Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/mOE1aFhZKSPnhQjtHZ5oF18fSp4.roa
File: mOE1aFhZKSPnhQjtHZ5oF18fSp4.roa (raw, json)
Hash identifier: CsYZ0w7XQ5DBOB2T4F6v4qJbUkHjMXQUata9Hd1O8go=
Subject key identifier: 98:E1:35:68:58:59:29:23:E7:85:08:ED:1D:9E:68:17:5F:1F:4A:9E
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 14AAE45F
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/mOE1aFhZKSPnhQjtHZ5oF18fSp4.roa
Signing time: Sat 01 Jan 2022 05:57:37 +0000
ROA not before: Sat 01 Jan 2022 05:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20609
IP address blocks: 185.108.120.0/22 maxlen: 24
91.202.52.0/22 maxlen: 24
2a06:4ac0::/32 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346743903 (0x14aae45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Jan 1 05:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98e1356858592923e78508ed1d9e68175f1f4a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:e3:ae:0b:a9:cd:6b:59:e1:49:bd:17:0e:
df:eb:c5:19:e6:b4:6f:aa:1e:9d:1d:55:20:0d:47:
85:2d:e7:58:bc:19:fe:b1:3c:a6:10:68:c3:47:b1:
f1:88:b1:1e:91:53:18:4a:fc:36:c4:f0:38:d4:e8:
f6:c1:96:d6:eb:23:90:03:a9:90:40:59:78:13:9c:
5a:20:56:4c:0d:5d:b7:d4:8f:fc:92:4c:f7:6a:3d:
5c:b5:3f:60:de:08:52:e2:3b:14:38:75:92:97:95:
ec:bc:1f:c0:1c:26:3e:9e:25:87:05:1c:cb:50:72:
16:18:ca:97:3a:de:88:c4:95:8e:fe:31:1b:70:b0:
b9:2b:73:f8:6a:15:f4:65:7b:03:e2:0d:fd:94:50:
43:93:9b:ea:85:51:35:50:bd:7f:6d:ff:2d:60:e3:
f5:5c:5f:75:e4:08:0c:e4:13:80:c4:6d:f7:20:cf:
a8:e2:ac:0b:d4:62:ae:18:91:ca:22:0e:48:9b:e8:
84:1b:4f:46:87:74:c2:2b:f0:0a:03:7b:58:99:06:
c7:fe:d5:8f:b4:c5:3b:72:2f:b7:73:96:0f:0a:ce:
7b:b5:e9:d1:30:70:02:f2:08:81:f1:61:d9:de:1f:
04:07:4b:02:c7:df:9c:65:36:46:eb:cb:d1:e4:02:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:35:68:58:59:29:23:E7:85:08:ED:1D:9E:68:17:5F:1F:4A:9E
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/mOE1aFhZKSPnhQjtHZ5oF18fSp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.52.0/22
185.108.120.0/22
IPv6:
2a06:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:2c:53:a6:48:a0:13:9f:b0:14:3c:d2:cc:3a:2e:af:1f:45:
10:80:32:01:99:15:e2:0d:49:3d:9e:82:c0:5b:90:0d:d7:5c:
25:a2:a7:73:6f:33:72:29:88:ac:05:1d:49:af:5c:d6:a8:d7:
43:00:e3:d6:be:63:38:c7:cb:b7:c2:14:b7:af:04:98:52:3a:
91:b8:07:6a:94:9c:84:01:84:0b:e6:c9:f4:61:6f:fb:27:14:
bd:af:94:c2:48:f8:0b:19:53:4d:63:81:d3:08:8f:80:a6:29:
be:a3:70:a3:cf:28:fc:e4:c7:30:6b:5d:1e:2b:b1:35:1f:b0:
f8:f0:16:a5:15:5b:9b:5e:91:4f:60:c4:2a:42:34:1b:78:e0:
85:08:e0:1f:73:de:44:9e:b4:86:9d:a8:a8:c9:5e:ee:f8:5d:
b1:c6:69:be:b4:f5:57:c0:80:79:8f:4e:75:38:3e:d8:36:e7:
9c:46:2b:29:a3:67:d9:3c:98:ca:78:bc:e2:92:e8:2b:ea:d8:
fd:74:ff:80:04:a4:59:bd:70:0b:4a:6d:ee:fc:c8:53:06:4a:
fd:74:ca:fb:22:26:30:52:97:ad:a0:f0:40:3d:d1:44:8c:1a:
37:54:cd:0e:ee:36:ed:ae:7d:6e:e0:d6:d6:fd:c2:93:89:d7:
eb:7b:58:94
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEFKrkXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZTFkNDA2MGZkNTAxZWJhZTkzZWQ0NGRhNmI3YTc5ZTY2NzA1YjJmMB4XDTIyMDEw
MTA1NTczN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOThlMTM1Njg1ODU5
MjkyM2U3ODUwOGVkMWQ5ZTY4MTc1ZjFmNGE5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALYU464Lqc1rWeFJvRcO3+vFGea0b6oenR1VIA1HhS3nWLwZ
/rE8phBow0ex8YixHpFTGEr8NsTwONTo9sGW1usjkAOpkEBZeBOcWiBWTA1dt9SP
/JJM92o9XLU/YN4IUuI7FDh1kpeV7LwfwBwmPp4lhwUcy1ByFhjKlzreiMSVjv4x
G3CwuStz+GoV9GV7A+IN/ZRQQ5Ob6oVRNVC9f23/LWDj9VxfdeQIDOQTgMRt9yDP
qOKsC9RirhiRyiIOSJvohBtPRod0wivwCgN7WJkGx/7Vj7TFO3Ivt3OWDwrOe7Xp
0TBwAvIIgfFh2d4fBAdLAsffnGU2RuvL0eQC7XECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSY4TVoWFkpI+eFCO0dnmgXXx9KnjAfBgNVHSMEGDAWgBReHUBg/VAeuuk+
1E2mt6eeZnBbLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hoMUFZUDFRSHJycFB0Uk5wcmVubm1ad1d5OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvYTcwYTg0LWY1NTItNDM1NC1hMTA0LTBlMWRiOThhZDIzMS8x
L21PRTFhRmhaS1NQbmhRanRIWjVvRjE4ZlNwNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
YTcwYTg0LWY1NTItNDM1NC1hMTA0LTBlMWRiOThhZDIzMS8xL1hoMUFZUDFRSHJy
cFB0Uk5wcmVubm1ad1d5OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAlvKNAMEArlseDANBAIAAjAHAwUA
KgZKwDANBgkqhkiG9w0BAQsFAAOCAQEASixTpkigE5+wFDzSzDourx9FEIAyAZkV
4g1JPZ6CwFuQDddcJaKnc28zcimIrAUdSa9c1qjXQwDj1r5jOMfLt8IUt68EmFI6
kbgHapSchAGEC+bJ9GFv+ycUva+Uwkj4CxlTTWOB0wiPgKYpvqNwo88o/OTHMGtd
HiuxNR+w+PAWpRVbm16RT2DEKkI0G3jghQjgH3PeRJ60hp2oqMle7vhdscZpvrT1
V8CAeY9OdTg+2DbnnEYrKaNn2TyYyni84pLoK+rY/XT/gASkWb1wC0pt7vzIUwZK
/XTK+yImMFKXraDwQD3RRIwaN1TNDu427a59buDW1v3Ck4nX63tYlA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:12 2024 by rpki-client on console-fra.rpki-client.org