Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/VqayiR2kAkFU22IEh-uYv-arT_E.roa
File: VqayiR2kAkFU22IEh-uYv-arT_E.roa (raw, json)
Hash identifier: 2cZCpujMKX/Z6dvjr9opI0C1yxiRMmeg2rltSHaApsI=
Subject key identifier: 56:A6:B2:89:1D:A4:02:41:54:DB:62:04:87:EB:98:BF:E6:AB:4F:F1
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A5192D3
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/VqayiR2kAkFU22IEh-uYv-arT_E.roa
Signing time: Sat 01 Jan 2022 14:56:27 +0000
ROA not before: Sat 01 Jan 2022 14:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59757
IP address blocks: 5.160.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978424531 (0x3a5192d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56a6b2891da4024154db620487eb98bfe6ab4ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:db:08:63:9c:4b:58:ab:0f:00:94:fa:a5:
46:32:84:cb:21:da:70:ed:c0:87:85:81:0e:5c:ed:
f1:7d:32:8b:6f:bb:52:8d:1a:12:66:d5:a4:9c:06:
d3:86:fc:17:b1:02:8f:49:cf:23:9f:d5:4f:18:2c:
eb:fd:b6:5a:77:a9:14:c8:20:91:82:5e:1d:b3:4e:
84:fb:14:cc:d4:d9:c2:ff:a1:de:ea:a1:b9:0a:b0:
d8:13:ae:c4:76:33:04:fe:95:b5:cb:14:62:eb:44:
91:c7:d3:f6:41:82:74:d7:91:7a:5f:64:f3:98:bd:
ba:64:05:5c:58:0f:80:ed:7d:fc:b8:5a:ef:e9:e9:
dc:3a:2b:25:69:ff:2e:6a:1e:1d:07:22:6f:a4:27:
ac:03:f0:41:3f:ee:55:61:7c:d6:ff:be:07:70:62:
52:2f:dd:1f:d9:1b:28:e9:b6:b4:6f:1c:25:c5:b0:
af:69:ba:03:06:58:5b:38:38:be:e0:64:c7:a6:8e:
8f:bc:0e:93:24:22:4a:d1:db:8f:43:e3:d4:e6:8e:
d4:1e:c5:5a:cc:00:73:b0:6f:72:56:d3:ab:aa:65:
5d:26:9c:31:f4:5c:39:56:b8:3d:93:33:33:2c:17:
1d:92:b5:ff:39:1e:1e:66:55:65:cc:13:ab:8b:54:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A6:B2:89:1D:A4:02:41:54:DB:62:04:87:EB:98:BF:E6:AB:4F:F1
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/VqayiR2kAkFU22IEh-uYv-arT_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.216.0/24
Signature Algorithm: sha256WithRSAEncryption
94:25:98:72:71:ac:30:8a:5f:83:b8:84:8b:53:30:e6:32:fc:
95:4f:e4:95:eb:9c:f9:7e:d3:28:f3:32:5a:a7:4e:1c:2a:cb:
c1:d8:3f:4b:fc:4a:56:bd:07:88:5a:d6:90:64:d4:e4:de:f6:
0c:7e:ec:d9:1b:f0:9d:8f:58:ac:08:78:14:bc:5f:43:78:ec:
c0:93:19:99:b7:26:9a:f5:35:25:17:92:e4:ee:e3:a1:22:48:
db:3a:0c:32:b7:47:d5:46:b2:ae:c8:69:ac:09:9a:5f:75:c2:
c5:a7:79:1a:45:95:c5:05:c9:96:a4:3e:54:3a:12:93:11:5f:
6b:a6:c7:b7:dc:ac:8e:05:8b:8c:57:92:77:57:60:e7:d3:ec:
7d:cb:78:9e:12:3d:18:7e:59:cd:7e:a4:51:7f:57:92:00:95:
a7:7b:2c:92:e7:2a:74:18:7f:e5:72:ed:99:07:66:a7:bf:8f:
3b:7d:b5:30:93:59:ec:02:d3:71:5f:5f:be:17:25:71:03:43:
37:22:86:b1:7f:7c:43:91:72:8b:b5:5e:1d:8c:17:f6:03:b4:
49:57:6e:56:71:54:be:7d:2c:f9:fa:1a:19:01:55:30:b5:28:
af:6a:6d:95:b7:18:ed:b9:0a:84:ad:de:96:2b:d7:8f:07:38:
01:58:b4:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOlGS0zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MWNjYTlmMTVlMTkyMTk1M2E2MjhjOGFkMmFjNGJlOTc3YjZjMzAzMB4XDTIyMDEw
MTE0NTYyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTZhNmIyODkxZGE0
MDI0MTU0ZGI2MjA0ODdlYjk4YmZlNmFiNGZmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJa+2whjnEtYqw8AlPqlRjKEyyHacO3Ah4WBDlzt8X0yi2+7
Uo0aEmbVpJwG04b8F7ECj0nPI5/VTxgs6/22WnepFMggkYJeHbNOhPsUzNTZwv+h
3uqhuQqw2BOuxHYzBP6VtcsUYutEkcfT9kGCdNeRel9k85i9umQFXFgPgO19/Lha
7+np3DorJWn/LmoeHQcib6QnrAPwQT/uVWF81v++B3BiUi/dH9kbKOm2tG8cJcWw
r2m6AwZYWzg4vuBkx6aOj7wOkyQiStHbj0Pj1OaO1B7FWswAc7BvclbTq6plXSac
MfRcOVa4PZMzMywXHZK1/zkeHmZVZcwTq4tUEdECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRWprKJHaQCQVTbYgSH65i/5qtP8TAfBgNVHSMEGDAWgBSBzKnxXhkhlTpi
jIrSrEvpd7bDAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2djeXA4VjRaSVpVNllveUswcXhMNlhlMnd3TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvMWVhMmIwLTZiOWEtNDRkNy1hMmU1LTIyMDZjYzJlNjkxYy8x
L1ZxYXlpUjJrQWtGVTIySUVoLXVZdi1hclRfRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
MWVhMmIwLTZiOWEtNDRkNy1hMmU1LTIyMDZjYzJlNjkxYy8xL2djeXA4VjRaSVpV
NllveUswcXhMNlhlMnd3TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAWg2DANBgkqhkiG9w0BAQsFAAOC
AQEAlCWYcnGsMIpfg7iEi1Mw5jL8lU/kleuc+X7TKPMyWqdOHCrLwdg/S/xKVr0H
iFrWkGTU5N72DH7s2RvwnY9YrAh4FLxfQ3jswJMZmbcmmvU1JReS5O7joSJI2zoM
MrdH1UayrshprAmaX3XCxad5GkWVxQXJlqQ+VDoSkxFfa6bHt9ysjgWLjFeSd1dg
59Psfct4nhI9GH5ZzX6kUX9XkgCVp3sskucqdBh/5XLtmQdmp7+PO321MJNZ7ALT
cV9fvhclcQNDNyKGsX98Q5Fyi7VeHYwX9gO0SVduVnFUvn0s+foaGQFVMLUor2pt
lbcY7bkKhK3elivXjwc4AVi0OQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-ams.rpki-client.org