Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/xuCbQq3KQUbXpUEhRS6daW0Ud80.roa
File: xuCbQq3KQUbXpUEhRS6daW0Ud80.roa (raw, json)
Hash identifier: lQctLyfuIwbraf//xnF6gS1VqqpzjqqPSOMBZSB8c04=
Subject key identifier: C6:E0:9B:42:AD:CA:41:46:D7:A5:41:21:45:2E:9D:69:6D:14:77:CD
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 01A90E
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/xuCbQq3KQUbXpUEhRS6daW0Ud80.roa
Signing time: Tue 11 Jan 2022 09:53:13 +0000
ROA not before: Tue 11 Jan 2022 09:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210658
IP address blocks: 62.204.47.0/24 maxlen: 24
5.181.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108814 (0x1a90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Jan 11 09:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6e09b42adca4146d7a54121452e9d696d1477cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:d5:bc:5e:d3:ae:f5:cc:65:6e:2a:68:3a:
76:b8:53:75:94:37:55:5e:f4:f6:31:e7:71:01:9b:
a3:a7:75:3e:ef:b7:53:6f:e6:c8:a1:b5:5a:9b:1a:
17:51:40:d3:e4:24:41:fb:86:4c:f1:74:e3:1c:df:
54:01:a5:02:2f:0c:a0:83:a8:2a:5a:88:96:0d:d0:
49:24:d2:52:ac:33:e4:06:8b:5e:50:43:94:05:2f:
13:6a:8e:94:72:c7:52:b8:af:b2:bd:ec:1d:dd:5c:
b4:2c:6a:e6:21:7a:54:4f:86:cc:f4:25:83:70:d5:
d5:c3:93:af:1a:89:c6:bd:fb:bf:88:15:e7:95:0a:
f0:69:1a:6f:ef:21:29:73:d5:98:74:6e:96:f6:ad:
a2:e7:de:6e:8b:7a:eb:da:6d:f5:93:63:fe:96:9a:
dd:a7:e3:1a:57:1b:e9:74:d2:ce:ff:c1:f2:b9:6b:
cc:02:37:a4:5d:dc:f1:6c:1c:1e:c7:d2:67:e4:9d:
6e:a5:14:23:e3:aa:96:16:24:74:6d:0b:ee:d2:8c:
f3:68:40:87:43:e7:5b:b8:dd:48:cb:b0:95:91:2d:
b0:3d:d8:d2:70:f6:72:a3:fe:bd:6a:bf:1f:37:4a:
89:79:c4:9a:ce:ea:c4:0f:ce:19:68:8c:5c:9f:31:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:9B:42:AD:CA:41:46:D7:A5:41:21:45:2E:9D:69:6D:14:77:CD
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/xuCbQq3KQUbXpUEhRS6daW0Ud80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.16.0/24
62.204.47.0/24
Signature Algorithm: sha256WithRSAEncryption
78:07:f0:63:64:91:07:57:95:16:6d:3d:d3:f4:ed:46:ef:35:
c0:c7:1e:66:7d:30:99:70:55:ec:9a:33:a7:dd:a5:bc:1e:6e:
98:0d:20:0d:f4:08:88:bb:c9:7f:8b:bf:3f:8b:e4:44:fa:4e:
0b:e8:7b:97:8c:78:4f:01:49:fa:a5:7e:b1:ad:9f:26:bd:02:
3a:3a:ca:c9:94:ff:1c:10:b3:52:05:35:17:7f:2c:fd:67:d5:
aa:64:a1:b8:4d:26:d0:39:22:05:cc:5f:17:75:b0:22:df:48:
71:16:7e:fd:39:5a:61:a3:1d:31:5d:b0:07:ee:f5:2d:41:54:
8c:2f:70:56:aa:b1:84:90:f6:81:21:3a:0a:21:79:29:cc:e9:
d8:58:71:9e:27:76:d1:0c:79:ab:81:b8:90:99:a2:c7:de:7e:
8c:62:38:fd:71:a4:4f:bd:90:96:3a:e0:a6:60:36:2e:b5:01:
5b:21:18:42:0f:08:1f:31:d1:a2:22:44:06:b5:dc:7e:c4:43:
c2:a9:ea:b2:04:91:af:ca:44:ad:87:1a:d8:a7:1e:11:e2:a7:
3c:be:dc:51:36:e1:12:fe:1e:27:df:18:fd:02:31:c3:44:75:
6a:6a:4b:5b:39:07:1a:15:7c:e1:b1:fe:4a:17:9b:29:2e:5e:
54:a6:87:db
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDAakOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
MGU2NjkyZDk3MjhkYTgxZjVjNGY0OWUxNTA3NzNlMWFmYmM4MGIwHhcNMjIwMTEx
MDk1MzEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNmUwOWI0MmFkY2E0
MTQ2ZDdhNTQxMjE0NTJlOWQ2OTZkMTQ3N2NkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlW7VvF7TrvXMZW4qaDp2uFN1lDdVXvT2MedxAZujp3U+77dT
b+bIobVamxoXUUDT5CRB+4ZM8XTjHN9UAaUCLwygg6gqWoiWDdBJJNJSrDPkBote
UEOUBS8Tao6UcsdSuK+yvewd3Vy0LGrmIXpUT4bM9CWDcNXVw5OvGonGvfu/iBXn
lQrwaRpv7yEpc9WYdG6W9q2i595ui3rr2m31k2P+lprdp+MaVxvpdNLO/8HyuWvM
AjekXdzxbBwex9Jn5J1upRQj46qWFiR0bQvu0ozzaECHQ+dbuN1Iy7CVkS2wPdjS
cPZyo/69ar8fN0qJecSazurED84ZaIxcnzGaQwIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFMbgm0KtykFG16VBIUUunWltFHfNMB8GA1UdIwQYMBaAFOUOZpLZco2oH1xP
SeFQdz4a+8gLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgtMDM5YzE0MDVlMTc1LzEv
eHVDYlFxM0tRVWJYcFVFaFJTNmRhVzBVZDgwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9m
MmVkNTAtNGM5YS00MzQ0LTkxNDgtMDM5YzE0MDVlMTc1LzEvNVE1bWt0bHlqYWdm
WEU5SjRWQjNQaHI3eUFzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbUQAwQAPswvMA0GCSqGSIb3DQEB
CwUAA4IBAQB4B/BjZJEHV5UWbT3T9O1G7zXAxx5mfTCZcFXsmjOn3aW8Hm6YDSAN
9AiIu8l/i78/i+RE+k4L6HuXjHhPAUn6pX6xrZ8mvQI6OsrJlP8cELNSBTUXfyz9
Z9WqZKG4TSbQOSIFzF8XdbAi30hxFn79OVphox0xXbAH7vUtQVSML3BWqrGEkPaB
IToKIXkpzOnYWHGeJ3bRDHmrgbiQmaLH3n6MYjj9caRPvZCWOuCmYDYutQFbIRhC
DwgfMdGiIkQGtdx+xEPCqeqyBJGvykSthxrYpx4R4qc8vtxRNuES/h4n3xj9AjHD
RHVqaktbOQcaFXzhsf5KF5spLl5Upofb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:06 2023 by rpki-client on console-fra.rpki-client.org