Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/p0s9lr8k5nk_JOaCZIShvr7-LDY.roa
File: p0s9lr8k5nk_JOaCZIShvr7-LDY.roa (raw, json)
Hash identifier: MpMXQHIGHccX6xSPnBGi+scrc2YvjkvTS0e8n+brUBE=
Subject key identifier: A7:4B:3D:96:BF:24:E6:79:3F:24:E6:82:64:84:A1:BE:BE:FE:2C:36
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 08F0970D
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/p0s9lr8k5nk_JOaCZIShvr7-LDY.roa
Signing time: Sat 01 Jan 2022 11:59:41 +0000
ROA not before: Sat 01 Jan 2022 11:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45102
IP address blocks: 5.181.224.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149985037 (0x8f0970d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 1 11:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a74b3d96bf24e6793f24e6826484a1bebefe2c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:42:14:b3:5e:ea:c6:33:ed:4c:34:6a:40:
55:33:4f:19:d0:ab:a9:5b:eb:5c:ae:a3:b5:dd:ec:
de:b9:ee:ea:8b:77:e5:d9:8a:4a:d8:23:c5:58:9e:
12:99:10:71:d5:d3:a4:7f:8c:6c:77:e4:8a:95:59:
d0:f8:82:44:50:c1:b3:c6:60:0f:39:be:d5:9e:2a:
05:91:81:ae:7f:0c:04:8f:39:f0:36:4d:da:92:d1:
26:1b:2a:19:14:63:19:5d:dc:f4:f5:65:96:a6:6a:
3b:fb:c4:be:be:2f:15:cf:9b:4d:8d:0d:df:e9:18:
7d:45:db:3a:e0:00:3a:18:eb:d2:2b:ef:a1:55:5a:
6a:69:c1:d6:79:b5:fd:3e:e6:2c:ab:77:3f:2f:4a:
07:9f:75:d1:e1:f4:90:71:aa:e3:c6:45:56:16:ec:
0e:3e:1c:03:a1:8b:04:8a:3b:92:be:4a:e1:43:5c:
b4:4e:c6:50:02:e4:12:39:0a:90:ab:a5:60:2a:f8:
61:25:52:1c:01:6e:d4:9c:ef:81:9c:2d:54:8e:99:
1b:59:6d:60:8f:43:57:56:30:29:99:6f:d0:67:b3:
13:01:6b:45:e4:0d:74:75:e8:00:3d:33:2c:fd:10:
55:2d:87:88:e9:d2:92:e2:3e:df:f4:35:ff:c7:30:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4B:3D:96:BF:24:E6:79:3F:24:E6:82:64:84:A1:BE:BE:FE:2C:36
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/p0s9lr8k5nk_JOaCZIShvr7-LDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.224.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:fa:31:e8:b2:5b:e9:d9:cf:6e:f4:ba:98:24:1a:95:9d:9e:
20:28:a9:0d:f1:4a:10:f2:11:ec:d8:0b:ed:33:22:6a:3b:e1:
cc:93:27:f9:df:51:c4:0b:01:99:42:0c:93:83:e5:d7:29:ca:
3a:a9:9c:07:d8:31:c2:02:b3:d6:3d:96:e9:85:58:89:b3:cc:
56:13:42:95:03:68:44:07:7f:13:3f:0c:05:60:26:30:a4:f2:
90:69:7a:13:0b:d3:72:8a:bb:b6:b1:c6:24:43:de:68:a4:a4:
a4:5f:93:09:08:44:15:0a:fd:7f:33:11:30:3b:28:cf:32:98:
9a:ea:7a:b5:ad:58:14:8f:4c:09:76:e5:f0:c8:c5:b4:58:4a:
99:93:06:ca:a0:3b:56:7d:8a:20:ec:e6:34:f6:1c:02:71:c9:
78:97:8f:65:b6:35:b8:6e:2b:0a:85:ba:50:b7:21:2c:13:c2:
a8:58:6a:5e:83:01:34:2e:51:d4:d6:ef:10:b9:1a:49:7e:2f:
e3:8f:d0:7c:fd:c3:66:15:8c:52:c9:f0:31:4a:87:c4:3f:17:
45:b2:68:a4:61:09:13:79:92:79:0b:36:d9:00:a9:02:72:01:
17:de:0e:17:00:27:5a:23:59:99:c3:16:0b:f9:ce:03:85:61:
ac:81:db:14
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECPCXDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MmNlNzU5MzIwMTk1YjljYzE4Y2NmY2IxYjUzMmFlYTk0OTI1OGYxMB4XDTIyMDEw
MTExNTk0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTc0YjNkOTZiZjI0
ZTY3OTNmMjRlNjgyNjQ4NGExYmViZWZlMmMzNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN2tQhSzXurGM+1MNGpAVTNPGdCrqVvrXK6jtd3s3rnu6ot3
5dmKStgjxVieEpkQcdXTpH+MbHfkipVZ0PiCRFDBs8ZgDzm+1Z4qBZGBrn8MBI85
8DZN2pLRJhsqGRRjGV3c9PVllqZqO/vEvr4vFc+bTY0N3+kYfUXbOuAAOhjr0ivv
oVVaamnB1nm1/T7mLKt3Py9KB5910eH0kHGq48ZFVhbsDj4cA6GLBIo7kr5K4UNc
tE7GUALkEjkKkKulYCr4YSVSHAFu1JzvgZwtVI6ZG1ltYI9DV1YwKZlv0GezEwFr
ReQNdHXoAD0zLP0QVS2HiOnSkuI+3/Q1/8cwlCkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSnSz2WvyTmeT8k5oJkhKG+vv4sNjAfBgNVHSMEGDAWgBRCznWTIBlbnMGM
z8sbUyrqlJJY8TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FzNTFreUFaVzV6QmpNX0xHMU1xNnBTU1dQRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvYTUyMDQ4LTEyY2EtNGEwMy05NWJlLTY5Nzk0OGVhNzFmNS8x
L3AwczlscjhrNW5rX0pPYUNaSVNodnI3LUxEWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
YTUyMDQ4LTEyY2EtNGEwMy05NWJlLTY5Nzk0OGVhNzFmNS8xL1FzNTFreUFaVzV6
QmpNX0xHMU1xNnBTU1dQRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQW14DANBgkqhkiG9w0BAQsFAAOC
AQEAX/ox6LJb6dnPbvS6mCQalZ2eICipDfFKEPIR7NgL7TMiajvhzJMn+d9RxAsB
mUIMk4Pl1ynKOqmcB9gxwgKz1j2W6YVYibPMVhNClQNoRAd/Ez8MBWAmMKTykGl6
EwvTcoq7trHGJEPeaKSkpF+TCQhEFQr9fzMRMDsozzKYmup6ta1YFI9MCXbl8MjF
tFhKmZMGyqA7Vn2KIOzmNPYcAnHJeJePZbY1uG4rCoW6ULchLBPCqFhqXoMBNC5R
1NbvELkaSX4v44/QfP3DZhWMUsnwMUqHxD8XRbJopGEJE3mSeQs22QCpAnIBF94O
FwAnWiNZmcMWC/nOA4VhrIHbFA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org