Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/SvuufRijj4pgkUB-Jd59ZX5MiD4.roa
File: SvuufRijj4pgkUB-Jd59ZX5MiD4.roa (raw, json)
Hash identifier: mR7s8FU+y4/qyCdEV3FpaQppoz3arGs5mFXU7EMWObE=
Subject key identifier: 4A:FB:AE:7D:18:A3:8F:8A:60:91:40:7E:25:DE:7D:65:7E:4C:88:3E
Certificate issuer: /CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Certificate serial: CBD8B0
Authority key identifier: 56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/SvuufRijj4pgkUB-Jd59ZX5MiD4.roa
Signing time: Sat 01 Jan 2022 05:53:47 +0000
ROA not before: Sat 01 Jan 2022 05:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 188.214.157.0/24 maxlen: 24
86.105.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13359280 (0xcbd8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Validity
Not Before: Jan 1 05:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4afbae7d18a38f8a6091407e25de7d657e4c883e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:b5:87:a4:3c:f6:a4:33:72:26:b7:20:3a:
fe:02:73:80:61:2e:7a:31:17:10:0a:98:2a:cf:69:
51:a9:47:e2:00:69:6c:09:95:8f:9e:d6:97:31:b3:
52:a3:81:63:d9:91:67:79:44:4d:49:33:43:12:cc:
0b:93:a0:3e:bc:5e:06:54:27:1c:3b:cb:3c:97:5a:
d3:2a:fe:13:b9:f1:8a:19:9f:dc:dd:16:16:92:18:
c1:33:2a:f0:e2:f0:49:5f:9e:22:b7:60:fc:ea:44:
62:ce:50:69:ef:57:e6:eb:58:cf:4d:ed:6a:d6:fc:
f2:29:8d:a0:fa:66:e6:ac:c7:dc:98:fb:20:fb:1c:
c6:d9:7a:26:53:a5:a4:5a:01:66:1c:c2:d8:5b:56:
c8:68:62:84:09:2e:38:f8:d2:b7:3b:d4:b6:07:d2:
1e:4d:74:58:96:41:36:b3:80:10:7a:71:9b:fa:17:
5a:23:37:3d:74:86:5c:34:12:c9:e8:1a:8a:ef:ba:
6f:77:57:b1:26:dc:d0:b4:2c:d4:04:89:70:1f:50:
9c:cf:31:3c:e0:2b:56:57:6d:d1:9f:cd:a0:b7:81:
8f:80:47:86:b0:d3:47:a1:04:c0:86:23:f7:0a:57:
f7:12:d5:8e:4b:d3:8c:63:b0:31:ed:ea:17:78:2d:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FB:AE:7D:18:A3:8F:8A:60:91:40:7E:25:DE:7D:65:7E:4C:88:3E
X509v3 Authority Key Identifier:
keyid:56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/SvuufRijj4pgkUB-Jd59ZX5MiD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.182.0/24
188.214.157.0/24
Signature Algorithm: sha256WithRSAEncryption
08:95:f3:ea:bf:4a:ac:95:82:0f:fa:cb:01:2b:f3:ab:46:f1:
4d:1e:d1:9f:f0:42:77:3a:ec:f0:94:17:64:8f:11:7b:0f:d3:
94:e4:ed:81:a0:54:0d:e6:2b:79:11:be:0c:d8:8b:5c:3f:0a:
2f:4b:1b:04:54:98:f6:df:24:d5:63:c8:80:3e:86:b1:0b:71:
a8:56:eb:ca:9d:d4:3d:4d:3f:39:d4:aa:6a:9d:c9:6d:ac:d4:
bf:2b:5e:51:05:e3:55:13:f3:ca:c9:6a:8e:dc:91:ec:f6:c4:
9e:ce:41:fc:5e:81:a0:4c:c2:55:1e:a0:f6:35:23:05:12:2c:
4e:48:34:4a:f9:a1:9c:44:f2:f7:33:74:65:79:60:8e:e7:66:
3a:6c:b5:4b:c5:8e:56:39:11:b3:a8:da:2b:6a:3f:4d:72:2a:
81:fd:f0:e4:5d:4c:7c:f3:a0:38:dc:a2:08:cf:a0:a8:cd:54:
36:0c:d8:cc:4d:5a:23:4a:13:54:68:a4:aa:84:52:a9:76:da:
57:bf:14:2e:6e:b5:a2:b2:3e:d6:28:93:07:92:e9:c5:e8:32:
b0:9a:ef:60:2a:57:56:5d:0b:a0:4c:96:f3:59:81:3f:18:de:
69:2f:6c:9e:38:36:56:f5:06:be:c2:21:b7:67:ae:a3:f2:07:
ba:5f:63:6d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAMvYsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NjY0MWQxNjIwNzllZmQzYzU2MGE1ZGU5ZTkyMjZiMmYyZjBiMDk3MB4XDTIyMDEw
MTA1NTM0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGFmYmFlN2QxOGEz
OGY4YTYwOTE0MDdlMjVkZTdkNjU3ZTRjODgzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANtutYekPPakM3ImtyA6/gJzgGEuejEXEAqYKs9pUalH4gBp
bAmVj57WlzGzUqOBY9mRZ3lETUkzQxLMC5OgPrxeBlQnHDvLPJda0yr+E7nxihmf
3N0WFpIYwTMq8OLwSV+eIrdg/OpEYs5Qae9X5utYz03tatb88imNoPpm5qzH3Jj7
IPscxtl6JlOlpFoBZhzC2FtWyGhihAkuOPjStzvUtgfSHk10WJZBNrOAEHpxm/oX
WiM3PXSGXDQSyegaiu+6b3dXsSbc0LQs1ASJcB9QnM8xPOArVldt0Z/NoLeBj4BH
hrDTR6EEwIYj9wpX9xLVjkvTjGOwMe3qF3gtdz0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRK+659GKOPimCRQH4l3n1lfkyIPjAfBgNVHSMEGDAWgBRWZB0WIHnv08Vg
pd6ekiay8vCwlzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZtUWRGaUI1NzlQRllLWGVucEltc3ZMd3NKYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvNmU0NGI3LWJhZmYtNDVmMy1hNGU5LTE3Zjg4MWY3NzFjYi8x
L1N2dXVmUmlqajRwZ2tVQi1KZDU5Wlg1TWlENC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
NmU0NGI3LWJhZmYtNDVmMy1hNGU5LTE3Zjg4MWY3NzFjYi8xL1ZtUWRGaUI1NzlQ
RllLWGVucEltc3ZMd3NKYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFZptgMEALzWnTANBgkqhkiG9w0B
AQsFAAOCAQEACJXz6r9KrJWCD/rLASvzq0bxTR7Rn/BCdzrs8JQXZI8Rew/TlOTt
gaBUDeYreRG+DNiLXD8KL0sbBFSY9t8k1WPIgD6GsQtxqFbryp3UPU0/OdSqap3J
bazUvyteUQXjVRPzyslqjtyR7PbEns5B/F6BoEzCVR6g9jUjBRIsTkg0SvmhnETy
9zN0ZXlgjudmOmy1S8WOVjkRs6jaK2o/TXIqgf3w5F1MfPOgONyiCM+gqM1UNgzY
zE1aI0oTVGikqoRSqXbaV78ULm61orI+1iiTB5LpxegysJrvYCpXVl0LoEyW81mB
PxjeaS9snjg2VvUGvsIht2euo/IHul9jbQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:48 2023 by rpki-client on console-ams.rpki-client.org