Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5LE6cKHLfbmaddsRxx5aX63XU7g.roa
File: 5LE6cKHLfbmaddsRxx5aX63XU7g.roa (raw, json)
Hash identifier: +bbFGTX6Vb5lQYKgBgYUC6YUjhcjHlcDApZzZtKLnIU=
Subject key identifier: E4:B1:3A:70:A1:CB:7D:B9:9A:75:DB:11:C7:1E:5A:5F:AD:D7:53:B8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14BE79E2
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5LE6cKHLfbmaddsRxx5aX63XU7g.roa
Signing time: Wed 20 Apr 2022 09:55:22 +0000
ROA not before: Wed 20 Apr 2022 09:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207177
IP address blocks: 91.242.81.0/24 maxlen: 24
171.22.52.0/22 maxlen: 22
45.86.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348027362 (0x14be79e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 20 09:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4b13a70a1cb7db99a75db11c71e5a5fadd753b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:ee:96:7e:63:ac:25:78:df:e4:f1:59:25:
c4:95:0b:62:fa:ee:15:af:81:58:34:44:19:a8:bd:
7e:37:3c:12:c8:d9:17:56:58:df:72:36:da:c8:e0:
6d:3f:1f:fa:7f:90:c1:ca:06:e7:d2:92:de:60:38:
84:f6:24:eb:a2:d6:28:54:0c:53:4e:8b:f3:26:90:
00:0a:29:74:52:6b:fa:8b:2d:ad:1e:9f:b0:4e:88:
fd:8f:06:e4:52:9a:35:61:01:93:30:ce:44:2a:c0:
d6:af:b2:db:95:8e:e2:73:f3:27:7d:38:c2:fa:1b:
9d:a6:fc:b1:a0:b8:a1:a6:3d:58:22:17:ee:21:90:
1f:a1:8c:3b:e4:6d:0c:b0:fc:48:c4:c1:f1:75:91:
03:95:d0:4d:29:7b:0b:54:6d:b8:26:2a:b6:1e:bb:
5a:af:1d:f0:b8:61:00:47:26:5d:b1:92:3a:3c:0c:
7d:2f:4d:c4:a8:53:9a:3f:a9:4e:f0:0c:87:5b:b8:
83:d2:8b:17:5d:6b:fe:18:d2:46:0e:ef:2f:fc:76:
1e:e1:73:01:b2:23:61:cb:99:76:0d:0f:a3:8a:cf:
cb:03:90:98:1b:0a:e4:ee:20:c1:c6:22:49:49:d6:
c6:ee:a7:83:2f:56:af:fd:ef:52:91:b6:f3:44:bd:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B1:3A:70:A1:CB:7D:B9:9A:75:DB:11:C7:1E:5A:5F:AD:D7:53:B8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5LE6cKHLfbmaddsRxx5aX63XU7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.16.0/22
91.242.81.0/24
171.22.52.0/22
Signature Algorithm: sha256WithRSAEncryption
32:d4:b1:93:b2:ef:c8:78:67:17:d9:b8:dc:95:14:4e:c1:d1:
d9:d6:ce:07:76:35:c1:47:5f:91:49:a7:8c:c0:94:06:20:ec:
68:37:b3:49:6c:a7:7d:cf:65:7a:bf:22:f1:dd:ae:7f:1c:d9:
8c:55:a3:f1:e7:ac:03:6e:d4:b0:e3:a1:aa:3e:45:6b:2b:16:
36:b7:bb:75:58:06:1b:dd:e6:98:cb:7d:5f:98:87:4f:b4:85:
f6:2c:0f:7b:47:e0:73:d5:ef:52:30:86:cc:ab:2e:b7:8f:b4:
6c:ff:35:0a:61:ff:d0:db:0c:d6:07:07:dd:9d:5f:a9:df:c4:
ec:ec:ef:4d:c7:d5:ca:66:d3:53:8e:11:50:11:4a:19:df:f0:
ce:89:6b:64:a1:b4:49:10:c1:c4:1c:92:71:b0:a8:7e:5d:51:
8c:e9:0c:51:f7:d2:5b:c2:c7:75:4d:db:ca:9c:3c:fc:42:f6:
40:27:fa:ae:10:20:f4:46:48:e8:74:d2:9a:dd:01:0c:86:6b:
a3:b5:12:af:4e:8f:6a:e0:24:3e:c1:df:5a:0d:ba:f3:a9:23:
e4:35:d5:46:8b:bc:57:5c:28:6d:bf:f5:69:ce:aa:24:c7:e1:
ef:a9:a5:ec:af:41:2d:e1:74:f2:05:ca:5e:46:cb:b1:d7:68:
a9:da:fa:4a
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEFL554jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmFiMzA2ODM4NTllYzdlMDIwNmZlOTI2NTM2M2U4ZTM5NzFhOWE4MB4XDTIyMDQy
MDA5NTUyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTRiMTNhNzBhMWNi
N2RiOTlhNzVkYjExYzcxZTVhNWZhZGQ3NTNiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMPF7pZ+Y6wleN/k8VklxJULYvruFa+BWDREGai9fjc8EsjZ
F1ZY33I22sjgbT8f+n+QwcoG59KS3mA4hPYk66LWKFQMU06L8yaQAAopdFJr+ost
rR6fsE6I/Y8G5FKaNWEBkzDORCrA1q+y25WO4nPzJ304wvobnab8saC4oaY9WCIX
7iGQH6GMO+RtDLD8SMTB8XWRA5XQTSl7C1RtuCYqth67Wq8d8LhhAEcmXbGSOjwM
fS9NxKhTmj+pTvAMh1u4g9KLF11r/hjSRg7vL/x2HuFzAbIjYcuZdg0Po4rPywOQ
mBsK5O4gwcYiSUnWxu6ngy9Wr/3vUpG280S9hkkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTksTpwoct9uZp12xHHHlpfrddTuDAfBgNVHSMEGDAWgBSLqzBoOFnsfgIG
/pJlNj6OOXGpqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8x
LzVMRTZjS0hMZmJtYWRkc1J4eDVhWDYzWFU3Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8xL2k2c3dhRGhaN0g0
Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAi1WEAMEAFvyUQMEAqsWNDANBgkq
hkiG9w0BAQsFAAOCAQEAMtSxk7LvyHhnF9m43JUUTsHR2dbOB3Y1wUdfkUmnjMCU
BiDsaDezSWynfc9ler8i8d2ufxzZjFWj8eesA27UsOOhqj5FaysWNre7dVgGG93m
mMt9X5iHT7SF9iwPe0fgc9XvUjCGzKsut4+0bP81CmH/0NsM1gcH3Z1fqd/E7Ozv
TcfVymbTU44RUBFKGd/wzolrZKG0SRDBxByScbCofl1RjOkMUffSW8LHdU3bypw8
/EL2QCf6rhAg9EZI6HTSmt0BDIZro7USr06PauAkPsHfWg2686kj5DXVRou8V1wo
bb/1ac6qJMfh76ml7K9BLeF08gXKXkbLsddoqdr6Sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org