Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/1-0fqaDZjgeGOyWcls1dX3qkKvPg.roa
File: 1-0fqaDZjgeGOyWcls1dX3qkKvPg.roa (raw, json)
Hash identifier: GMRChpKBH/7PToADxy/vQGnoiEyqoiqa028zYS/3D2g=
Subject key identifier: FB:47:EA:68:36:63:81:E1:8E:C9:67:25:B3:57:57:DE:A9:0A:BC:F8
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 06F37FC2
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/1-0fqaDZjgeGOyWcls1dX3qkKvPg.roa
Signing time: Tue 21 Jun 2022 15:20:44 +0000
ROA not before: Tue 21 Jun 2022 15:20:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58507
IP address blocks: 161.8.192.0/18 maxlen: 24
161.8.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116621250 (0x6f37fc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jun 21 15:20:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb47ea68366381e18ec96725b35757dea90abcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:7f:59:63:24:18:ac:28:7a:58:04:6a:0c:
49:ac:16:bc:a0:76:7a:4a:a6:a6:4c:70:5a:1a:8f:
03:ca:9c:39:18:12:84:c2:37:79:5f:b7:be:e0:20:
a1:23:71:f5:f3:e5:85:5a:ee:63:29:e8:a4:d7:f9:
02:04:f3:05:f7:43:58:85:6b:94:a2:84:b2:08:cd:
51:3e:eb:24:b3:af:a4:f7:38:33:3b:53:ef:b8:29:
86:60:7d:b4:bc:78:e0:c6:f8:5c:e4:c6:ec:0e:8d:
08:af:33:43:f6:23:34:f1:5c:55:fb:fc:78:e0:85:
08:3b:ef:95:66:01:0f:f8:30:40:a3:e4:88:5f:d0:
01:ae:b0:ba:d6:04:a8:40:1f:2f:e1:7c:53:34:d1:
f7:8b:5d:91:88:f2:d1:a2:7f:dc:35:ef:c2:ae:f0:
cb:82:4f:4d:7b:10:64:f8:ea:92:70:00:91:b3:e4:
05:04:7a:3b:6c:fc:02:d7:d5:d5:d2:27:85:2c:32:
89:cc:40:4d:a0:cf:30:af:ab:4f:5c:52:ee:8f:4f:
69:c9:34:fa:a5:bc:25:71:0e:eb:b0:c6:98:86:bb:
0e:7a:6e:e7:ec:a9:4b:24:07:70:3b:f9:70:7c:a1:
c1:5a:d3:fe:05:ba:10:f7:3c:1f:5a:17:cb:2b:2a:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:47:EA:68:36:63:81:E1:8E:C9:67:25:B3:57:57:DE:A9:0A:BC:F8
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/1-0fqaDZjgeGOyWcls1dX3qkKvPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.8.0.0/19
161.8.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:9e:98:6f:2b:f2:68:9d:0f:29:a3:3f:37:f5:d0:57:39:29:
48:8d:e4:de:75:12:d3:c6:ad:a0:c8:b1:d5:35:f9:84:db:d9:
24:e0:3b:d7:ac:cb:ee:d3:ad:7f:35:00:22:7a:64:4c:ee:ff:
af:a6:fe:60:23:e0:83:ff:f5:32:d8:b4:28:01:df:99:fc:8e:
2d:70:30:99:b0:fc:41:52:4b:43:a1:ce:85:ca:a7:df:9a:04:
c4:1b:33:f2:17:71:d1:51:2c:9a:1f:92:d3:f6:ea:59:a4:9a:
49:67:66:ed:65:21:e7:7a:59:3c:40:b1:b7:a0:f3:d5:a8:2b:
de:cd:5d:37:35:10:5d:fb:08:52:be:6e:ec:40:27:39:94:a0:
9b:d0:b6:19:81:69:82:f6:ef:50:5e:a8:29:02:58:fc:48:1b:
60:8e:bd:20:4d:75:17:cc:8d:8f:c4:f1:81:7e:41:09:e3:f6:
eb:ac:a4:be:9d:36:62:30:52:0b:40:f0:f3:4c:39:05:a6:fa:
9e:e7:e9:a6:73:24:9d:70:5e:a8:47:21:c0:6e:77:fc:91:69:
3b:0e:35:e2:85:02:e8:0d:e7:19:36:38:34:38:24:84:aa:f6:
5a:12:fb:2e:f1:52:bb:2a:5c:76:14:58:68:75:87:20:9e:9c:
05:70:8b:e8
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIEBvN/wjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZGQ5NTRkM2M3N2M5YzRlMzdlZWJmNzUzZDg2ZjNkY2YwOTFkNGE5MB4XDTIyMDYy
MTE1MjA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmI0N2VhNjgzNjYz
ODFlMThlYzk2NzI1YjM1NzU3ZGVhOTBhYmNmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANkpf1ljJBisKHpYBGoMSawWvKB2ekqmpkxwWhqPA8qcORgS
hMI3eV+3vuAgoSNx9fPlhVruYynopNf5AgTzBfdDWIVrlKKEsgjNUT7rJLOvpPc4
MztT77gphmB9tLx44Mb4XOTG7A6NCK8zQ/YjNPFcVfv8eOCFCDvvlWYBD/gwQKPk
iF/QAa6wutYEqEAfL+F8UzTR94tdkYjy0aJ/3DXvwq7wy4JPTXsQZPjqknAAkbPk
BQR6O2z8AtfV1dInhSwyicxATaDPMK+rT1xS7o9Pack0+qW8JXEO67DGmIa7Dnpu
5+ypSyQHcDv5cHyhwVrT/gW6EPc8H1oXyysqhxkCAwEAAaOCAhAwggIMMB0GA1Ud
DgQWBBT7R+poNmOB4Y7JZyWzV1feqQq8+DAfBgNVHSMEGDAWgBRN2VTTx3ycTjfu
v3U9hvPc8JHUqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RkbFUwOGQ4bkU0MzdyOTFQWWJ6M1BDUjFLay5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvN2EyYTk5LTE0NmMtNDc4MS1hMzAyLWViN2FhYTY4MjhiZS8x
LzEtMGZxYURaamdlR095V2NsczFkWDNxa0t2UGcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVk
LzdhMmE5OS0xNDZjLTQ3ODEtYTMwMi1lYjdhYWE2ODI4YmUvMS9UZGxVMDhkOG5F
NDM3cjkxUFliejNQQ1IxS2suY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAWhCAADBAahCMAwDQYJKoZIhvcN
AQELBQADggEBAEyemG8r8midDymjPzf10Fc5KUiN5N51EtPGraDIsdU1+YTb2STg
O9esy+7TrX81ACJ6ZEzu/6+m/mAj4IP/9TLYtCgB35n8ji1wMJmw/EFSS0OhzoXK
p9+aBMQbM/IXcdFRLJofktP26lmkmklnZu1lIed6WTxAsbeg89WoK97NXTc1EF37
CFK+buxAJzmUoJvQthmBaYL271BeqCkCWPxIG2COvSBNdRfMjY/E8YF+QQnj9uus
pL6dNmIwUgtA8PNMOQWm+p7n6aZzJJ1wXqhHIcBud/yRaTsONeKFAugN5xk2ODQ4
JISq9loS+y7xUrsqXHYUWGh1hyCenAVwi+g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:23 2024 by rpki-client on console-fra.rpki-client.org