Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/H1w_2JqrOQ90fuNsxz6-_rKp4as.roa
File: H1w_2JqrOQ90fuNsxz6-_rKp4as.roa (raw, json)
Hash identifier: 80r3uQK2BZh9KADlHoitNznlPYhXh9qj58zemImfMZM=
Subject key identifier: 1F:5C:3F:D8:9A:AB:39:0F:74:7E:E3:6C:C7:3E:BE:FE:B2:A9:E1:AB
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A5631DB
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/H1w_2JqrOQ90fuNsxz6-_rKp4as.roa
Signing time: Sat 01 Jan 2022 14:56:30 +0000
ROA not before: Sat 01 Jan 2022 14:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60811
IP address blocks: 5.160.192.0/24 maxlen: 24
5.160.192.0/23 maxlen: 23
5.160.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978727387 (0x3a5631db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f5c3fd89aab390f747ee36cc73ebefeb2a9e1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:a1:de:f7:10:74:21:4e:bb:af:cf:f0:fc:
1c:49:c5:9a:4d:53:75:1a:21:01:8a:dc:f2:eb:36:
d4:d3:62:40:57:49:ec:0a:36:bc:be:1d:3d:7a:fd:
bd:1f:fd:80:ad:67:20:b0:92:37:d2:90:f6:84:6e:
6d:d5:24:f3:11:5f:a0:42:f3:73:90:23:1e:84:ae:
d9:47:e8:4c:b6:2e:fb:98:21:7e:15:a0:03:c8:5e:
7b:83:c6:c2:63:6b:9e:bd:d0:0f:f2:0e:1f:67:e8:
76:d1:e7:4f:e5:71:bc:24:f3:5c:0b:b1:a0:71:3e:
70:a3:81:ca:8a:49:4d:65:35:68:94:84:bd:e1:a2:
6f:23:75:be:d0:0e:45:4d:7a:52:4b:38:99:d6:13:
58:4c:59:4f:4f:f0:c0:eb:05:d4:3c:03:9a:7c:16:
15:18:91:18:d7:5c:29:5c:25:18:29:94:8a:14:d3:
bf:35:8b:9f:5c:ab:b2:bc:5d:27:1f:a9:b2:5b:8a:
3b:f8:55:b5:1c:57:71:ab:1f:cf:bc:55:26:69:16:
d6:43:b0:e9:30:88:6a:96:5e:8a:19:be:85:08:3d:
c0:c3:50:96:84:9b:ca:a6:1b:ca:3f:f4:4f:28:b1:
7c:49:ac:c1:3c:9d:4a:fa:77:d4:6f:02:44:3b:4e:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5C:3F:D8:9A:AB:39:0F:74:7E:E3:6C:C7:3E:BE:FE:B2:A9:E1:AB
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/H1w_2JqrOQ90fuNsxz6-_rKp4as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.192.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:80:6e:b2:27:e7:58:74:7f:b2:b2:cb:4f:e3:87:79:8e:48:
28:e2:3e:3d:7c:84:4a:be:e8:a3:9d:b4:c8:11:09:dc:3a:35:
fb:f1:31:90:8f:d3:29:43:b8:6a:a3:51:6c:2f:5a:9e:03:c9:
0a:25:fc:1d:ca:0c:5e:c4:27:0a:d7:03:1f:ae:c5:50:8c:24:
89:5c:95:ea:1c:4c:97:c1:8d:00:f3:9c:8b:99:1b:93:0a:41:
99:45:b7:c5:a0:22:f4:88:c2:14:dd:86:f6:1e:a0:6f:a2:fc:
bf:45:90:f8:08:e1:fc:c2:1f:6d:62:27:ea:1a:45:6d:96:e1:
7d:14:90:cf:7e:f2:3e:58:6c:a7:24:5d:02:3d:94:e0:cb:2e:
49:23:a5:86:e9:d2:92:e9:b7:56:42:9c:82:bd:f0:c6:b6:38:
4a:03:3f:ca:92:04:8f:70:4a:f0:f6:e4:79:d6:26:b8:21:82:
5d:1c:e2:c4:2a:79:9b:fe:75:45:27:c9:25:1c:26:d7:e6:9d:
53:1c:56:91:26:50:a1:1f:06:1d:18:76:f0:1d:30:62:f9:29:
24:65:62:42:33:10:21:40:4c:fc:ca:9a:ca:92:9c:75:b3:92:
1f:ad:1d:21:8d:22:94:43:c3:26:72:5e:02:5b:4a:24:4c:2b:
50:7b:06:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOlYx2zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MWNjYTlmMTVlMTkyMTk1M2E2MjhjOGFkMmFjNGJlOTc3YjZjMzAzMB4XDTIyMDEw
MTE0NTYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWY1YzNmZDg5YWFi
MzkwZjc0N2VlMzZjYzczZWJlZmViMmE5ZTFhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANS/od73EHQhTruvz/D8HEnFmk1TdRohAYrc8us21NNiQFdJ
7Ao2vL4dPXr9vR/9gK1nILCSN9KQ9oRubdUk8xFfoELzc5AjHoSu2UfoTLYu+5gh
fhWgA8hee4PGwmNrnr3QD/IOH2fodtHnT+VxvCTzXAuxoHE+cKOByopJTWU1aJSE
veGibyN1vtAORU16Uks4mdYTWExZT0/wwOsF1DwDmnwWFRiRGNdcKVwlGCmUihTT
vzWLn1yrsrxdJx+psluKO/hVtRxXcasfz7xVJmkW1kOw6TCIapZeihm+hQg9wMNQ
loSbyqYbyj/0TyixfEmswTydSvp31G8CRDtO520CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQfXD/Ymqs5D3R+42zHPr7+sqnhqzAfBgNVHSMEGDAWgBSBzKnxXhkhlTpi
jIrSrEvpd7bDAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2djeXA4VjRaSVpVNllveUswcXhMNlhlMnd3TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvMWVhMmIwLTZiOWEtNDRkNy1hMmU1LTIyMDZjYzJlNjkxYy8x
L0gxd18ySnFyT1E5MGZ1TnN4ejYtX3JLcDRhcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
MWVhMmIwLTZiOWEtNDRkNy1hMmU1LTIyMDZjYzJlNjkxYy8xL2djeXA4VjRaSVpV
NllveUswcXhMNlhlMnd3TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQWgwDANBgkqhkiG9w0BAQsFAAOC
AQEAioBusifnWHR/srLLT+OHeY5IKOI+PXyESr7oo520yBEJ3Do1+/ExkI/TKUO4
aqNRbC9angPJCiX8HcoMXsQnCtcDH67FUIwkiVyV6hxMl8GNAPOci5kbkwpBmUW3
xaAi9IjCFN2G9h6gb6L8v0WQ+Ajh/MIfbWIn6hpFbZbhfRSQz37yPlhspyRdAj2U
4MsuSSOlhunSkum3VkKcgr3wxrY4SgM/ypIEj3BK8PbkedYmuCGCXRzixCp5m/51
RSfJJRwm1+adUxxWkSZQoR8GHRh28B0wYvkpJGViQjMQIUBM/MqaypKcdbOSH60d
IY0ilEPDJnJeAltKJEwrUHsGNw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-fra.rpki-client.org