Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/X6vUNwOdWdr_P5Ce8qFvpY0AaXc.roa
File: X6vUNwOdWdr_P5Ce8qFvpY0AaXc.roa (raw, json)
Hash identifier: SLS6Cy12KKLeO2f2BbQaPYkBEIcFqM+JLumI0cdBoP4=
Subject key identifier: 5F:AB:D4:37:03:9D:59:DA:FF:3F:90:9E:F2:A1:6F:A5:8D:00:69:77
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 1F9807AA
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/X6vUNwOdWdr_P5Ce8qFvpY0AaXc.roa
Signing time: Sat 01 Jan 2022 14:06:40 +0000
ROA not before: Sat 01 Jan 2022 14:06:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60548
IP address blocks: 43.251.160.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
37.114.50.0/23 maxlen: 23
37.114.54.0/23 maxlen: 23
37.114.52.0/24 maxlen: 24
37.114.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530057130 (0x1f9807aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 14:06:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fabd437039d59daff3f909ef2a16fa58d006977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:2f:cb:66:73:ec:08:47:50:42:48:74:25:
c7:d0:2e:80:9a:d0:16:e9:80:28:88:19:00:9d:c9:
27:81:a1:a1:01:5b:b9:ff:9c:00:6a:f5:06:64:dc:
be:8f:8f:5c:3d:77:6c:48:96:d1:8a:4b:aa:ec:f4:
5a:4d:93:f0:ee:bd:ef:44:90:91:29:0c:e8:4c:a4:
67:12:e8:9e:0a:05:29:b0:56:82:8b:85:b9:7d:4c:
ad:1a:43:33:38:72:69:67:27:2c:64:76:a3:1e:44:
63:e4:7b:f7:bb:98:e1:f6:c8:32:e3:de:ba:d7:ac:
e8:cb:f6:b4:e7:03:24:02:6b:2c:19:b3:9d:c9:0c:
79:b9:18:67:61:4c:0c:0d:60:d3:06:52:8b:bc:ce:
01:8d:02:af:86:8b:c6:75:3b:e8:e3:47:b0:04:33:
70:81:9d:4e:06:55:f8:4e:75:04:76:09:55:db:0a:
3e:e2:7c:cc:87:54:45:39:65:af:52:90:78:10:d1:
74:9a:6d:59:ad:3c:00:f3:f5:83:17:5f:5e:6c:1d:
9a:9a:54:bb:b4:51:d2:00:01:aa:92:8e:94:ad:a4:
a2:27:7b:a9:9e:61:07:31:63:6f:ef:cc:65:31:55:
fa:4b:20:d3:d3:3f:d6:a0:37:80:12:0e:c8:6e:10:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AB:D4:37:03:9D:59:DA:FF:3F:90:9E:F2:A1:6F:A5:8D:00:69:77
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/X6vUNwOdWdr_P5Ce8qFvpY0AaXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.50.0-37.114.52.255
37.114.54.0/23
37.114.63.0/24
43.251.160.0/23
Signature Algorithm: sha256WithRSAEncryption
28:a5:14:0a:db:95:4b:62:a4:8e:a6:74:18:18:8b:93:57:79:
eb:9e:23:de:a2:f6:43:93:e8:ff:b1:d1:2a:e0:d0:cb:1a:18:
53:8f:22:99:4e:7d:71:ad:20:53:b4:84:d8:6f:ad:41:44:b4:
9b:15:57:ca:83:c3:13:bb:1c:34:8b:4e:b0:ce:a6:51:0f:78:
14:74:8d:4a:f3:b1:2e:25:5f:d6:de:e7:19:10:f4:ab:a6:07:
63:89:81:ad:e6:76:60:26:6c:1c:41:97:06:5c:0f:29:96:59:
e3:c7:70:78:29:63:f4:9c:84:76:2d:1a:dd:12:06:68:7d:3c:
8a:03:d9:47:d2:31:42:b3:55:48:a1:bf:3f:12:6f:73:1a:35:
bb:54:af:d3:50:b7:78:d3:b0:ee:17:1f:8e:86:02:ca:e1:91:
b8:62:a5:34:a8:1f:39:ab:d1:fd:bb:90:08:92:22:de:dd:71:
10:76:4f:40:50:34:bb:bd:21:04:55:5c:15:ac:44:c0:62:74:
c7:fd:2f:ee:6d:d7:9a:b2:5b:b3:cc:41:b7:73:52:bc:7e:2f:
f7:34:cc:f4:3d:92:67:6d:40:ab:bf:26:9f:5a:8f:3e:ec:77:
00:57:79:27:f6:1f:af:5e:5e:0f:d7:d2:c4:36:ee:77:ed:ef:
e4:c5:78:f3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEH5gHqjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTY1OTNiNzQ3ZTc2YTU2NDkyNTExYmIzNjEyZTRkNWU0Y2JlN2VjMB4XDTIyMDEw
MTE0MDY0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWZhYmQ0MzcwMzlk
NTlkYWZmM2Y5MDllZjJhMTZmYTU4ZDAwNjk3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANfyL8tmc+wIR1BCSHQlx9AugJrQFumAKIgZAJ3JJ4GhoQFb
uf+cAGr1BmTcvo+PXD13bEiW0YpLquz0Wk2T8O6970SQkSkM6EykZxLongoFKbBW
gouFuX1MrRpDMzhyaWcnLGR2ox5EY+R797uY4fbIMuPeutes6Mv2tOcDJAJrLBmz
nckMebkYZ2FMDA1g0wZSi7zOAY0Cr4aLxnU76ONHsAQzcIGdTgZV+E51BHYJVdsK
PuJ8zIdURTllr1KQeBDRdJptWa08APP1gxdfXmwdmppUu7RR0gABqpKOlK2koid7
qZ5hBzFjb+/MZTFV+ksg09M/1qA3gBIOyG4QSa8CAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBRfq9Q3A51Z2v8/kJ7yoW+ljQBpdzAfBgNVHSMEGDAWgBQpZZO3R+dqVkkl
Ebs2EuTV5Mvn7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tXV1R0MGZuYWxaSkpSRzdOaExrMWVUTDUtdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvYzU4YmRjLTE0ZTctNDk5Yy05ZDljLTFiN2NiYjA4ZDczZi8x
L1g2dlVOd09kV2RyX1A1Q2U4cUZ2cFkwQWFYYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
YzU4YmRjLTE0ZTctNDk5Yy05ZDljLTFiN2NiYjA4ZDczZi8xL0tXV1R0MGZuYWxa
SkpSRzdOaExrMWVUTDUtdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIDAMAwQBJXIyAwQAJXI0AwQBJXI2AwQA
JXI/AwQBK/ugMA0GCSqGSIb3DQEBCwUAA4IBAQAopRQK25VLYqSOpnQYGIuTV3nr
niPeovZDk+j/sdEq4NDLGhhTjyKZTn1xrSBTtITYb61BRLSbFVfKg8MTuxw0i06w
zqZRD3gUdI1K87EuJV/W3ucZEPSrpgdjiYGt5nZgJmwcQZcGXA8pllnjx3B4KWP0
nIR2LRrdEgZofTyKA9lH0jFCs1VIob8/Em9zGjW7VK/TULd407DuFx+OhgLK4ZG4
YqU0qB85q9H9u5AIkiLe3XEQdk9AUDS7vSEEVVwVrETAYnTH/S/ubdeasluzzEG3
c1K8fi/3NMz0PZJnbUCrvyafWo8+7HcAV3kn9h+vXl4P19LENu537e/kxXjz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org