Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/S0Z3BybSd2YxkW-yy6Fjk76Fpwg.roa
File: S0Z3BybSd2YxkW-yy6Fjk76Fpwg.roa (raw, json)
Hash identifier: IJEz9vNaIcx9PMGveFDfdN3xPQZrN+DYXf4buMRMvrE=
Subject key identifier: 4B:46:77:07:26:D2:77:66:31:91:6F:B2:CB:A1:63:93:BE:85:A7:08
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 34BC7BE2
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/S0Z3BybSd2YxkW-yy6Fjk76Fpwg.roa
Signing time: Sat 02 Jul 2022 07:59:16 +0000
ROA not before: Sat 02 Jul 2022 07:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57888
IP address blocks: 5.149.78.0/23 maxlen: 23
217.9.20.0/22 maxlen: 22
5.149.80.0/22 maxlen: 22
5.149.80.0/21 maxlen: 21
5.149.84.0/22 maxlen: 22
5.149.92.0/22 maxlen: 22
85.235.84.0/22 maxlen: 22
194.99.16.0/22 maxlen: 22
194.53.156.0/22 maxlen: 22
5.149.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884767714 (0x34bc7be2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Jul 2 07:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b46770726d2776631916fb2cba16393be85a708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:89:1a:ed:b2:09:0d:77:2d:62:21:1e:43:
33:e3:47:3f:cf:87:27:91:3b:3f:aa:d2:20:29:da:
16:b3:1b:bd:e3:53:0e:64:bb:2f:21:ee:2b:af:ef:
bb:c2:89:97:ed:d9:55:f0:ca:ef:fe:6b:71:82:0b:
46:d3:7c:1a:bb:99:c3:22:db:b9:90:ee:3a:01:24:
e0:af:4d:00:fa:9c:92:c9:fd:eb:00:95:ce:41:fb:
4c:14:ce:2d:ed:f8:03:38:bb:33:cc:15:d6:27:e9:
2d:e0:c6:d0:e8:93:e3:eb:db:95:e8:7c:f8:a0:cd:
fb:c4:ab:a6:bd:30:57:0e:e8:62:b3:4c:f8:31:01:
6b:70:dd:3a:be:6a:e0:26:bd:ef:2d:54:81:3a:eb:
f8:2e:85:37:8c:d0:c8:ba:7d:1f:fd:35:87:c0:78:
27:82:63:75:2d:cd:22:13:5d:3d:d9:34:2c:60:4e:
d5:8c:90:9f:f9:08:29:0e:40:61:57:e7:1a:c7:d9:
44:ef:b6:f0:fa:5d:db:76:96:13:ff:fd:56:bb:22:
94:07:4a:03:72:1d:71:24:e4:5a:34:77:f4:14:a3:
b3:df:1d:d6:a0:23:04:e7:4f:27:a1:2f:c6:e8:b6:
eb:e3:0e:30:1c:ca:d3:fa:e0:e9:dc:4d:b3:cc:42:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:46:77:07:26:D2:77:66:31:91:6F:B2:CB:A1:63:93:BE:85:A7:08
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/S0Z3BybSd2YxkW-yy6Fjk76Fpwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.64.0-5.149.87.255
5.149.92.0/22
85.235.84.0/22
194.53.156.0/22
194.99.16.0/22
217.9.20.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:f8:67:61:66:e0:d2:79:05:4b:46:d4:3e:eb:75:bf:70:85:
fb:be:b0:d8:34:98:81:a2:6c:81:79:71:be:18:6c:24:89:9a:
30:57:af:fc:8f:82:1c:77:97:16:11:b8:c7:11:aa:b0:c5:e6:
c5:8d:72:10:33:82:15:c0:0e:8c:26:97:35:d6:9d:0d:c6:ad:
d2:dc:cc:3d:4e:d5:1f:32:e9:93:68:36:e1:ee:38:5f:9f:79:
ea:b1:a5:73:a6:27:29:f7:e1:31:1d:61:c1:aa:c7:b5:af:0e:
b1:61:67:d5:ed:e9:22:5d:90:a7:76:13:68:fd:36:32:40:ee:
e9:41:0c:c8:80:ad:13:55:24:0a:62:52:7d:b5:8e:9c:59:45:
46:d0:c6:8b:bd:7a:07:0c:4d:77:41:76:ab:5a:d6:b1:b4:5e:
bf:17:72:68:1e:c1:76:d2:2a:8a:0a:f5:27:c4:3f:f6:7c:e1:
2e:be:d5:ef:be:ee:9e:a0:a9:d0:59:12:f8:4c:03:9c:aa:8a:
e4:f3:2e:c2:78:79:6f:37:4e:20:8c:4f:65:14:06:95:ec:6e:
ea:2c:aa:82:0e:29:88:97:cb:06:73:86:42:c8:bc:ae:6c:3f:
bc:42:e6:29:76:95:94:53:62:c0:53:74:7f:f7:85:05:3a:2f:
47:61:b4:e7
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIENLx74jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzU5NDM2ODY5MDg5Y2Q5YzdlNmQwMjAyOGYyNGEyZmU0OWI4NmQ1MB4XDTIyMDcw
MjA3NTkxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGI0Njc3MDcyNmQy
Nzc2NjMxOTE2ZmIyY2JhMTYzOTNiZTg1YTcwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJioiRrtsgkNdy1iIR5DM+NHP8+HJ5E7P6rSICnaFrMbveNT
DmS7LyHuK6/vu8KJl+3ZVfDK7/5rcYILRtN8GruZwyLbuZDuOgEk4K9NAPqcksn9
6wCVzkH7TBTOLe34Azi7M8wV1ifpLeDG0OiT4+vbleh8+KDN+8Srpr0wVw7oYrNM
+DEBa3DdOr5q4Ca97y1UgTrr+C6FN4zQyLp9H/01h8B4J4JjdS3NIhNdPdk0LGBO
1YyQn/kIKQ5AYVfnGsfZRO+28Ppd23aWE//9VrsilAdKA3IdcSTkWjR39BSjs98d
1qAjBOdPJ6Evxui26+MOMBzK0/rg6dxNs8xCufkCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBRLRncHJtJ3ZjGRb7LLoWOTvoWnCDAfBgNVHSMEGDAWgBQXWUNoaQic2cfm
0CAo8kov5JuG1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0YxbERhR2tJbk5uSDV0QWdLUEpLTC1TYmh0VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvNzI0N2QyLTBhMjgtNGU0YS1hYTBjLWZlZjQxZGQ4NzZjMC8x
L1MwWjNCeWJTZDJZeGtXLXl5NkZqazc2RnB3Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
NzI0N2QyLTBhMjgtNGU0YS1hYTBjLWZlZjQxZGQ4NzZjMC8xL0YxbERhR2tJbk5u
SDV0QWdLUEpLTC1TYmh0VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLDAMAwQGBZVAAwQDBZVQAwQCBZVcAwQC
VetUAwQCwjWcAwQCwmMQAwQC2QkUMA0GCSqGSIb3DQEBCwUAA4IBAQDU+GdhZuDS
eQVLRtQ+63W/cIX7vrDYNJiBomyBeXG+GGwkiZowV6/8j4Icd5cWEbjHEaqwxebF
jXIQM4IVwA6MJpc11p0Nxq3S3Mw9TtUfMumTaDbh7jhfn3nqsaVzpicp9+ExHWHB
qse1rw6xYWfV7ekiXZCndhNo/TYyQO7pQQzIgK0TVSQKYlJ9tY6cWUVG0MaLvXoH
DE13QXarWtaxtF6/F3JoHsF20iqKCvUnxD/2fOEuvtXvvu6eoKnQWRL4TAOcqork
8y7CeHlvN04gjE9lFAaV7G7qLKqCDimIl8sGc4ZCyLyubD+8QuYpdpWUU2LAU3R/
94UFOi9HYbTn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:09 2024 by rpki-client on console-ams.rpki-client.org