Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/CbstjY3qEUQDlHa2h5DlIu6SbaU.roa
File: CbstjY3qEUQDlHa2h5DlIu6SbaU.roa (raw, json)
Hash identifier: YvIcbkIOeaveH0dWGHJ04c3e+Tss2XEnspxDsE34R+8=
Subject key identifier: 09:BB:2D:8D:8D:EA:11:44:03:94:76:B6:87:90:E5:22:EE:92:6D:A5
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 301C0BA8
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/CbstjY3qEUQDlHa2h5DlIu6SbaU.roa
Signing time: Sat 01 Jan 2022 04:57:43 +0000
ROA not before: Sat 01 Jan 2022 04:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199732
IP address blocks: 81.27.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807144360 (0x301c0ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Jan 1 04:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09bb2d8d8dea1144039476b68790e522ee926da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:9e:19:91:06:80:e6:24:ce:b7:d0:fc:98:
8c:d2:4c:8b:bd:5e:75:ce:1b:c1:a6:19:9e:39:22:
59:d3:7e:3c:a1:43:d1:43:3b:e6:b1:ec:76:fe:a6:
fb:19:c4:1b:08:fe:55:89:03:66:90:30:05:b6:54:
2b:1c:67:95:bc:71:d9:4c:db:a3:ae:b8:3f:58:a9:
01:f5:29:ef:66:7f:7a:f5:fe:13:d5:0c:d1:1a:66:
45:70:9e:fd:67:57:f4:5d:a7:5a:89:eb:a6:ea:b5:
52:9d:24:a9:68:ae:e7:17:7b:24:23:a9:0a:74:29:
f3:fa:b2:86:64:d9:f4:6a:7a:e7:7d:ab:ee:3e:e4:
d4:6a:22:31:c7:22:3d:2f:97:6f:85:a4:fb:9e:c2:
f0:df:4c:c2:7f:70:d8:80:0c:34:05:b0:f7:a5:34:
93:83:9d:49:2e:0a:cb:0a:09:e6:5c:2d:25:28:ba:
55:4a:3f:cd:98:17:4f:45:df:4a:48:fb:43:bc:52:
b8:b6:e7:4c:04:a0:93:f2:38:f2:5b:0c:e0:d3:3b:
b8:42:fb:d1:16:84:b2:9b:ee:12:d1:af:16:46:ac:
cf:ea:41:e2:d1:99:bd:18:63:d0:95:13:9e:4e:7e:
f8:09:47:b9:10:e1:c4:e9:09:c6:5b:bb:e3:1e:a2:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BB:2D:8D:8D:EA:11:44:03:94:76:B6:87:90:E5:22:EE:92:6D:A5
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/CbstjY3qEUQDlHa2h5DlIu6SbaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.245.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:2e:d5:f2:0c:29:d2:b2:8b:55:87:c5:e1:d2:e1:eb:f6:38:
0c:8b:84:c5:f6:0e:9a:f7:46:06:57:da:48:7b:1e:f2:40:e1:
bb:8c:0f:46:84:02:81:3b:2a:2f:62:8c:74:58:0a:f2:58:66:
ad:7a:d1:09:52:9c:d5:c3:c7:39:bb:35:cd:5d:f2:81:87:40:
5c:5d:6f:1e:9c:f8:74:21:88:2a:7e:99:ee:0c:32:4c:81:60:
43:c4:12:9b:52:a1:60:79:2c:ce:d5:7e:f9:3c:60:1f:83:7a:
22:f2:57:f1:d2:92:03:04:8c:c6:8b:78:d9:c2:f8:c0:00:bd:
6e:cf:e7:78:4a:df:f2:98:18:a9:9a:eb:9b:29:02:61:c3:c7:
21:3b:42:e7:9f:cc:ac:92:11:18:31:2f:bd:37:c8:69:c4:ef:
6b:c4:11:4c:d8:8e:5c:88:3e:60:a2:0b:b6:ae:87:b5:d7:c9:
1b:09:52:bf:05:ed:b7:26:b7:3c:3d:f6:fb:de:db:95:3d:05:
ca:b5:33:ee:bd:b4:06:c2:5c:9e:49:68:02:97:fd:74:5f:93:
64:14:81:78:3b:df:18:0c:fc:af:1e:d2:ef:bd:bf:69:27:07:
e6:dc:be:7b:2a:33:57:7f:21:31:28:40:8f:9d:a5:aa:a1:12:
5b:29:47:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMBwLqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NjhhZTgwM2I5YmEzODg1NTQwMTgyN2IzZWVjZTE0NTA1YTljMGY2MB4XDTIyMDEw
MTA0NTc0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDliYjJkOGQ4ZGVh
MTE0NDAzOTQ3NmI2ODc5MGU1MjJlZTkyNmRhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALYPnhmRBoDmJM630PyYjNJMi71edc4bwaYZnjkiWdN+PKFD
0UM75rHsdv6m+xnEGwj+VYkDZpAwBbZUKxxnlbxx2Uzbo664P1ipAfUp72Z/evX+
E9UM0RpmRXCe/WdX9F2nWonrpuq1Up0kqWiu5xd7JCOpCnQp8/qyhmTZ9Gp6532r
7j7k1GoiMcciPS+Xb4Wk+57C8N9Mwn9w2IAMNAWw96U0k4OdSS4KywoJ5lwtJSi6
VUo/zZgXT0XfSkj7Q7xSuLbnTASgk/I48lsM4NM7uEL70RaEspvuEtGvFkasz+pB
4tGZvRhj0JUTnk5++AlHuRDhxOkJxlu74x6ivqMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQJuy2NjeoRRAOUdraHkOUi7pJtpTAfBgNVHSMEGDAWgBRWiugDubo4hVQB
gns+7OFFBanA9jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Zvcm9BN202T0lWVUFZSjdQdXpoUlFXcHdQWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvMjc4ZDVmLTllZTYtNDQ3Ny05ZmUwLThlYWU4Yjc1ZTljYS8x
L0Nic3RqWTNxRVVRRGxIYTJoNURsSXU2U2JhVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
Mjc4ZDVmLTllZTYtNDQ3Ny05ZmUwLThlYWU4Yjc1ZTljYS8xL1Zvcm9BN202T0lW
VUFZSjdQdXpoUlFXcHdQWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEb9TANBgkqhkiG9w0BAQsFAAOC
AQEAqy7V8gwp0rKLVYfF4dLh6/Y4DIuExfYOmvdGBlfaSHse8kDhu4wPRoQCgTsq
L2KMdFgK8lhmrXrRCVKc1cPHObs1zV3ygYdAXF1vHpz4dCGIKn6Z7gwyTIFgQ8QS
m1KhYHksztV++TxgH4N6IvJX8dKSAwSMxot42cL4wAC9bs/neErf8pgYqZrrmykC
YcPHITtC55/MrJIRGDEvvTfIacTva8QRTNiOXIg+YKILtq6HtdfJGwlSvwXttya3
PD32+97blT0FyrUz7r20BsJcnkloApf9dF+TZBSBeDvfGAz8rx7S772/aScH5ty+
eyozV38hMShAj52lqqESWylHAw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:16 2023 by rpki-client on console-ams.rpki-client.org