Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5rRkHKhpqNnxpAzcAfkBQMmxfF0.roa
File: 5rRkHKhpqNnxpAzcAfkBQMmxfF0.roa (raw, json)
Hash identifier: aXzvtmyoIea+CT47/GkDsVgkD7SryjgkI2nF3h+Ar+U=
Subject key identifier: E6:B4:64:1C:A8:69:A8:D9:F1:A4:0C:DC:01:F9:01:40:C9:B1:7C:5D
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 068FB445
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5rRkHKhpqNnxpAzcAfkBQMmxfF0.roa
Signing time: Fri 24 Jun 2022 14:54:41 +0000
ROA not before: Fri 24 Jun 2022 14:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 213.170.223.0/24 maxlen: 24
185.111.24.0/23 maxlen: 24
185.100.156.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110081093 (0x68fb445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jun 24 14:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6b4641ca869a8d9f1a40cdc01f90140c9b17c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:48:f4:de:ae:3e:b2:8e:bb:0b:0e:21:fa:
a7:c3:c4:3b:c7:68:6b:f2:fb:e5:cb:da:29:24:4b:
20:6b:58:3f:f1:4a:28:3e:58:8e:d7:db:7e:68:0b:
ae:17:ca:bd:5e:fb:ed:77:32:ff:c5:6c:76:cb:47:
fc:0f:16:98:32:7a:79:1b:48:38:98:6a:a8:06:7c:
fa:d5:f2:51:29:4b:e4:e0:5d:7e:6d:00:94:1c:51:
95:48:0d:d6:2a:32:d4:ea:2a:1e:0f:33:c7:bf:83:
2f:f7:a5:0d:c8:a8:d6:8f:d3:5a:3b:81:03:d2:3e:
69:fe:9a:91:af:27:97:85:82:2e:f8:31:e0:92:6a:
20:56:af:6a:2f:08:7c:54:bb:f7:fa:5c:10:55:74:
73:08:6c:79:df:f8:c0:c0:bd:9c:fb:3b:95:ce:7a:
16:05:3d:29:ed:a6:0f:6c:16:b4:59:3a:b9:36:6d:
86:51:59:17:93:27:d1:b1:46:77:3d:64:d2:7a:e6:
5f:f1:1b:6f:95:c9:89:17:4c:12:51:3b:da:88:ea:
31:3f:e8:98:3c:26:18:cb:e4:bb:9d:0e:6b:f4:58:
de:2e:f9:bf:71:e6:10:a5:8f:59:a8:45:90:c9:25:
6c:b6:70:d0:b5:4c:7b:b2:13:61:e5:5b:2b:fb:07:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B4:64:1C:A8:69:A8:D9:F1:A4:0C:DC:01:F9:01:40:C9:B1:7C:5D
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5rRkHKhpqNnxpAzcAfkBQMmxfF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.156.0/23
185.111.24.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:80:fc:66:ca:56:74:21:b9:f5:01:a0:ae:55:b0:00:c3:b1:
b5:e9:c9:ce:5d:a9:f6:29:a1:e6:9a:cc:73:db:57:11:39:c8:
42:56:1c:93:7b:a4:e8:65:70:51:9c:c1:66:da:a7:d9:db:e6:
72:77:c1:19:83:2a:78:a4:ba:dc:ac:fc:10:f0:f1:6e:1e:37:
74:5f:32:58:d3:7b:7b:8e:17:42:19:13:d0:eb:0c:e8:13:fe:
9f:ed:ae:99:ab:a8:34:58:37:a3:8f:ec:72:a9:97:cf:84:24:
0e:44:c6:48:d3:1b:08:3d:b6:85:cf:5a:b1:72:88:83:d6:3f:
14:18:86:a3:3f:79:21:58:d6:41:fa:f4:37:c1:17:58:38:e0:
e5:8e:7b:8c:ab:6e:f1:31:9d:88:00:86:ef:8f:f2:ee:0e:3d:
80:b9:59:1a:59:f4:09:77:07:53:ba:3c:64:16:c5:56:db:bc:
f8:ea:e0:8b:10:b9:78:36:cf:c1:a0:48:51:36:db:a7:e7:0f:
32:86:3b:0d:e0:01:d9:47:9f:da:4c:3e:ab:7b:7a:2f:bc:23:
41:4b:e0:8a:eb:4a:d9:b4:9a:ac:16:d9:24:4a:6c:f0:1c:39:
65:70:4d:e5:d5:52:35:2d:49:34:84:23:d1:06:77:36:3f:08:
d2:bf:60:0f
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBo+0RTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YWVlMTVjMzNkZTM1ODkzOGQ2OTAwYTFiM2MxNDQ4MGEzODllODViMB4XDTIyMDYy
NDE0NTQ0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTZiNDY0MWNhODY5
YThkOWYxYTQwY2RjMDFmOTAxNDBjOWIxN2M1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJIGSPTerj6yjrsLDiH6p8PEO8doa/L75cvaKSRLIGtYP/FK
KD5YjtfbfmgLrhfKvV777Xcy/8VsdstH/A8WmDJ6eRtIOJhqqAZ8+tXyUSlL5OBd
fm0AlBxRlUgN1ioy1OoqHg8zx7+DL/elDcio1o/TWjuBA9I+af6aka8nl4WCLvgx
4JJqIFavai8IfFS79/pcEFV0cwhsed/4wMC9nPs7lc56FgU9Ke2mD2wWtFk6uTZt
hlFZF5Mn0bFGdz1k0nrmX/Ebb5XJiRdMElE72ojqMT/omDwmGMvku50Oa/RY3i75
v3HmEKWPWahFkMklbLZw0LVMe7ITYeVbK/sHM0sCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTmtGQcqGmo2fGkDNwB+QFAybF8XTAfBgNVHSMEGDAWgBSa7hXDPeNYk41p
AKGzwUSAo4noWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L211NFZ3ejNqV0pPTmFRQ2hzOEZFZ0tPSjZGcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvNzJmNzdmLTc2YWItNGU3OS1hMDYyLTZlZTUzNGQ5MmU1Mi8x
LzVyUmtIS2hwcU5ueHBBemNBZmtCUU1teGZGMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
NzJmNzdmLTc2YWItNGU3OS1hMDYyLTZlZTUzNGQ5MmU1Mi8xL211NFZ3ejNqV0pP
TmFRQ2hzOEZFZ0tPSjZGcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAblknAMEAblvGAMEANWq3zANBgkq
hkiG9w0BAQsFAAOCAQEAnYD8ZspWdCG59QGgrlWwAMOxtenJzl2p9imh5prMc9tX
ETnIQlYck3uk6GVwUZzBZtqn2dvmcnfBGYMqeKS63Kz8EPDxbh43dF8yWNN7e44X
QhkT0OsM6BP+n+2umauoNFg3o4/scqmXz4QkDkTGSNMbCD22hc9asXKIg9Y/FBiG
oz95IVjWQfr0N8EXWDjg5Y57jKtu8TGdiACG74/y7g49gLlZGln0CXcHU7o8ZBbF
Vtu8+OrgixC5eDbPwaBIUTbbp+cPMoY7DeAB2Uef2kw+q3t6L7wjQUvgiutK2bSa
rBbZJEps8Bw5ZXBN5dVSNS1JNIQj0QZ3Nj8I0r9gDw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org