Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/CG-xYhnzoPFd0hJq08jisRx3Vyo.roa
File: CG-xYhnzoPFd0hJq08jisRx3Vyo.roa (raw, json)
Hash identifier: 5syNIpfNMF2zzV8Zej3lxRHNd0+6gVzlvMRSeoVEKv8=
Subject key identifier: 08:6F:B1:62:19:F3:A0:F1:5D:D2:12:6A:D3:C8:E2:B1:1C:77:57:2A
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 3997C113
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/CG-xYhnzoPFd0hJq08jisRx3Vyo.roa
Signing time: Wed 22 Jun 2022 01:07:44 +0000
ROA not before: Wed 22 Jun 2022 01:07:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31486
IP address blocks: 185.96.170.0/24 maxlen: 24
185.96.169.0/24 maxlen: 24
2a06:9140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966246675 (0x3997c113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jun 22 01:07:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=086fb16219f3a0f15dd2126ad3c8e2b11c77572a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:5c:e1:c2:f6:b6:63:51:fc:2b:95:ad:e3:
af:62:b7:fa:c5:ae:61:20:a4:f8:c8:7a:8f:e0:01:
f5:51:0d:e0:9f:f4:49:d0:21:83:73:b9:64:03:20:
b9:b2:e8:01:19:18:3e:03:86:be:3b:7c:86:4b:fd:
a8:c5:b8:73:ad:67:e2:4e:81:4c:e3:c6:64:99:66:
cd:3c:60:af:b9:25:45:0b:21:77:11:1a:39:e9:cb:
57:54:de:18:dc:b6:14:58:a9:ba:ae:e3:fc:28:80:
a8:db:dd:33:f4:93:56:dc:d5:6a:fc:35:d0:4d:23:
8f:c5:d0:ae:7b:cc:3c:aa:1e:71:b1:8f:99:d8:d0:
b3:31:1d:ae:4e:03:a1:6c:b9:5d:2c:48:a0:67:43:
f3:2f:45:8e:28:7f:85:2d:dd:f0:d2:a6:cf:1d:47:
32:07:35:10:a0:ad:48:24:1c:a3:70:20:57:2b:72:
d4:51:e1:39:cb:66:cd:d6:e3:4c:eb:25:33:28:3e:
8c:87:ad:55:df:43:b3:15:00:3d:1f:ad:a4:17:99:
fc:cd:fd:3e:3a:aa:4c:b8:0e:1d:e1:68:fc:11:75:
f4:8f:03:71:ab:49:59:c5:33:08:c4:e2:6d:fe:12:
ef:6a:dc:48:02:af:4f:4f:d4:2a:b7:ba:5a:ac:0d:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6F:B1:62:19:F3:A0:F1:5D:D2:12:6A:D3:C8:E2:B1:1C:77:57:2A
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/CG-xYhnzoPFd0hJq08jisRx3Vyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.169.0-185.96.170.255
IPv6:
2a06:9140::/29
Signature Algorithm: sha256WithRSAEncryption
18:5a:bc:be:27:ed:4d:26:1e:7d:e8:d8:94:ec:16:79:ba:8b:
f6:78:d9:e7:33:b8:9a:85:cd:32:a9:89:92:69:10:57:69:c3:
73:d6:e4:1c:fe:e4:c8:14:b1:48:93:30:9d:aa:cb:69:99:3c:
d7:56:1b:f8:f2:2e:02:4d:dc:d0:a9:84:02:cc:af:b6:14:e7:
2c:ca:b9:22:c6:b3:84:da:cb:df:dc:68:a9:0c:79:87:ae:cb:
72:b4:f2:ee:1d:59:b7:af:d7:b4:be:65:c0:5f:af:26:05:45:
ac:31:b7:88:93:30:a5:31:76:4a:42:9e:d1:67:2d:9c:3b:ed:
25:ad:00:13:f5:42:0f:d9:60:35:e5:d8:a2:60:0e:c3:74:a3:
50:69:33:f1:36:16:c1:18:17:31:8c:14:b5:83:f5:51:6a:86:
8c:82:f1:2e:5f:00:3a:8f:75:2c:2c:39:34:a9:47:f3:cd:30:
08:5d:b3:64:dc:33:7a:41:88:9d:05:6d:f5:09:3f:0d:4f:9b:
f5:8f:70:4c:bb:80:7e:13:7e:a9:25:2b:ba:93:98:07:17:bb:
67:e2:51:7b:59:5b:dd:d1:56:14:0e:c0:f9:52:fc:ae:d6:48:
2c:bc:16:ef:d7:51:5c:00:40:c8:75:cc:7a:01:e7:ef:17:0e:
45:5f:fe:4e
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEOZfBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NTAxODE1YzZmOThmM2EyYjYxODRhZmViZjE4ZWEzNDFiZTg4MmVhMB4XDTIyMDYy
MjAxMDc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDg2ZmIxNjIxOWYz
YTBmMTVkZDIxMjZhZDNjOGUyYjExYzc3NTcyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIrSXOHC9rZjUfwrla3jr2K3+sWuYSCk+Mh6j+AB9VEN4J/0
SdAhg3O5ZAMgubLoARkYPgOGvjt8hkv9qMW4c61n4k6BTOPGZJlmzTxgr7klRQsh
dxEaOenLV1TeGNy2FFipuq7j/CiAqNvdM/STVtzVavw10E0jj8XQrnvMPKoecbGP
mdjQszEdrk4DoWy5XSxIoGdD8y9Fjih/hS3d8NKmzx1HMgc1EKCtSCQco3AgVyty
1FHhOctmzdbjTOslMyg+jIetVd9DsxUAPR+tpBeZ/M39PjqqTLgOHeFo/BF19I8D
catJWcUzCMTibf4S72rcSAKvT0/UKre6WqwNDKkCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBQIb7FiGfOg8V3SEmrTyOKxHHdXKjAfBgNVHSMEGDAWgBTlAYFcb5jzorYY
Sv6/GOo0G+iC6jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVRR0JYRy1ZODZLMkdFci12eGpxTkJ2b2d1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvNWIwMjIyLWVkNjQtNGY1NS1iNDViLTAwNTlmNzM3ZWYwNS8x
L0NHLXhZaG56b1BGZDBoSnEwOGppc1J4M1Z5by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
NWIwMjIyLWVkNjQtNGY1NS1iNDViLTAwNTlmNzM3ZWYwNS8xLzVRR0JYRy1ZODZL
MkdFci12eGpxTkJ2b2d1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwFAQCAAEwDjAMAwQAuWCpAwQAuWCqMA0EAgACMAcD
BQMqBpFAMA0GCSqGSIb3DQEBCwUAA4IBAQAYWry+J+1NJh596NiU7BZ5uov2eNnn
M7iahc0yqYmSaRBXacNz1uQc/uTIFLFIkzCdqstpmTzXVhv48i4CTdzQqYQCzK+2
FOcsyrkixrOE2svf3GipDHmHrstytPLuHVm3r9e0vmXAX68mBUWsMbeIkzClMXZK
Qp7RZy2cO+0lrQAT9UIP2WA15diiYA7DdKNQaTPxNhbBGBcxjBS1g/VRaoaMgvEu
XwA6j3UsLDk0qUfzzTAIXbNk3DN6QYidBW31CT8NT5v1j3BMu4B+E36pJSu6k5gH
F7tn4lF7WVvd0VYUDsD5Uvyu1kgsvBbv11FcAEDIdcx6AefvFw5FX/5O
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:57 2023 by rpki-client on console-fra.rpki-client.org