Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5wmW7waACRHZj1kKnprTSpmDHCs.roa
File: 5wmW7waACRHZj1kKnprTSpmDHCs.roa (raw, json)
Hash identifier: jhjV0HlIPyZrSNsvAcOmHYd0S3wsgTiAcfZCJCFYIOI=
Subject key identifier: E7:09:96:EF:06:80:09:11:D9:8F:59:0A:9E:9A:D3:4A:99:83:1C:2B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 275639AA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5wmW7waACRHZj1kKnprTSpmDHCs.roa
Signing time: Sat 01 Jan 2022 16:07:45 +0000
ROA not before: Sat 01 Jan 2022 16:07:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3229
IP address blocks: 95.47.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659962282 (0x275639aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e70996ef06800911d98f590a9e9ad34a99831c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:f3:83:5e:50:a0:6e:45:e1:2c:41:95:13:
bb:0d:ad:5c:ea:e2:87:c5:b4:c9:7c:df:1d:ee:d3:
ae:6a:f1:a1:2f:5d:c9:05:2b:02:34:9f:8c:46:80:
2c:e3:88:58:90:bd:3c:59:d3:72:57:d3:e9:58:d0:
cf:ae:fb:3f:29:d9:e8:bf:93:ea:18:fc:7a:78:45:
6b:01:e9:9a:1c:40:8b:d0:a2:7b:13:97:cd:0c:cd:
c5:1b:85:9c:bc:96:27:d6:07:d4:9f:df:e4:b7:0f:
6e:65:94:c6:31:c3:09:65:0a:50:c0:23:53:c8:02:
f2:39:f7:e3:88:16:b9:b4:31:02:74:6b:7a:15:7b:
30:39:ca:8d:50:7b:3c:b3:aa:74:9b:ec:bc:1f:a4:
98:32:ad:27:24:4b:95:30:33:a8:32:c1:a8:43:96:
68:af:29:4e:df:2b:7f:e3:d7:6c:48:c2:a9:8b:ea:
0a:de:5f:f8:a7:b1:09:93:ee:61:68:4d:b1:a4:1b:
0d:a4:ff:22:2a:49:fd:fd:57:71:ab:3a:94:db:da:
b8:8f:10:3e:00:f3:a4:2a:e3:f4:3d:c0:f0:9b:2d:
49:a4:10:2a:38:da:a9:4b:03:1a:8f:41:29:83:1d:
4f:03:77:bf:15:6d:66:bf:6c:73:9e:35:e8:e9:a9:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:09:96:EF:06:80:09:11:D9:8F:59:0A:9E:9A:D3:4A:99:83:1C:2B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5wmW7waACRHZj1kKnprTSpmDHCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.252.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fe:3c:7a:7d:0a:14:bc:40:c3:bf:85:91:9e:a7:c5:36:ef:
e7:25:c7:08:ae:e3:c2:15:1c:60:63:00:46:9c:1d:77:93:39:
bd:9a:29:a4:53:e6:63:2d:5a:dc:e5:44:f5:b6:a8:33:31:2e:
9a:6e:7b:8f:c1:01:22:3d:27:5e:d4:2b:20:64:9d:66:29:e0:
4d:ca:b9:e4:3b:ec:8a:55:88:18:1e:dd:be:97:12:0b:42:e3:
25:a1:23:83:7a:65:87:94:37:0c:ad:fd:28:f9:25:93:fc:39:
bd:bb:73:4c:62:ee:4e:31:93:9d:f4:2e:e7:b1:2a:4e:35:97:
fc:f3:e0:1c:e5:dc:db:63:cc:cf:d3:7d:1c:bd:b4:95:97:61:
73:b0:05:e0:51:b0:e1:f6:de:b4:28:d3:1a:84:f4:6f:c0:08:
ab:b2:77:aa:6f:68:18:62:31:de:eb:00:a9:9a:7c:93:8b:37:
1a:a2:41:8e:be:d9:42:91:90:99:10:21:3f:b9:8c:f5:47:b7:
94:85:24:35:f1:62:c0:15:82:d9:12:16:ca:0c:0f:59:70:f7:
b7:68:b2:3e:61:d8:ba:8f:75:a0:1a:24:1e:4d:d9:35:1b:5c:
08:bf:99:d9:1f:eb:29:a9:e2:18:fa:8b:0e:00:e4:e4:7a:f6:
85:26:47:4f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJ1Y5qjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDc0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTcwOTk2ZWYwNjgw
MDkxMWQ5OGY1OTBhOWU5YWQzNGE5OTgzMWMyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALW084NeUKBuReEsQZUTuw2tXOrih8W0yXzfHe7TrmrxoS9d
yQUrAjSfjEaALOOIWJC9PFnTclfT6VjQz677PynZ6L+T6hj8enhFawHpmhxAi9Ci
exOXzQzNxRuFnLyWJ9YH1J/f5LcPbmWUxjHDCWUKUMAjU8gC8jn344gWubQxAnRr
ehV7MDnKjVB7PLOqdJvsvB+kmDKtJyRLlTAzqDLBqEOWaK8pTt8rf+PXbEjCqYvq
Ct5f+KexCZPuYWhNsaQbDaT/IipJ/f1Xcas6lNvauI8QPgDzpCrj9D3A8JstSaQQ
KjjaqUsDGo9BKYMdTwN3vxVtZr9sc5416Omp9nUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTnCZbvBoAJEdmPWQqemtNKmYMcKzAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
LzV3bVc3d2FBQ1JIWmoxa0tucHJUU3BtREhDcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF8v/DANBgkqhkiG9w0BAQsFAAOC
AQEAYf48en0KFLxAw7+FkZ6nxTbv5yXHCK7jwhUcYGMARpwdd5M5vZoppFPmYy1a
3OVE9baoMzEumm57j8EBIj0nXtQrIGSdZingTcq55DvsilWIGB7dvpcSC0LjJaEj
g3plh5Q3DK39KPklk/w5vbtzTGLuTjGTnfQu57EqTjWX/PPgHOXc22PMz9N9HL20
lZdhc7AF4FGw4fbetCjTGoT0b8AIq7J3qm9oGGIx3usAqZp8k4s3GqJBjr7ZQpGQ
mRAhP7mM9Ue3lIUkNfFiwBWC2RIWygwPWXD3t2iyPmHYuo91oBokHk3ZNRtcCL+Z
2R/rKaniGPqLDgDk5Hr2hSZHTw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org