:d1:5b:
87:9b:53:12:ff:c3:ad:c6:52:b3:61:52:63:92:b5:
1b:36:be:a7:c9:3f:da:d5:55:ab:8e:03:03:88:0b:
33:d4:0e:4f:b2:ef:9f:e6:3b:df:2c:62:2b:4a:e2:
91:06:f9:f3:50:9c:4c:1d:94:4d:4c:ba:94:96:36:
e8:95:bf:86:1a:1e:16:83:37:3a:fd:f6:e6:2e:23:
65:cf:d6:c5:07:88:f0:4d:b3:e7:e1:cc:6b:90:1c:
a5:50:a0:df:6b:dd:49:e3:05:78:e1:4f:da:89:d4:
0c:0b:29:0e:9e:5c:05:4c:87:47:44:fb:21:78:10:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:81:15:51:F2:B2:B8:DF:35:13:31:6E:AA:3B:D9:17:8E:98:3D:FA
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/44EVUfKyuN81EzFuqjvZF46YPfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.22.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:0e:db:a0:8c:92:c8:ff:7b:b8:ec:00:f7:9e:45:4c:cb:5f:
02:80:f3:7f:db:77:b8:3c:f6:0a:a3:66:87:fc:5a:05:8b:9a:
1f:a6:81:b9:90:6e:b5:b7:ae:d6:63:3d:3d:78:52:29:58:e0:
35:bf:b0:55:f4:8f:30:c8:32:3d:0b:37:f1:fc:b9:d6:e6:88:
f2:88:c6:4c:12:74:35:d7:6a:71:15:af:fe:32:a8:3b:97:97:
cf:61:4e:f3:e1:1d:f9:06:80:13:4b:2b:6a:75:ba:40:91:65:
52:cd:5b:7c:63:e0:e6:3d:33:0a:79:f1:bf:c9:00:0a:cf:6c:
b0:63:7c:84:5c:e3:f1:45:ed:51:08:3f:6e:19:48:c5:c4:41:
fd:39:bc:9d:1c:34:24:e6:43:bb:52:18:32:89:70:1f:03:f8:
db:92:3b:ce:8b:6e:f3:0c:89:38:09:ec:24:60:b2:d6:65:24:
58:56:71:07:e8:8a:f9:1e:c6:c3:f6:ba:71:f3:b9:11:5f:1b:
5a:50:79:44:b5:f0:8a:f4:34:d5:80:e5:f1:56:50:0c:69:3a:
9a:fc:19:de:24:d1:35:46:31:7d:d0:28:3e:25:ee:bb:5d:d4:
be:88:b1:ba:4a:4f:ce:c2:0b:93:c1:f7:c8:9b:05:b4:58:2e:
f7:f9:30:29
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOOzz/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NTAxODE1YzZmOThmM2EyYjYxODRhZmViZjE4ZWEzNDFiZTg4MmVhMB4XDTIyMDQw
ODEyNDgwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTM4MTE1NTFmMmIy
YjhkZjM1MTMzMTZlYWEzYmQ5MTc4ZTk4M2RmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOv2jqx5eeNfKm14MsYfvjFctJwGf+k+XdZRaSEW/w5YXrX8
FSPSYgfMPxw1B1n6WoBslbDAzIe1xHT456VSggwYWdcLo2P2HiWDQ9O60EbFCh6A
Jp41jEvCSgJL10J4BRvbFUzjiizBsdXgM3anYupZOZ18hMuPuXWg9hSAFGccOYSr
VdFbh5tTEv/DrcZSs2FSY5K1Gza+p8k/2tVVq44DA4gLM9QOT7Lvn+Y73yxiK0ri
kQb581CcTB2UTUy6lJY26JW/hhoeFoM3Ov325i4jZc/WxQeI8E2z5+HMa5AcpVCg
32vdSeMFeOFP2onUDAspDp5cBUyHR0T7IXgQw5ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTjgRVR8rK43zUTMW6qO9kXjpg9+jAfBgNVHSMEGDAWgBTlAYFcb5jzorYY
Sv6/GOo0G+iC6jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVRR0JYRy1ZODZLMkdFci12eGpxTkJ2b2d1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvNWIwMjIyLWVkNjQtNGY1NS1iNDViLTAwNTlmNzM3ZWYwNS8x
LzQ0RVZVZkt5dU44MUV6RnVxanZaRjQ2WVBmby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
NWIwMjIyLWVkNjQtNGY1NS1iNDViLTAwNTlmNzM3ZWYwNS8xLzVRR0JYRy1ZODZL
MkdFci12eGpxTkJ2b2d1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVf7FjANBgkqhkiG9w0BAQsFAAOC
AQEAaw7boIySyP97uOwA955FTMtfAoDzf9t3uDz2CqNmh/xaBYuaH6aBuZButbeu
1mM9PXhSKVjgNb+wVfSPMMgyPQs38fy51uaI8ojGTBJ0NddqcRWv/jKoO5eXz2FO
8+Ed+QaAE0sranW6QJFlUs1bfGPg5j0zCnnxv8kACs9ssGN8hFzj8UXtUQg/bhlI
xcRB/Tm8nRw0JOZDu1IYMolwHwP425I7zotu8wyJOAnsJGCy1mUkWFZxB+iK+R7G
w/a6cfO5EV8bWlB5RLXwivQ01YDl8VZQDGk6mvwZ3iTRNUYxfdAoPiXuu13Uvoix
ukpPzsILk8H3yJsFtFgu9/kwKQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:57 2023 by rpki-client on console-fra.rpki-client.org