Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4FDA_q-GuMP357wnQxd25afOHIY.roa
File: 4FDA_q-GuMP357wnQxd25afOHIY.roa (raw, json)
Hash identifier: WETP9bi7w0V9z6STQJ4xlKxE6hv4qCL0jUexK+M5vrw=
Subject key identifier: E0:50:C0:FE:AF:86:B8:C3:F7:E7:BC:27:43:17:76:E5:A7:CE:1C:86
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A896E4B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4FDA_q-GuMP357wnQxd25afOHIY.roa
Signing time: Sat 01 Jan 2022 04:52:08 +0000
ROA not before: Sat 01 Jan 2022 04:52:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201519
IP address blocks: 81.15.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982085195 (0x3a896e4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e050c0feaf86b8c3f7e7bc27431776e5a7ce1c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:75:46:fb:77:6e:ab:af:b7:a0:63:08:5a:
25:03:f4:34:aa:7d:6b:61:d9:e5:63:d7:36:11:6a:
99:a2:d9:8c:b5:5a:ba:62:eb:2c:68:3a:f1:74:d8:
14:f4:33:38:21:da:b5:11:3d:e3:fd:7f:35:5e:80:
a3:b3:d7:06:6b:2c:e1:91:35:bb:68:1a:22:ce:63:
b1:0e:c0:7e:62:37:15:15:94:4b:14:c9:9a:20:7f:
38:5d:f4:da:18:62:2f:e0:76:11:43:30:d0:10:9f:
cb:d9:2f:a6:51:58:fd:2f:7a:9d:50:58:18:dd:21:
e7:c3:1c:22:db:df:fc:84:f6:a0:2b:d2:69:93:75:
a9:4e:81:19:2a:62:1b:4b:dd:6e:f8:ce:bd:cd:b2:
61:b7:60:f7:a3:31:48:c3:40:02:3f:e0:89:27:e2:
a0:18:e0:96:25:da:2d:ed:3a:1f:26:cd:a5:3b:b9:
50:1b:e3:63:6e:55:1a:80:02:e0:51:bc:60:be:d6:
07:6c:e1:75:92:fd:08:be:8d:3e:ca:e5:b2:04:57:
8d:95:6c:2e:56:03:9e:ff:ef:36:f0:5d:d0:8f:0a:
ef:da:a5:7c:d0:3d:57:1c:9d:12:49:1f:7b:8e:0d:
36:c2:71:2b:43:0e:13:fe:50:69:63:44:d1:7d:69:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:C0:FE:AF:86:B8:C3:F7:E7:BC:27:43:17:76:E5:A7:CE:1C:86
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4FDA_q-GuMP357wnQxd25afOHIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.144.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e3:bf:ec:41:ae:74:09:17:bb:c5:d0:49:ac:7d:99:45:a3:
2e:a2:8b:14:a6:ff:3d:c8:b3:d6:33:8a:e5:bb:eb:89:93:78:
b6:8a:bf:d9:b8:0a:bd:d1:a7:22:d6:82:bc:ae:28:a5:76:e9:
cf:d8:eb:fc:48:c9:a9:28:31:54:fa:f8:8e:f2:5b:ea:75:d6:
1c:41:b8:29:3e:f6:5b:9b:9a:d4:20:ce:58:86:ad:47:be:bf:
8f:04:32:0a:a3:00:d9:69:cb:a8:1e:a8:a1:8c:9e:63:1d:94:
0e:d2:31:a6:bf:a6:90:30:fa:47:92:cd:32:26:b6:96:69:2c:
60:e3:6b:43:a1:77:5f:88:53:1c:e7:61:23:88:3a:84:37:4c:
e9:ed:96:ad:01:45:a0:5b:9c:10:b3:61:20:cc:21:5e:d7:0b:
b2:55:90:32:6f:fe:87:96:83:60:1a:d1:86:58:32:f0:e9:2e:
8e:f4:bc:c9:e9:51:be:4d:83:c5:4b:ff:eb:30:55:cd:78:d2:
b0:2d:74:19:53:d7:dd:91:43:15:e5:6f:3d:87:89:68:82:e0:
bd:a7:03:e7:7f:c7:86:d2:ec:36:0f:bf:81:9c:1b:f6:13:6c:
24:a3:4c:33:c4:4a:56:1a:41:63:d8:7d:18:87:d2:2f:87:0f:
1c:4b:9d:50
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOoluSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDY4MzRlNjg4OTBmMzk4NmExYjA0NTdjZTBmNTRhZTAzYzJkNzZiMB4XDTIyMDEw
MTA0NTIwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTA1MGMwZmVhZjg2
YjhjM2Y3ZTdiYzI3NDMxNzc2ZTVhN2NlMWM4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI/ydUb7d26rr7egYwhaJQP0NKp9a2HZ5WPXNhFqmaLZjLVa
umLrLGg68XTYFPQzOCHatRE94/1/NV6Ao7PXBmss4ZE1u2gaIs5jsQ7AfmI3FRWU
SxTJmiB/OF302hhiL+B2EUMw0BCfy9kvplFY/S96nVBYGN0h58McItvf/IT2oCvS
aZN1qU6BGSpiG0vdbvjOvc2yYbdg96MxSMNAAj/giSfioBjgliXaLe06HybNpTu5
UBvjY25VGoAC4FG8YL7WB2zhdZL9CL6NPsrlsgRXjZVsLlYDnv/vNvBd0I8K79ql
fNA9VxydEkkfe44NNsJxK0MOE/5QaWNE0X1pUFcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTgUMD+r4a4w/fnvCdDF3blp84chjAfBgNVHSMEGDAWgBRUaDTmiJDzmGob
BFfOD1SuA8LXazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZHZzA1b2lRODVocUd3Ulh6ZzlVcmdQQzEycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8x
LzRGREFfcS1HdU1QMzU3d25ReGQyNWFmT0hJWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8xL1ZHZzA1b2lRODVo
cUd3Ulh6ZzlVcmdQQzEycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEPkDANBgkqhkiG9w0BAQsFAAOC
AQEASeO/7EGudAkXu8XQSax9mUWjLqKLFKb/Pciz1jOK5bvriZN4toq/2bgKvdGn
ItaCvK4opXbpz9jr/EjJqSgxVPr4jvJb6nXWHEG4KT72W5ua1CDOWIatR76/jwQy
CqMA2WnLqB6ooYyeYx2UDtIxpr+mkDD6R5LNMia2lmksYONrQ6F3X4hTHOdhI4g6
hDdM6e2WrQFFoFucELNhIMwhXtcLslWQMm/+h5aDYBrRhlgy8OkujvS8yelRvk2D
xUv/6zBVzXjSsC10GVPX3ZFDFeVvPYeJaILgvacD53/HhtLsNg+/gZwb9hNsJKNM
M8RKVhpBY9h9GIfSL4cPHEudUA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org