Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Jsnx8KzQi4CbIUPxrIPjC9hKYo4.roa
File: Jsnx8KzQi4CbIUPxrIPjC9hKYo4.roa (raw, json)
Hash identifier: zqk99mExQs08kg6g5LsxzZctIe5yjLqS7o4KsBzjHlc=
Subject key identifier: 26:C9:F1:F0:AC:D0:8B:80:9B:21:43:F1:AC:83:E3:0B:D8:4A:62:8E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 02FC3704
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Jsnx8KzQi4CbIUPxrIPjC9hKYo4.roa
Signing time: Tue 17 May 2022 06:55:29 +0000
ROA not before: Tue 17 May 2022 06:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 176.57.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50083588 (0x2fc3704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 17 06:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26c9f1f0acd08b809b2143f1ac83e30bd84a628e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:c6:df:81:41:dc:45:17:4e:a4:79:f0:66:
57:0d:67:f6:52:e6:c4:b6:04:89:80:8d:21:08:0a:
5a:d2:6b:70:69:d5:1d:eb:fd:07:d0:09:ad:cf:b3:
ed:7a:32:91:69:fd:63:ca:86:ad:b8:b1:04:c9:b0:
88:36:45:86:06:83:80:ab:18:c1:be:9b:5c:44:ad:
f9:b1:dd:a5:b0:37:3f:7b:22:c5:36:c3:1e:7b:dc:
ef:3a:26:ff:07:16:40:8c:0a:97:43:47:8b:21:d6:
c3:4b:9b:24:ca:c9:61:13:8f:70:18:e4:72:69:e5:
d3:4f:4a:21:ec:0b:64:97:0d:1c:5d:a3:24:b4:9b:
75:2a:37:eb:e5:cb:2e:e3:90:92:bb:fb:cf:a1:18:
05:4b:55:3e:f7:38:52:73:de:c2:35:ff:c3:3e:35:
97:c4:9f:8e:11:4e:e1:39:00:e4:50:d6:bb:8e:04:
24:d3:30:49:a2:26:03:fa:9a:b1:ae:64:b4:ac:ed:
c9:44:9f:9e:8f:71:e8:a1:f0:13:01:0b:b5:71:11:
4d:0b:3e:1b:d9:f1:cc:9f:07:92:85:33:5a:2c:50:
eb:3a:9b:4e:13:87:a1:6c:56:40:3a:ab:0d:70:76:
57:52:4d:d3:a9:53:48:18:10:28:b3:b3:db:f8:a3:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C9:F1:F0:AC:D0:8B:80:9B:21:43:F1:AC:83:E3:0B:D8:4A:62:8E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Jsnx8KzQi4CbIUPxrIPjC9hKYo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.48.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:67:3b:04:e8:d6:64:c9:1f:0d:d8:f2:95:50:7e:bb:82:da:
98:48:90:6f:56:46:c7:80:24:ad:b2:fb:a8:9d:d5:13:2c:e7:
f6:4d:dc:d1:78:36:a6:2c:f8:32:42:94:3d:da:5e:20:fa:72:
2c:7f:94:bf:ad:bb:1c:b7:bb:77:03:6a:c2:56:5f:52:f3:cf:
b5:3d:8d:20:aa:dd:86:98:f0:66:ce:19:19:99:5b:b4:06:96:
6d:c4:ce:b6:85:c8:4b:bd:9c:fa:3d:98:c3:ec:e2:c0:74:c7:
05:21:ad:54:50:7e:37:8b:58:fd:5e:5e:8e:51:d8:41:b0:34:
85:17:71:a7:f3:cd:6d:9c:38:13:4f:c3:8a:b9:1e:7f:61:8d:
f8:dd:ef:4d:c3:29:57:01:e1:e1:7a:48:c7:36:95:19:f0:08:
0f:3e:52:99:29:63:bc:c8:51:92:ae:77:68:af:41:14:3f:b9:
08:7d:ca:63:53:cd:bf:a0:c4:a2:ab:c9:f1:79:b3:ed:7f:b8:
fa:41:3d:c6:83:2b:dd:4d:e1:6a:97:9b:83:db:1e:dd:9f:3d:
03:25:ab:4a:df:06:c6:d0:0b:5b:84:f4:3a:f9:57:1c:33:07:
3f:b9:84:e4:db:59:56:2f:78:57:ad:b2:e6:f1:ad:5c:28:82:
7a:38:fe:4e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAvw3BDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NWYxOTA3NDU0OGQyYTI5NGU0Mzg1ZDk1Y2Q2NzUyNDkwZWU0NmQ3MB4XDTIyMDUx
NzA2NTUyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZjOWYxZjBhY2Qw
OGI4MDliMjE0M2YxYWM4M2UzMGJkODRhNjI4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMAYxt+BQdxFF06kefBmVw1n9lLmxLYEiYCNIQgKWtJrcGnV
Hev9B9AJrc+z7XoykWn9Y8qGrbixBMmwiDZFhgaDgKsYwb6bXESt+bHdpbA3P3si
xTbDHnvc7zom/wcWQIwKl0NHiyHWw0ubJMrJYROPcBjkcmnl009KIewLZJcNHF2j
JLSbdSo36+XLLuOQkrv7z6EYBUtVPvc4UnPewjX/wz41l8SfjhFO4TkA5FDWu44E
JNMwSaImA/qasa5ktKztyUSfno9x6KHwEwELtXERTQs+G9nxzJ8HkoUzWixQ6zqb
ThOHoWxWQDqrDXB2V1JN06lTSBgQKLOz2/ijc7ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQmyfHwrNCLgJshQ/Gsg+ML2EpijjAfBgNVHSMEGDAWgBQV8ZB0VI0qKU5D
hdlc1nUkkO5G1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZmR1FkRlNOS2lsT1E0WFpYTloxSkpEdVJ0Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8x
L0pzbng4S3pRaTRDYklVUHhySVBqQzloS1lvNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8xL0ZmR1FkRlNOS2ls
T1E0WFpYTloxSkpEdVJ0Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7A5MDANBgkqhkiG9w0BAQsFAAOC
AQEATWc7BOjWZMkfDdjylVB+u4LamEiQb1ZGx4AkrbL7qJ3VEyzn9k3c0Xg2piz4
MkKUPdpeIPpyLH+Uv627HLe7dwNqwlZfUvPPtT2NIKrdhpjwZs4ZGZlbtAaWbcTO
toXIS72c+j2Yw+ziwHTHBSGtVFB+N4tY/V5ejlHYQbA0hRdxp/PNbZw4E0/Dirke
f2GN+N3vTcMpVwHh4XpIxzaVGfAIDz5SmSljvMhRkq53aK9BFD+5CH3KY1PNv6DE
oqvJ8Xmz7X+4+kE9xoMr3U3hapebg9se3Z89AyWrSt8GxtALW4T0OvlXHDMHP7mE
5NtZVi94V62y5vGtXCiCejj+Tg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org