Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/5czjDA8rzgy07hudmy86lNnEepA.roa
File: 5czjDA8rzgy07hudmy86lNnEepA.roa (raw, json)
Hash identifier: M0UUGRFDXVHhW/Y3eX2oAlckZnmrrnhR3RzG19vRUww=
Subject key identifier: E5:CC:E3:0C:0F:2B:CE:0C:B4:EE:1B:9D:9B:2F:3A:94:D9:C4:7A:90
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 0561ACE9
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/5czjDA8rzgy07hudmy86lNnEepA.roa
Signing time: Sat 01 Jan 2022 11:04:35 +0000
ROA not before: Sat 01 Jan 2022 11:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 161.8.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90287337 (0x561ace9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 11:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5cce30c0f2bce0cb4ee1b9d9b2f3a94d9c47a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:b2:e4:d7:7e:79:36:20:46:8c:f8:a8:a4:
fb:4d:92:13:6a:0c:00:07:ab:2e:d6:e8:ac:0c:e2:
ca:17:cf:cf:49:e8:7a:70:0c:69:86:ed:22:a3:62:
36:8f:9f:c1:a6:23:c3:29:e2:0f:ff:43:3d:ac:20:
04:14:ba:3f:e7:7d:71:43:ec:a9:d4:78:e2:88:72:
9d:27:49:22:2e:a6:c1:a4:8b:60:27:4c:66:67:65:
31:36:01:0d:b2:ae:0b:f1:f7:d2:b0:f8:68:3e:a0:
bf:73:6c:af:f0:c0:69:0b:c7:71:8c:54:1c:e9:49:
e4:8a:34:8a:85:cb:24:a9:45:16:8c:90:f6:b4:74:
dc:7b:1e:c7:e1:8a:58:7d:de:b8:d5:3a:3d:d5:33:
32:9f:63:a6:0b:94:ab:33:af:fa:e1:db:3e:10:59:
1d:53:c5:00:28:2e:39:74:fc:5d:0d:da:ea:28:f4:
71:54:17:0e:06:73:45:1b:04:57:4b:f8:ad:e2:17:
ae:26:2d:78:48:f8:15:a7:44:8d:9b:c8:5b:df:4e:
00:97:08:f4:f2:94:c3:f7:59:21:cd:d3:c7:9e:38:
98:d3:72:89:23:26:fc:f6:0a:9b:c9:4d:b6:ec:6b:
bc:ef:44:c8:fe:2f:5c:42:af:b2:3f:3e:28:2b:1d:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:E3:0C:0F:2B:CE:0C:B4:EE:1B:9D:9B:2F:3A:94:D9:C4:7A:90
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/5czjDA8rzgy07hudmy86lNnEepA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.8.0.0/19
Signature Algorithm: sha256WithRSAEncryption
21:21:10:00:b5:28:6c:1d:8f:41:61:90:9e:77:d6:a1:31:11:
94:c2:eb:51:dc:a1:43:42:d3:e6:cc:3c:be:de:4b:32:38:3a:
2c:73:0a:4d:14:fe:94:6a:d9:6b:38:30:b2:1d:74:4d:68:89:
f5:87:dd:4b:5d:66:29:71:96:a0:62:11:43:a2:2e:22:ba:bb:
b6:2a:fd:c9:72:80:be:0b:d0:8f:05:99:31:a5:af:47:a2:85:
82:0e:2c:4d:64:d9:24:52:a0:cd:84:fa:60:10:00:9b:39:85:
8c:9b:ee:0b:09:16:72:52:c2:b9:b9:2f:c2:71:72:05:ab:64:
cc:40:92:08:9c:88:cc:8c:e5:65:db:12:a1:49:87:29:f6:7c:
3f:0f:46:ea:63:60:c1:d0:af:56:71:ad:64:55:b2:eb:73:0d:
2f:e3:fa:08:2e:b6:27:44:93:eb:7a:6e:25:f5:39:2d:95:24:
51:c8:d6:d9:d0:e3:94:52:00:df:a7:39:16:04:35:8d:a8:f0:
21:16:b3:fa:ea:2e:4b:ac:66:55:31:f4:b0:8d:87:c8:77:35:
b5:0e:1b:77:fd:80:72:9d:0f:c7:0f:6f:10:43:40:e0:79:2b:
98:eb:0a:b4:68:16:fc:fc:e6:53:7a:a6:6b:41:fd:fa:e6:43:
f5:5c:62:f5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBWGs6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZGQ5NTRkM2M3N2M5YzRlMzdlZWJmNzUzZDg2ZjNkY2YwOTFkNGE5MB4XDTIyMDEw
MTExMDQzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTVjY2UzMGMwZjJi
Y2UwY2I0ZWUxYjlkOWIyZjNhOTRkOWM0N2E5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALC5suTXfnk2IEaM+Kik+02SE2oMAAerLtborAziyhfPz0no
enAMaYbtIqNiNo+fwaYjwyniD/9DPawgBBS6P+d9cUPsqdR44ohynSdJIi6mwaSL
YCdMZmdlMTYBDbKuC/H30rD4aD6gv3Nsr/DAaQvHcYxUHOlJ5Io0ioXLJKlFFoyQ
9rR03Hsex+GKWH3euNU6PdUzMp9jpguUqzOv+uHbPhBZHVPFACguOXT8XQ3a6ij0
cVQXDgZzRRsEV0v4reIXriYteEj4FadEjZvIW99OAJcI9PKUw/dZIc3Tx544mNNy
iSMm/PYKm8lNtuxrvO9EyP4vXEKvsj8+KCsdqWMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTlzOMMDyvODLTuG52bLzqU2cR6kDAfBgNVHSMEGDAWgBRN2VTTx3ycTjfu
v3U9hvPc8JHUqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RkbFUwOGQ4bkU0MzdyOTFQWWJ6M1BDUjFLay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvN2EyYTk5LTE0NmMtNDc4MS1hMzAyLWViN2FhYTY4MjhiZS8x
LzVjempEQThyemd5MDdodWRteTg2bE5uRWVwQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
N2EyYTk5LTE0NmMtNDc4MS1hMzAyLWViN2FhYTY4MjhiZS8xL1RkbFUwOGQ4bkU0
MzdyOTFQWWJ6M1BDUjFLay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBaEIADANBgkqhkiG9w0BAQsFAAOC
AQEAISEQALUobB2PQWGQnnfWoTERlMLrUdyhQ0LT5sw8vt5LMjg6LHMKTRT+lGrZ
azgwsh10TWiJ9YfdS11mKXGWoGIRQ6IuIrq7tir9yXKAvgvQjwWZMaWvR6KFgg4s
TWTZJFKgzYT6YBAAmzmFjJvuCwkWclLCubkvwnFyBatkzECSCJyIzIzlZdsSoUmH
KfZ8Pw9G6mNgwdCvVnGtZFWy63MNL+P6CC62J0ST63puJfU5LZUkUcjW2dDjlFIA
36c5FgQ1jajwIRaz+uouS6xmVTH0sI2HyHc1tQ4bd/2Acp0Pxw9vEENA4HkrmOsK
tGgW/PzmU3qma0H9+uZD9Vxi9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:23 2024 by rpki-client on console-fra.rpki-client.org