Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/R9uUdN4K7jxC4_ESBPVd5XMoRK8.roa
File: R9uUdN4K7jxC4_ESBPVd5XMoRK8.roa (raw, json)
Hash identifier: fEVSiHv85E7yypcwj7lzQW8bMDEjXM2L7u4frDA4Crg=
Subject key identifier: 47:DB:94:74:DE:0A:EE:3C:42:E3:F1:12:04:F5:5D:E5:73:28:44:AF
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0184133524BB2046F7D7D4640940A4B6E0AC
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/R9uUdN4K7jxC4_ESBPVd5XMoRK8.roa
Signing time: Wed 26 Oct 2022 07:32:40 +0000
ROA not before: Wed 26 Oct 2022 07:32:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201079
IP address blocks: 185.254.53.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:35:24:bb:20:46:f7:d7:d4:64:09:40:a4:b6:e0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 26 07:32:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47db9474de0aee3c42e3f11204f55de5732844af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:e4:d4:e1:f5:eb:f9:13:b1:69:e2:5c:a3:
3f:89:94:c2:56:bf:d4:88:89:db:2f:4c:20:12:ac:
3f:09:68:f6:de:c1:29:44:ad:4a:c5:da:22:65:97:
61:ad:84:fd:bb:c7:a1:ac:54:2a:c7:da:f5:85:9b:
99:9e:38:47:00:b7:98:01:4a:a0:f8:cd:fd:4b:b9:
42:e7:6f:54:0b:b7:6b:0c:8d:7e:49:d3:ac:d3:64:
e9:0e:cb:7d:04:f7:9b:e8:67:d0:9a:63:6c:cc:83:
f4:47:20:fb:47:51:05:d4:19:4b:91:66:41:2b:03:
d4:66:9f:d9:53:67:a4:f0:81:85:7c:90:a5:77:4c:
83:57:53:e1:47:72:48:cf:eb:f0:31:6e:43:12:bf:
3c:ed:9b:2d:74:12:97:d9:58:2d:b3:20:db:c8:db:
40:92:59:c3:d2:10:4c:1b:5e:9e:a7:a9:5c:33:5f:
a6:b1:ae:4e:91:ef:b0:21:e5:58:3f:f9:8e:1b:c9:
9a:bb:9e:20:d7:2d:b5:2b:c4:55:d3:57:dc:60:a8:
e2:a5:5a:20:0a:9d:f7:2e:dd:0e:b2:47:c1:41:71:
cf:32:91:06:bb:81:e2:f4:c5:d6:58:7a:5d:aa:98:
e3:9f:4b:bb:c8:8b:5a:d8:9e:a4:29:5c:0d:bc:6b:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DB:94:74:DE:0A:EE:3C:42:E3:F1:12:04:F5:5D:E5:73:28:44:AF
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/R9uUdN4K7jxC4_ESBPVd5XMoRK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.53.0/24
185.254.55.0/24
Signature Algorithm: sha256WithRSAEncryption
88:88:0a:5d:05:26:12:c9:59:85:36:d0:76:86:1f:11:51:b5:
22:60:2b:67:3a:81:6b:81:10:0c:70:dd:eb:0a:a6:b8:0c:1b:
5d:f6:c8:24:f8:49:25:c5:4b:82:c9:73:81:d5:17:42:96:e3:
b9:71:c8:2c:c5:b8:44:6c:fb:96:a8:34:de:87:65:cd:56:71:
18:c2:d6:07:ea:9b:4b:55:1c:30:e5:9f:2e:73:df:35:f7:51:
2e:99:11:cf:d0:76:64:98:6e:e0:65:40:16:52:dc:b7:75:d3:
e7:5d:85:f7:09:7e:7a:b9:f8:84:98:71:48:5d:13:4b:f1:3a:
5b:a0:e8:7a:b0:0f:07:92:94:9d:55:59:9e:d1:2a:41:74:be:
b2:a2:22:72:12:ce:a3:52:cf:9d:aa:1b:66:90:1b:2a:80:0e:
99:f8:2c:08:d9:00:42:1b:c6:03:cc:64:1a:75:c8:58:94:e1:
1c:4a:74:f2:ca:ab:7f:e1:0a:e9:1c:e4:9c:be:76:fe:fa:13:
5f:80:0b:92:fa:76:f2:54:98:d4:01:dc:25:1c:eb:d5:c8:9b:
e8:b9:a5:e6:94:5c:5e:d7:31:a3:cf:fd:a2:c8:eb:9c:43:72:
99:9f:7c:b7:c1:b3:b8:c4:09:90:9f:27:08:7a:ca:e3:4e:e9:
9f:68:2e:27
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQTNSS7IEb319RkCUCktuCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjIxMDI2MDczMjQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2RiOTQ3NGRlMGFlZTNjNDJlM2YxMTIwNGY1NWRlNTczMjg0NGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxbk1OH16/kTsWniXKM/iZTCVr/U
iInbL0wgEqw/CWj23sEpRK1KxdoiZZdhrYT9u8ehrFQqx9r1hZuZnjhHALeYAUqg
+M39S7lC529UC7drDI1+SdOs02TpDst9BPeb6GfQmmNszIP0RyD7R1EF1BlLkWZB
KwPUZp/ZU2ek8IGFfJCld0yDV1PhR3JIz+vwMW5DEr887ZstdBKX2VgtsyDbyNtA
klnD0hBMG16ep6lcM1+msa5Oke+wIeVYP/mOG8mau54g1y21K8RV01fcYKjipVog
Cp33Lt0OskfBQXHPMpEGu4Hi9MXWWHpdqpjjn0u7yIta2J6kKVwNvGsKeQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEfblHTeCu48QuPxEgT1XeVzKESvMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvUjl1VWRONEs3anhDNF9FU0JQVmQ1WE1vUks4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuf41AwQA
uf43MA0GCSqGSIb3DQEBCwUAA4IBAQCIiApdBSYSyVmFNtB2hh8RUbUiYCtnOoFr
gRAMcN3rCqa4DBtd9sgk+EklxUuCyXOB1RdCluO5ccgsxbhEbPuWqDTeh2XNVnEY
wtYH6ptLVRww5Z8uc98191EumRHP0HZkmG7gZUAWUty3ddPnXYX3CX56ufiEmHFI
XRNL8TpboOh6sA8HkpSdVVme0SpBdL6yoiJyEs6jUs+dqhtmkBsqgA6Z+CwI2QBC
G8YDzGQadchYlOEcSnTyyqt/4QrpHOScvnb++hNfgAuS+nbyVJjUAdwlHOvVyJvo
uaXmlFxe1zGjz/2iyOucQ3KZn3y3wbO4xAmQnycIesrjTumfaC4n
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org