Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/BTyG0WGUntJDhK86Frvxo-m5YYY.roa
File: BTyG0WGUntJDhK86Frvxo-m5YYY.roa (raw, json)
Hash identifier: UxaGNoWUV8werXRMnih2M8FoGp5Am2zcjfcKW/kd+yU=
Subject key identifier: 05:3C:86:D1:61:94:9E:D2:43:84:AF:3A:16:BB:F1:A3:E9:B9:61:86
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01849F281C7617190861A7C3A657EB3CA2D8
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/BTyG0WGUntJDhK86Frvxo-m5YYY.roa
Signing time: Tue 22 Nov 2022 11:45:16 +0000
ROA not before: Tue 22 Nov 2022 11:45:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60320
IP address blocks: 5.160.78.0/24 maxlen: 24
46.209.0.0/23 maxlen: 23
46.209.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:28:1c:76:17:19:08:61:a7:c3:a6:57:eb:3c:a2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Nov 22 11:45:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=053c86d161949ed24384af3a16bbf1a3e9b96186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:e4:5b:ab:55:db:49:58:c5:70:78:e1:ee:
89:e4:16:36:ad:6e:f7:0a:c3:95:0a:56:f2:e1:aa:
c3:53:99:6d:d4:3c:8f:fe:82:6a:86:80:5e:39:ea:
f3:ca:c8:06:81:4c:14:79:ec:5c:6e:20:25:6f:64:
6c:5f:35:c9:80:68:ff:93:a5:7f:de:e9:72:9e:b4:
bf:91:de:99:e2:70:61:c7:a5:31:59:c1:9b:62:51:
b7:35:80:fe:7f:59:6d:5b:a8:2d:92:2d:66:21:ab:
95:2b:bf:c5:07:2d:f3:66:65:46:c6:23:73:58:cd:
11:72:59:0e:ef:5b:b4:86:ef:91:7b:a7:b3:ad:5f:
cc:a0:7d:29:42:bf:98:93:40:59:46:49:42:63:fc:
f1:62:d2:0b:b2:7f:24:fe:d4:e8:17:b7:64:19:f9:
a2:0b:d0:a9:69:27:70:e6:65:c3:10:bd:d8:e2:95:
6e:d9:18:3f:ad:64:39:38:09:a3:18:56:80:9d:7e:
e1:ca:3a:9f:d3:2b:e0:d9:d0:6c:90:11:ee:cc:8b:
4d:45:bb:5f:ba:7a:36:ff:ca:a2:34:6d:06:c2:3e:
5a:9b:54:16:8c:a7:72:04:c7:19:f6:da:56:e8:be:
e5:70:a8:56:ec:e6:03:f1:79:36:96:ab:dc:ec:99:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:86:D1:61:94:9E:D2:43:84:AF:3A:16:BB:F1:A3:E9:B9:61:86
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/BTyG0WGUntJDhK86Frvxo-m5YYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.78.0/24
46.209.0.0/23
Signature Algorithm: sha256WithRSAEncryption
02:3d:72:57:20:53:28:df:aa:6f:b2:69:7c:1c:94:55:3b:10:
4a:ee:ba:db:67:ea:3a:ab:73:f5:57:50:39:f0:22:93:41:18:
fd:cc:37:dd:3a:9b:59:da:37:83:2b:0d:f6:b3:5b:57:42:e1:
e1:42:c5:29:27:51:dd:20:4c:62:d4:e0:b5:7d:75:97:9e:08:
d6:e5:fe:4b:9d:d6:28:76:83:0b:fe:e9:b0:e7:10:4e:f9:fb:
6e:87:ce:81:60:b6:5b:7f:fe:3f:7c:48:1c:dc:6b:ae:73:66:
1c:52:ca:39:3c:87:2d:81:34:6a:56:90:68:e8:03:36:71:44:
7e:78:a9:84:83:3c:03:98:45:45:f2:7e:24:ae:05:82:9c:89:
9b:64:d4:ae:63:0a:86:1f:58:ff:c7:8c:29:6a:5c:c8:ef:ef:
e8:91:96:c4:dc:e7:c3:db:44:38:05:aa:e0:57:01:4b:ed:2b:
72:e5:62:b7:68:58:41:a1:97:19:9f:48:fb:26:2f:9a:75:89:
59:a9:90:fb:d6:fc:fb:27:4f:d1:25:0c:ca:3e:b6:16:08:c7:
bf:09:5e:b7:58:21:88:7e:14:ff:1e:21:78:99:87:50:f9:77:
3a:55:f5:e3:23:1f:ea:72:44:be:5c:f1:c2:49:c2:e2:30:85:
07:68:67:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYSfKBx2FxkIYafDplfrPKLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjIxMTIyMTE0NTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTNjODZkMTYxOTQ5ZWQyNDM4NGFmM2ExNmJiZjFhM2U5Yjk2MTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/bkW6tV20lYxXB44e6J5BY2rW73
CsOVClby4arDU5lt1DyP/oJqhoBeOerzysgGgUwUeexcbiAlb2RsXzXJgGj/k6V/
3ulynrS/kd6Z4nBhx6UxWcGbYlG3NYD+f1ltW6gtki1mIauVK7/FBy3zZmVGxiNz
WM0RclkO71u0hu+Re6ezrV/MoH0pQr+Yk0BZRklCY/zxYtILsn8k/tToF7dkGfmi
C9CpaSdw5mXDEL3Y4pVu2Rg/rWQ5OAmjGFaAnX7hyjqf0yvg2dBskBHuzItNRbtf
uno2/8qiNG0Gwj5am1QWjKdyBMcZ9tpW6L7lcKhW7OYD8Xk2lqvc7JmatQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAU8htFhlJ7SQ4SvOha78aPpuWGGMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvQlR5RzBXR1VudEpEaEs4NkZydnhvLW01WVlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABaBOAwQB
LtEAMA0GCSqGSIb3DQEBCwUAA4IBAQACPXJXIFMo36pvsml8HJRVOxBK7rrbZ+o6
q3P1V1A58CKTQRj9zDfdOptZ2jeDKw32s1tXQuHhQsUpJ1HdIExi1OC1fXWXngjW
5f5LndYodoML/umw5xBO+ftuh86BYLZbf/4/fEgc3Guuc2YcUso5PIctgTRqVpBo
6AM2cUR+eKmEgzwDmEVF8n4krgWCnImbZNSuYwqGH1j/x4wpalzI7+/okZbE3OfD
20Q4BargVwFL7Sty5WK3aFhBoZcZn0j7Ji+adYlZqZD71vz7J0/RJQzKPrYWCMe/
CV63WCGIfhT/HiF4mYdQ+Xc6VfXjIx/qckS+XPHCScLiMIUHaGc2
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:20 2024 by rpki-client on console-ams.rpki-client.org