Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/nBfMNf7LYkdF4YRqfThAYD8KsEA.roa
File: nBfMNf7LYkdF4YRqfThAYD8KsEA.roa (raw, json)
Hash identifier: /AAQ04PBabSY5UZaaoay24VrNcnph9XQm/jX71zams0=
Subject key identifier: 9C:17:CC:35:FE:CB:62:47:45:E1:84:6A:7D:38:40:60:3F:0A:B0:40
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 037ECD53
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/nBfMNf7LYkdF4YRqfThAYD8KsEA.roa
Signing time: Sat 01 Jan 2022 04:03:55 +0000
ROA not before: Sat 01 Jan 2022 04:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59395
IP address blocks: 5.175.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58641747 (0x37ecd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Jan 1 04:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c17cc35fecb624745e1846a7d3840603f0ab040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f3:5d:ea:f5:7b:c7:19:b1:e6:41:c8:e1:75:
b9:07:b6:f4:3e:62:64:0e:f1:39:47:65:94:ef:11:
80:c9:7c:09:f1:b0:67:c1:79:c8:12:91:1f:1a:be:
85:70:e5:60:85:77:b3:57:80:04:40:44:6a:20:0a:
30:7b:ac:9e:31:74:23:2b:25:7e:f9:1d:de:f6:22:
92:41:79:9e:c4:63:7c:97:a1:4d:e4:4d:c1:20:32:
f9:54:e9:9d:5f:29:df:08:89:21:d7:75:e8:e9:a7:
a9:e2:3c:ec:0d:14:22:1b:0d:eb:fc:0d:8e:f5:3e:
46:80:f4:89:77:f8:b3:9d:1c:a5:4d:3b:f8:96:80:
b2:41:d0:f3:81:e6:ab:0b:50:fe:28:be:5f:50:d2:
af:00:f7:3c:1c:d4:16:1e:b8:b5:48:ec:3d:90:92:
42:ba:65:6e:e1:11:48:d8:50:e6:a3:2c:6d:2d:4a:
1f:64:66:4f:ef:15:47:e4:00:96:f5:32:0e:0f:8a:
7a:a6:35:b5:67:d4:c3:06:04:d9:5f:bd:fe:e5:58:
15:31:78:78:1d:de:b8:e1:4d:40:38:3f:e4:02:9e:
11:49:8b:8e:fa:62:12:2e:5b:05:f5:89:bd:1f:75:
62:15:81:94:db:b0:9c:19:7f:a7:6a:d1:e7:8c:a9:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:17:CC:35:FE:CB:62:47:45:E1:84:6A:7D:38:40:60:3F:0A:B0:40
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/nBfMNf7LYkdF4YRqfThAYD8KsEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.59.0/24
Signature Algorithm: sha256WithRSAEncryption
88:59:bf:56:64:99:9f:0d:b7:a8:fc:d5:0b:4a:13:ad:07:04:
35:4b:a8:16:e1:bf:1a:3b:86:e9:30:6b:17:e1:b7:c6:6a:00:
bb:c0:3e:ae:2b:8e:5a:70:94:e4:2d:3b:41:dc:2b:61:00:fb:
08:40:54:a4:2d:c7:8c:8d:a3:6d:76:bd:b0:37:f6:ef:5b:6e:
5f:f8:5a:f1:87:1f:a4:9a:44:0a:7f:b1:3c:a6:00:9f:08:62:
fc:64:74:38:70:70:44:5f:9e:4d:09:88:ab:9f:1d:c3:48:b2:
e8:8f:2c:23:8a:ef:61:fd:f3:b0:d4:7e:3c:92:24:df:6f:44:
14:d8:35:5c:1c:4f:86:53:46:ea:d0:05:26:11:86:00:b3:c6:
df:d6:dc:be:e0:eb:1e:f0:fd:c9:d2:9f:88:6f:90:78:0f:e9:
59:1d:ca:b4:4d:fa:dd:9c:1b:7e:1a:ae:9d:5a:b9:8a:8d:0b:
50:f0:f8:35:d9:3f:c5:f2:be:35:42:e2:a3:ae:33:4d:ee:8c:
c1:77:c9:e8:48:bb:43:a8:f4:d5:99:65:c5:e9:74:2d:aa:76:
65:61:76:70:88:f4:4d:1b:11:43:54:3f:27:94:e6:6e:a5:23:
16:d6:a4:9a:b8:3c:87:37:13:71:a0:7a:9d:31:4d:62:b3:5d:
af:14:7c:5c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA37NUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YTU0YzQ3NjNlYTAxOGMzZGM3MDIwM2QwNGVmZTcxZmQ0YjFiMDY2MB4XDTIyMDEw
MTA0MDM1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWMxN2NjMzVmZWNi
NjI0NzQ1ZTE4NDZhN2QzODQwNjAzZjBhYjA0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIbzXer1e8cZseZByOF1uQe29D5iZA7xOUdllO8RgMl8CfGw
Z8F5yBKRHxq+hXDlYIV3s1eABEBEaiAKMHusnjF0Iyslfvkd3vYikkF5nsRjfJeh
TeRNwSAy+VTpnV8p3wiJIdd16OmnqeI87A0UIhsN6/wNjvU+RoD0iXf4s50cpU07
+JaAskHQ84HmqwtQ/ii+X1DSrwD3PBzUFh64tUjsPZCSQrplbuERSNhQ5qMsbS1K
H2RmT+8VR+QAlvUyDg+KeqY1tWfUwwYE2V+9/uVYFTF4eB3euOFNQDg/5AKeEUmL
jvpiEi5bBfWJvR91YhWBlNuwnBl/p2rR54ypPikCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBScF8w1/stiR0XhhGp9OEBgPwqwQDAfBgNVHSMEGDAWgBSqVMR2PqAYw9xw
ID0E7+cf1LGwZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FsVEVkajZnR01QY2NDQTlCT19uSDlTeHNHWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvYTIxYzllLTg3ZjEtNDk4My04Mzk0LWRlMzc2NzNjNDA5Yy8x
L25CZk1OZjdMWWtkRjRZUnFmVGhBWUQ4S3NFQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
YTIxYzllLTg3ZjEtNDk4My04Mzk0LWRlMzc2NzNjNDA5Yy8xL3FsVEVkajZnR01Q
Y2NDQTlCT19uSDlTeHNHWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAWvOzANBgkqhkiG9w0BAQsFAAOC
AQEAiFm/VmSZnw23qPzVC0oTrQcENUuoFuG/GjuG6TBrF+G3xmoAu8A+riuOWnCU
5C07QdwrYQD7CEBUpC3HjI2jbXa9sDf271tuX/ha8YcfpJpECn+xPKYAnwhi/GR0
OHBwRF+eTQmIq58dw0iy6I8sI4rvYf3zsNR+PJIk329EFNg1XBxPhlNG6tAFJhGG
ALPG39bcvuDrHvD9ydKfiG+QeA/pWR3KtE363ZwbfhqunVq5io0LUPD4Ndk/xfK+
NULio64zTe6MwXfJ6Ei7Q6j01Zllxel0Lap2ZWF2cIj0TRsRQ1Q/J5TmbqUjFtak
mrg8hzcTcaB6nTFNYrNdrxR8XA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:16 2024 by rpki-client on console-ams.rpki-client.org