Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/a1BlhXkCSiDDjJMQ3LN6CJGSr4U.roa
File: a1BlhXkCSiDDjJMQ3LN6CJGSr4U.roa (raw, json)
Hash identifier: 842JUZ/LQIwStjLnn6ZwGx6WvzF/WDG99J15PQiuZsM=
Subject key identifier: 6B:50:65:85:79:02:4A:20:C3:8C:93:10:DC:B3:7A:08:91:92:AF:85
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0183EFD540DAD968F6951CC395047A9FD773
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/a1BlhXkCSiDDjJMQ3LN6CJGSr4U.roa
Signing time: Wed 19 Oct 2022 10:41:13 +0000
ROA not before: Wed 19 Oct 2022 10:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56466
IP address blocks: 5.200.64.0/19 maxlen: 24
5.200.80.0/20 maxlen: 20
89.235.77.0/24 maxlen: 24
31.24.200.0/21 maxlen: 21
86.109.39.0/24 maxlen: 24
87.247.179.0/24 maxlen: 24
86.109.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:d5:40:da:d9:68:f6:95:1c:c3:95:04:7a:9f:d7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Oct 19 10:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b50658579024a20c38c9310dcb37a089192af85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:8d:d4:08:05:6c:45:b4:97:f5:9e:14:55:
de:3c:e0:b4:f1:a4:39:0a:04:50:e1:be:fd:01:34:
0f:f2:38:a7:3b:d2:7d:18:a4:88:31:07:2e:6c:8f:
f3:f9:2b:ef:66:1b:f1:83:a1:da:6a:2b:e2:de:2e:
2f:86:45:54:6d:93:dd:02:7d:01:d5:e6:71:6b:6a:
42:22:35:3f:32:2a:66:23:f1:0d:a5:8f:b0:71:51:
fe:2c:14:2b:3d:10:55:a4:14:0b:24:90:b7:b1:c2:
21:a7:4b:cd:e0:61:97:28:3f:b2:13:3c:45:53:13:
c7:85:25:59:d2:17:2f:e1:5d:c5:9c:96:44:c8:d9:
a1:d7:71:99:49:c0:df:ab:aa:91:06:92:1e:7f:d3:
1a:87:69:d1:0a:12:5d:82:9a:55:af:70:ab:01:b9:
c5:5c:71:c4:6b:9b:1f:14:e0:83:5e:9e:f3:33:09:
48:fa:a5:5d:47:b9:57:17:be:e2:08:13:4a:2a:8a:
e0:72:95:41:8e:23:1a:29:7f:2b:c4:d4:47:08:8b:
ca:43:4a:d7:41:d1:ea:28:48:c8:41:b4:e8:07:db:
ac:2c:52:0a:e2:27:b4:b5:3a:0a:e6:78:b8:dd:06:
eb:de:a0:56:40:f3:4d:87:8c:c7:dd:b4:f2:76:83:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:50:65:85:79:02:4A:20:C3:8C:93:10:DC:B3:7A:08:91:92:AF:85
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/a1BlhXkCSiDDjJMQ3LN6CJGSr4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.64.0/19
31.24.200.0/21
86.109.39.0/24
86.109.59.0/24
87.247.179.0/24
89.235.77.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8d:08:21:4a:37:ed:58:8a:01:7c:fd:ca:ab:ac:9a:64:38:
89:1a:38:b8:ba:7c:bb:6f:44:c8:4b:ef:8a:cb:d7:f3:c4:36:
95:8b:5c:93:65:89:ef:98:c5:e6:7e:c6:9a:15:aa:03:af:1c:
b9:50:06:80:3b:6a:e1:b4:db:1b:a3:bc:7c:20:f2:bb:88:b5:
13:c7:b9:2f:21:dc:af:68:bf:3f:f3:fc:72:7e:4b:3f:c5:e5:
24:d8:d0:c1:e9:d4:9d:b8:aa:5e:df:3f:ed:ad:30:7f:1a:05:
b0:31:1b:df:8f:e7:e6:a0:06:dc:05:f0:db:74:49:d7:0c:f6:
bb:5b:03:aa:2c:0d:50:d5:0e:f9:1b:9c:f4:d2:97:38:b2:f0:
80:34:03:a6:03:32:9c:3c:4c:30:d1:b4:cd:66:11:1b:93:06:
9c:4f:55:66:61:5f:5f:85:a7:5a:b0:8b:ed:c7:3a:38:03:d6:
25:b8:5b:c9:8c:4d:a4:06:48:15:95:fd:7a:41:2a:f4:90:12:
e6:64:72:af:da:7e:21:f6:d2:a9:97:21:25:b4:b6:4e:ed:44:
2c:53:cf:ee:85:de:8f:fc:98:d0:73:4b:da:23:d2:02:d5:06:
cb:6c:b3:a1:1a:83:c2:3d:c1:c5:02:b8:8d:32:29:ba:77:ec:
60:56:d3:3f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYPv1UDa2Wj2lRzDlQR6n9dzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjIxMDE5MTA0MTEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjUwNjU4NTc5MDI0YTIwYzM4YzkzMTBkY2IzN2EwODkxOTJhZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhraN1AgFbEW0l/WeFFXePOC08aQ5
CgRQ4b79ATQP8jinO9J9GKSIMQcubI/z+SvvZhvxg6Haaivi3i4vhkVUbZPdAn0B
1eZxa2pCIjU/MipmI/ENpY+wcVH+LBQrPRBVpBQLJJC3scIhp0vN4GGXKD+yEzxF
UxPHhSVZ0hcv4V3FnJZEyNmh13GZScDfq6qRBpIef9Mah2nRChJdgppVr3CrAbnF
XHHEa5sfFOCDXp7zMwlI+qVdR7lXF77iCBNKKorgcpVBjiMaKX8rxNRHCIvKQ0rX
QdHqKEjIQbToB9usLFIK4ie0tToK5ni43Qbr3qBWQPNNh4zH3bTydoO4hQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGtQZYV5Akogw4yTENyzegiRkq+FMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvYTFCbGhYa0NTaUREakpNUTNMTjZDSkdTcjRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFBchAAwQD
HxjIAwQAVm0nAwQAVm07AwQAV/ezAwQAWetNMA0GCSqGSIb3DQEBCwUAA4IBAQAh
jQghSjftWIoBfP3Kq6yaZDiJGji4uny7b0TIS++Ky9fzxDaVi1yTZYnvmMXmfsaa
FaoDrxy5UAaAO2rhtNsbo7x8IPK7iLUTx7kvIdyvaL8/8/xyfks/xeUk2NDB6dSd
uKpe3z/trTB/GgWwMRvfj+fmoAbcBfDbdEnXDPa7WwOqLA1Q1Q75G5z00pc4svCA
NAOmAzKcPEww0bTNZhEbkwacT1VmYV9fhadasIvtxzo4A9YluFvJjE2kBkgVlf16
QSr0kBLmZHKv2n4h9tKplyEltLZO7UQsU8/uhd6P/JjQc0vaI9IC1QbLbLOhGoPC
PcHFAriNMim6d+xgVtM/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org