Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/5E6Vk5c-IMwU1UogCyeVY-p2A9M.roa
File: 5E6Vk5c-IMwU1UogCyeVY-p2A9M.roa (raw, json)
Hash identifier: 0PWXydyUaazWDtKXf+55Dxf4voExUlsleQDAC0jgysM=
Subject key identifier: E4:4E:95:93:97:3E:20:CC:14:D5:4A:20:0B:27:95:63:EA:76:03:D3
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 888F0C
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/5E6Vk5c-IMwU1UogCyeVY-p2A9M.roa
Signing time: Sun 27 Mar 2022 18:38:09 +0000
ROA not before: Sun 27 Mar 2022 18:38:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 45.143.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8949516 (0x888f0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Mar 27 18:38:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e44e9593973e20cc14d54a200b279563ea7603d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:4b:4a:6d:db:a4:32:74:0a:a5:56:ee:a7:
cf:74:fe:9f:69:d2:a1:26:1c:33:fa:2d:61:3d:c2:
c7:e5:83:7f:af:22:5b:f9:2a:88:4c:b9:f5:e2:46:
35:6c:a9:ae:6d:7f:ef:b6:56:af:18:19:f6:89:c9:
98:ef:09:e6:a1:cc:a7:66:dd:fc:11:b2:26:6b:99:
ea:ae:db:4e:89:40:20:ed:78:9b:96:f5:6b:d3:70:
ef:e2:27:17:b0:48:7e:eb:06:b3:20:35:55:02:2e:
a4:c3:7d:a1:58:b5:0a:83:56:9f:46:7c:eb:20:e1:
dd:9c:e0:c0:ed:ff:dd:f8:40:e0:34:e1:39:39:14:
6b:43:f1:bf:be:fd:23:83:3e:bb:bd:f9:e7:67:86:
9a:8d:6a:54:9a:30:9c:1e:53:be:0d:52:7b:8a:b6:
06:a6:ec:83:49:39:94:5f:33:62:49:63:7f:a0:0f:
a3:cd:6e:15:bd:f7:67:20:c3:ba:b3:84:7b:5c:7b:
9c:18:01:fc:8b:44:0f:3a:f5:2a:ce:e8:c4:06:3e:
6e:81:a6:6c:11:43:5d:d4:06:87:81:83:86:87:00:
25:ff:84:7c:d9:c2:01:d4:8f:3d:e0:12:fa:9d:4c:
46:87:d4:df:c1:e8:01:48:9f:96:e9:00:9b:0e:e4:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4E:95:93:97:3E:20:CC:14:D5:4A:20:0B:27:95:63:EA:76:03:D3
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/5E6Vk5c-IMwU1UogCyeVY-p2A9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.10.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a0:82:73:0a:54:a7:24:f1:65:51:dc:23:36:a3:85:52:a7:
fc:56:ed:8c:7f:25:a2:35:7c:61:df:3f:9c:00:26:5c:6a:0e:
86:df:21:7c:5b:c5:5a:04:06:00:e7:0f:35:bb:1a:47:31:0e:
43:cf:3f:7c:15:7e:7f:57:2e:fe:d3:ad:63:c3:19:6e:da:68:
29:02:79:f9:4d:1d:ef:01:2b:da:9b:03:06:45:3b:27:5e:33:
b6:38:12:bc:83:1e:4f:94:f5:37:06:e4:8e:98:05:36:0e:6d:
47:b9:c9:3e:ed:8c:51:38:81:4f:00:42:a6:38:5a:bd:99:0b:
3f:98:e4:39:b7:65:99:0f:6b:3f:93:b0:ad:9a:05:3a:7f:a1:
c5:7d:62:6b:7f:24:df:17:eb:6b:fb:41:f9:1c:88:25:18:79:
d1:49:70:8f:74:33:63:de:f7:7e:b1:43:a8:ae:a5:86:00:66:
f5:8d:25:12:51:99:3f:60:3b:a4:cb:e6:62:1e:d6:37:17:21:
e9:aa:6f:e4:55:c1:84:9a:3d:0f:74:4a:89:ea:5d:0e:ff:9d:
2e:df:93:91:4d:63:64:26:16:b5:f7:d9:82:8d:0b:a1:d2:67:
e1:d4:40:d1:fb:be:8c:ef:7a:31:35:df:a4:48:b0:01:7e:d1:
ce:af:07:81
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIiPDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZjQ0ZGJhY2E1NmRhYzMxOTQwMWY2OGE1MGQ5MTdmNTQyNDYxMWFkMB4XDTIyMDMy
NzE4MzgwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTQ0ZTk1OTM5NzNl
MjBjYzE0ZDU0YTIwMGIyNzk1NjNlYTc2MDNkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANaLS0pt26QydAqlVu6nz3T+n2nSoSYcM/otYT3Cx+WDf68i
W/kqiEy59eJGNWyprm1/77ZWrxgZ9onJmO8J5qHMp2bd/BGyJmuZ6q7bTolAIO14
m5b1a9Nw7+InF7BIfusGsyA1VQIupMN9oVi1CoNWn0Z86yDh3ZzgwO3/3fhA4DTh
OTkUa0Pxv779I4M+u73552eGmo1qVJownB5Tvg1Se4q2Bqbsg0k5lF8zYkljf6AP
o81uFb33ZyDDurOEe1x7nBgB/ItEDzr1Ks7oxAY+boGmbBFDXdQGh4GDhocAJf+E
fNnCAdSPPeAS+p1MRofU38HoAUiflukAmw7klYECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTkTpWTlz4gzBTVSiALJ5Vj6nYD0zAfBgNVHSMEGDAWgBT/RNuspW2sMZQB
9opQ2Rf1QkYRrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L18wVGJyS1Z0ckRHVUFmYUtVTmtYOVVKR0VhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvNTNhOTQ3LWZkMDMtNDAxNC05ODI3LWM1ZDg5NTA4MThlYy8x
LzVFNlZrNWMtSU13VTFVb2dDeWVWWS1wMkE5TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
NTNhOTQ3LWZkMDMtNDAxNC05ODI3LWM1ZDg5NTA4MThlYy8xL18wVGJyS1Z0ckRH
VUFmYUtVTmtYOVVKR0VhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2PCjANBgkqhkiG9w0BAQsFAAOC
AQEAQaCCcwpUpyTxZVHcIzajhVKn/FbtjH8lojV8Yd8/nAAmXGoOht8hfFvFWgQG
AOcPNbsaRzEOQ88/fBV+f1cu/tOtY8MZbtpoKQJ5+U0d7wEr2psDBkU7J14ztjgS
vIMeT5T1NwbkjpgFNg5tR7nJPu2MUTiBTwBCpjhavZkLP5jkObdlmQ9rP5OwrZoF
On+hxX1ia38k3xfra/tB+RyIJRh50Ulwj3QzY973frFDqK6lhgBm9Y0lElGZP2A7
pMvmYh7WNxch6apv5FXBhJo9D3RKiepdDv+dLt+TkU1jZCYWtffZgo0LodJn4dRA
0fu+jO96MTXfpEiwAX7Rzq8HgQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:47 2023 by rpki-client on console-ams.rpki-client.org