Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/19WwoxMiYPG_M9BQYzRRnSQR53M.roa
File: 19WwoxMiYPG_M9BQYzRRnSQR53M.roa (raw, json)
Hash identifier: wVJCJblXPC4OC3c+6v7aSqLi0HasmeTx6Fdaf4Kjj8g=
Subject key identifier: D7:D5:B0:A3:13:22:60:F1:BF:33:D0:50:63:34:51:9D:24:11:E7:73
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 018491C71BD3F5409ECFA69A25219E0D0C7F
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/19WwoxMiYPG_M9BQYzRRnSQR53M.roa
Signing time: Sat 19 Nov 2022 21:24:15 +0000
ROA not before: Sat 19 Nov 2022 21:24:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209968
IP address blocks: 185.23.5.0/24 maxlen: 24
2a09:be44::/30 maxlen: 48
2a0e:ec00::/32 maxlen: 48
2a09:be41::/32 maxlen: 48
2a12:49c0::/29 maxlen: 32
2a09:be42::/31 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:91:c7:1b:d3:f5:40:9e:cf:a6:9a:25:21:9e:0d:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Nov 19 21:24:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7d5b0a3132260f1bf33d0506334519d2411e773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:22:96:bb:a4:67:0b:30:3e:ed:43:75:bb:
17:39:37:4d:e2:89:e3:fb:67:f0:a0:01:e5:09:69:
b9:29:d3:e1:e7:e7:be:9c:a6:ae:b4:e2:1d:f5:81:
f5:7d:4f:1f:8d:32:0c:76:93:79:55:cb:db:59:d7:
46:30:43:1c:27:b0:53:9e:d6:a9:51:83:c9:70:03:
50:6c:46:92:a6:06:d5:db:7c:71:91:84:f5:c2:71:
6f:ba:00:69:ed:b5:eb:59:67:c9:5e:2c:4e:05:76:
db:4a:8e:55:83:0b:45:e0:3f:cf:be:87:f3:27:09:
4e:27:3f:37:bc:78:57:13:cd:88:d7:b3:0c:97:bc:
64:07:e4:af:db:c4:cb:5e:72:54:bc:9d:bb:29:f1:
b8:d8:68:0b:c8:6f:89:fe:68:6e:d9:65:55:6b:e2:
5b:4d:7f:b4:68:5d:f2:f7:f7:7a:e6:eb:5c:de:e3:
2c:16:ed:be:66:b4:19:1e:7a:4a:f7:72:58:c1:99:
1b:08:7e:8d:53:6f:9b:ff:66:cc:16:ad:2c:dd:d4:
b0:88:40:b5:01:5e:b1:52:98:c0:15:d0:f2:92:2b:
92:f9:3d:60:99:a1:cb:28:53:27:63:ed:86:c4:1a:
9f:b5:c3:07:a3:5a:ad:80:96:e2:03:19:c7:18:8e:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D5:B0:A3:13:22:60:F1:BF:33:D0:50:63:34:51:9D:24:11:E7:73
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/19WwoxMiYPG_M9BQYzRRnSQR53M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.5.0/24
IPv6:
2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:ec00::/32
2a12:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:81:a1:9b:a7:2b:b2:45:76:c8:32:ab:21:d2:24:7d:e8:0e:
c2:dc:af:82:8d:26:03:d9:b0:d7:0e:22:a1:0c:1e:6e:f3:b4:
fc:71:33:df:4c:dc:d6:f9:a1:28:1e:ca:69:f1:38:49:4e:62:
3c:39:f6:e8:d1:01:fd:71:de:70:9b:6f:3a:15:d1:12:47:fd:
87:10:ff:c1:82:c4:86:24:2c:c4:b4:38:0f:eb:7e:41:27:25:
4a:a3:4b:4f:5e:2e:c5:aa:b7:45:cc:69:ab:c2:71:24:54:f9:
b8:2a:17:7a:e6:11:7f:01:88:85:b0:b7:ea:df:76:32:9a:a2:
3e:45:06:35:6d:cb:ec:0e:96:59:e0:4f:b5:01:a9:fb:44:0a:
f7:1f:b6:36:d9:5f:c2:fd:02:c1:f5:c5:ea:b1:6f:ed:c6:11:
64:97:f6:e6:47:73:e5:55:97:40:18:22:68:1f:50:8c:d7:8a:
14:91:30:eb:56:1a:b8:0c:9b:87:23:9e:b4:36:2a:a8:47:0b:
f2:46:43:8d:ac:7a:a7:a9:54:7f:09:cf:08:48:91:ad:cf:3a:
90:26:b7:50:dd:01:b0:24:68:83:13:58:19:99:c9:d6:1b:07:
f9:9a:fe:de:87:e7:33:29:9c:3a:58:8c:02:d7:a4:d4:b2:aa:
9b:68:c5:a7
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYSRxxvT9UCez6aaJSGeDQx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz
NDY5YzkwHhcNMjIxMTE5MjEyNDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2Q1YjBhMzEzMjI2MGYxYmYzM2QwNTA2MzM0NTE5ZDI0MTFlNzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoYilrukZwswPu1DdbsXOTdN4onj
+2fwoAHlCWm5KdPh5+e+nKautOId9YH1fU8fjTIMdpN5VcvbWddGMEMcJ7BTntap
UYPJcANQbEaSpgbV23xxkYT1wnFvugBp7bXrWWfJXixOBXbbSo5VgwtF4D/Pvofz
JwlOJz83vHhXE82I17MMl7xkB+Sv28TLXnJUvJ27KfG42GgLyG+J/mhu2WVVa+Jb
TX+0aF3y9/d65utc3uMsFu2+ZrQZHnpK93JYwZkbCH6NU2+b/2bMFq0s3dSwiEC1
AV6xUpjAFdDykiuS+T1gmaHLKFMnY+2GxBqftcMHo1qtgJbiAxnHGI5N3QIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFNfVsKMTImDxvzPQUGM0UZ0kEedzMB8GA1UdIwQY
MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt
M2NlM2NmOGIxYzQ5LzEvMTlXd294TWlZUEdfTTlCUVl6UlJuU1FSNTNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5
LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAMBAIAATAGAwQAuRcFMCQE
AgACMB4wDgMFACoJvkEDBQMqCb5AAwUAKg7sAAMFAyoSScAwDQYJKoZIhvcNAQEL
BQADggEBAEyBoZunK7JFdsgyqyHSJH3oDsLcr4KNJgPZsNcOIqEMHm7ztPxxM99M
3Nb5oSgeymnxOElOYjw59ujRAf1x3nCbbzoV0RJH/YcQ/8GCxIYkLMS0OA/rfkEn
JUqjS09eLsWqt0XMaavCcSRU+bgqF3rmEX8BiIWwt+rfdjKaoj5FBjVty+wOllng
T7UBqftECvcftjbZX8L9AsH1xeqxb+3GEWSX9uZHc+VVl0AYImgfUIzXihSRMOtW
GrgMm4cjnrQ2KqhHC/JGQ42seqepVH8JzwhIka3POpAmt1DdAbAkaIMTWBmZydYb
B/ma/t6H5zMpnDpYjALXpNSyqptoxac=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:50 2024 by rpki-client on console-fra.rpki-client.org