Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/1-pXsBbt5tYwdrq6Qmxdxux9oc9E.roa
File: 1-pXsBbt5tYwdrq6Qmxdxux9oc9E.roa (raw, json)
Hash identifier: fYSSbtlqk74hkA2Kc5TM/33n2QPRdpwSv5ARL3AcU+A=
Subject key identifier: FA:95:EC:05:BB:79:B5:8C:1D:AE:AE:90:9B:17:71:BB:1F:68:73:D1
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 0182D5A6B80F12D6979514BFEF4D99428E5D
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/1-pXsBbt5tYwdrq6Qmxdxux9oc9E.roa
Signing time: Thu 25 Aug 2022 15:37:29 +0000
ROA not before: Thu 25 Aug 2022 15:37:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7922
IP address blocks: 159.197.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:a6:b8:0f:12:d6:97:95:14:bf:ef:4d:99:42:8e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Aug 25 15:37:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa95ec05bb79b58c1daeae909b1771bb1f6873d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:99:b4:0f:1d:81:c8:fb:eb:23:fd:1f:d2:
40:fa:92:72:5c:51:fd:ae:a7:74:3f:2c:61:d3:43:
90:d0:8b:dc:0f:ab:3e:79:cb:51:0c:dd:fa:1a:60:
7c:35:0f:57:a5:32:fd:5f:c4:ce:fa:f2:df:d4:7f:
0c:d2:6e:98:e2:44:3f:4f:61:7f:6a:82:af:ad:1e:
3b:67:88:07:40:67:25:1b:5f:32:e8:0e:12:dc:4d:
f2:a4:19:0b:7b:94:b8:b5:51:91:e3:20:dc:56:ec:
e6:0a:99:96:6f:44:9e:4e:42:db:de:bd:d0:88:9f:
8b:3a:eb:3b:9a:94:83:44:5d:26:00:5d:34:b7:3f:
3c:ad:0b:dd:df:93:9b:5e:ea:8b:58:7b:4e:f3:30:
ad:07:f8:4e:82:11:4a:2f:19:ac:99:7f:e2:b3:6d:
bc:af:37:2e:c0:d6:0f:27:27:16:cf:fa:22:25:e5:
c8:64:81:06:87:36:90:cb:49:bb:80:82:4d:97:8e:
7e:88:a9:5c:21:49:04:84:8b:d7:08:e8:75:26:e4:
65:d1:f8:04:4b:c8:7a:da:63:4b:37:21:f0:d9:19:
96:8c:96:0c:ad:11:d9:71:77:a3:52:94:3e:3d:30:
71:c0:82:f6:e7:8d:ad:31:b7:c6:81:05:a9:5c:b3:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:95:EC:05:BB:79:B5:8C:1D:AE:AE:90:9B:17:71:BB:1F:68:73:D1
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/1-pXsBbt5tYwdrq6Qmxdxux9oc9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.197.144.0/20
Signature Algorithm: sha256WithRSAEncryption
39:83:e0:c2:3b:5a:12:85:87:30:b1:6e:75:b0:9f:d9:27:0b:
26:f9:d0:c5:2e:db:be:f4:99:43:dc:b1:11:4f:f9:73:65:f8:
a0:a1:a2:23:11:82:ea:ca:77:7a:aa:6c:57:09:29:ec:18:d1:
6b:70:2b:16:57:ca:10:dd:47:35:5b:fa:58:3b:2f:74:08:f2:
9d:9a:0d:18:a5:cb:77:db:45:27:cb:2c:a0:bf:75:60:51:1c:
39:f1:d2:af:d1:29:00:8e:28:ad:f9:5c:cd:04:5f:79:12:14:
29:4f:00:34:4e:29:39:cb:78:83:e1:04:1b:86:40:a0:e0:07:
53:f9:57:18:48:6f:11:0b:0d:91:4c:9b:44:ae:80:f5:99:1f:
9b:2a:e7:61:32:ed:10:bf:32:b3:ff:a7:38:7b:26:d6:bd:b5:
07:5b:cd:a8:8d:a4:5f:45:11:d8:14:6f:7e:96:ac:9c:f3:b0:
d4:88:da:2e:2d:b9:c7:61:02:92:83:02:c0:8c:4d:e3:49:3c:
a6:ca:60:1e:b1:ff:31:8b:25:aa:27:b1:04:02:49:11:22:a2:
33:e5:df:f4:80:30:88:d0:ae:8c:81:18:04:6f:01:99:14:8e:
51:5a:6d:e6:86:86:29:7d:a2:4b:7b:81:8d:f2:dd:36:44:9d:
4f:28:2d:66
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYLVprgPEtaXlRS/702ZQo5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5
MWQ0YTkwHhcNMjIwODI1MTUzNzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTk1ZWMwNWJiNzliNThjMWRhZWFlOTA5YjE3NzFiYjFmNjg3M2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzmZtA8dgcj76yP9H9JA+pJyXFH9
rqd0Pyxh00OQ0IvcD6s+ectRDN36GmB8NQ9XpTL9X8TO+vLf1H8M0m6Y4kQ/T2F/
aoKvrR47Z4gHQGclG18y6A4S3E3ypBkLe5S4tVGR4yDcVuzmCpmWb0SeTkLb3r3Q
iJ+LOus7mpSDRF0mAF00tz88rQvd35ObXuqLWHtO8zCtB/hOghFKLxmsmX/is228
rzcuwNYPJycWz/oiJeXIZIEGhzaQy0m7gIJNl45+iKlcIUkEhIvXCOh1JuRl0fgE
S8h62mNLNyHw2RmWjJYMrRHZcXejUpQ+PTBxwIL2542tMbfGgQWpXLOH5wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqV7AW7ebWMHa6ukJsXcbsfaHPRMB8GA1UdIwQY
MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt
ZWI3YWFhNjgyOGJlLzEvMS1wWHNCYnQ1dFl3ZHJxNlFteGR4dXg5b2M5RS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWQvN2EyYTk5LTE0NmMtNDc4MS1hMzAyLWViN2FhYTY4Mjhi
ZS8xL1RkbFUwOGQ4bkU0MzdyOTFQWWJ6M1BDUjFLay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJ/FkDAN
BgkqhkiG9w0BAQsFAAOCAQEAOYPgwjtaEoWHMLFudbCf2ScLJvnQxS7bvvSZQ9yx
EU/5c2X4oKGiIxGC6sp3eqpsVwkp7BjRa3ArFlfKEN1HNVv6WDsvdAjynZoNGKXL
d9tFJ8ssoL91YFEcOfHSr9EpAI4orflczQRfeRIUKU8ANE4pOct4g+EEG4ZAoOAH
U/lXGEhvEQsNkUybRK6A9ZkfmyrnYTLtEL8ys/+nOHsm1r21B1vNqI2kX0UR2BRv
fpasnPOw1IjaLi25x2ECkoMCwIxN40k8pspgHrH/MYslqiexBAJJESKiM+Xf9IAw
iNCujIEYBG8BmRSOUVpt5oaGKX2iS3uBjfLdNkSdTygtZg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:14 2024 by rpki-client on console-ams.rpki-client.org