Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/ROt5-ZMTzWvqTclM9xYrkoc0Vzk.roa
File: ROt5-ZMTzWvqTclM9xYrkoc0Vzk.roa (raw, json)
Hash identifier: CQs8COFZfQCkTVL5zy2wHkMedwscvtG0RHwubXUwmw8=
Subject key identifier: 44:EB:79:F9:93:13:CD:6B:EA:4D:C9:4C:F7:16:2B:92:87:34:57:39
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 01826CDAEDDE9B8B96587B7B9BE487650D26
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/ROt5-ZMTzWvqTclM9xYrkoc0Vzk.roa
Signing time: Fri 05 Aug 2022 07:14:23 +0000
ROA not before: Fri 05 Aug 2022 07:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209087
IP address blocks: 46.26.164.0/24 maxlen: 24
77.231.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6c:da:ed:de:9b:8b:96:58:7b:7b:9b:e4:87:65:0d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Aug 5 07:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44eb79f99313cd6bea4dc94cf7162b9287345739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:d7:75:33:70:0c:55:41:9a:20:bb:2f:b2:
71:98:e4:8e:ad:d6:b3:0f:7a:18:de:ca:f6:9d:24:
d9:dc:53:a7:26:ee:37:12:0d:f0:b3:95:1b:ae:17:
2c:5b:1b:90:17:1d:21:f7:be:f5:31:d8:a7:bb:91:
f4:02:ac:32:ac:23:0b:53:0f:55:31:5f:37:56:22:
7a:9f:35:f0:ea:d0:b8:5c:2c:85:8e:b2:a4:05:bc:
4b:96:a8:49:5c:2c:25:ac:a7:a1:c7:bc:39:56:1d:
23:b5:f0:3c:97:2e:8d:55:97:31:c4:77:e6:62:53:
72:6c:b4:67:78:2d:37:af:a5:22:61:98:84:bb:9e:
ca:10:00:3a:89:35:8f:e1:3b:7e:86:1e:a1:95:40:
55:c2:b8:3d:6d:eb:18:c1:28:d8:bc:63:5b:4a:da:
39:b3:56:50:ce:1e:ce:92:bb:9d:92:e8:4f:34:1e:
2f:64:f6:28:85:ec:5d:a7:e0:b6:96:f5:65:3b:02:
c7:6c:d4:ca:55:0b:6c:65:63:5f:a9:a4:0c:8e:b8:
09:29:d7:03:b3:0c:da:a2:f8:90:ee:04:9c:c0:14:
f3:7e:6d:c4:74:3a:97:ae:6d:eb:dd:25:10:97:e8:
71:d1:8f:3b:f1:c3:33:0b:ed:ac:3d:73:53:1e:77:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EB:79:F9:93:13:CD:6B:EA:4D:C9:4C:F7:16:2B:92:87:34:57:39
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/ROt5-ZMTzWvqTclM9xYrkoc0Vzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.26.164.0/24
77.231.181.0/24
Signature Algorithm: sha256WithRSAEncryption
39:20:30:c7:cc:87:b3:7e:69:c1:5a:29:44:a0:3e:dc:3e:00:
e4:25:fb:bf:0f:41:d2:ae:20:1a:d3:77:82:c0:34:c6:83:00:
a9:4e:e5:d3:83:99:70:c9:c1:81:c2:1c:d7:33:02:4b:e4:01:
1e:00:45:2c:41:4c:f7:03:a3:e8:a2:2a:9d:00:5b:7d:c8:5e:
de:a4:d4:82:16:24:89:4e:33:02:ee:ce:23:b2:ae:66:e7:d4:
57:17:4f:30:38:43:01:b4:64:38:b3:d8:51:7b:6c:b1:aa:fe:
f4:a1:94:38:13:83:0d:48:2a:a5:7b:b3:a0:be:10:08:18:52:
ae:56:9b:84:21:f3:7a:36:0c:b5:b3:6e:1c:45:86:42:7b:1b:
64:b0:ae:ec:a4:34:95:e1:6d:2c:35:07:56:8d:15:7a:a7:57:
a5:41:ad:9a:a5:e5:11:28:b9:89:4e:71:c4:72:60:e5:c2:88:
53:86:d2:c9:93:1d:7c:61:3e:c0:af:1a:4e:9c:d3:d1:df:c0:
57:78:9f:5c:6e:89:fc:a4:35:39:2c:b3:6f:5b:92:14:ef:c3:
c8:1e:0b:3b:57:eb:7c:29:59:94:6f:31:56:f0:fd:37:d5:0d:
9d:6b:50:3c:89:84:d3:2c:a8:75:df:83:ec:d8:92:6f:c4:8c:
fc:c0:33:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYJs2u3em4uWWHt7m+SHZQ0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3
NGM4N2QwHhcNMjIwODA1MDcxNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGViNzlmOTkzMTNjZDZiZWE0ZGM5NGNmNzE2MmI5Mjg3MzQ1NzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs93XdTNwDFVBmiC7L7JxmOSOrdaz
D3oY3sr2nSTZ3FOnJu43Eg3ws5UbrhcsWxuQFx0h9771Mdinu5H0AqwyrCMLUw9V
MV83ViJ6nzXw6tC4XCyFjrKkBbxLlqhJXCwlrKehx7w5Vh0jtfA8ly6NVZcxxHfm
YlNybLRneC03r6UiYZiEu57KEAA6iTWP4Tt+hh6hlUBVwrg9besYwSjYvGNbSto5
s1ZQzh7OkrudkuhPNB4vZPYohexdp+C2lvVlOwLHbNTKVQtsZWNfqaQMjrgJKdcD
swzaoviQ7gScwBTzfm3EdDqXrm3r3SUQl+hx0Y878cMzC+2sPXNTHncDSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFETrefmTE81r6k3JTPcWK5KHNFc5MB8GA1UdIwQY
MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt
MjUwNTBjNTkzYWExLzEvUk90NS1aTVR6V3ZxVGNsTTl4WXJrb2MwVnprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx
LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhqkAwQA
Tee1MA0GCSqGSIb3DQEBCwUAA4IBAQA5IDDHzIezfmnBWilEoD7cPgDkJfu/D0HS
riAa03eCwDTGgwCpTuXTg5lwycGBwhzXMwJL5AEeAEUsQUz3A6PooiqdAFt9yF7e
pNSCFiSJTjMC7s4jsq5m59RXF08wOEMBtGQ4s9hRe2yxqv70oZQ4E4MNSCqle7Og
vhAIGFKuVpuEIfN6Ngy1s24cRYZCextksK7spDSV4W0sNQdWjRV6p1elQa2apeUR
KLmJTnHEcmDlwohThtLJkx18YT7ArxpOnNPR38BXeJ9cbon8pDU5LLNvW5IU78PI
Hgs7V+t8KVmUbzFW8P031Q2da1A8iYTTLKh134Ps2JJvxIz8wDMb
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:12 2024 by rpki-client on console-ams.rpki-client.org