Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/HhItIoZRkbqf2n1ud2FDn-hM0YM.roa
File: HhItIoZRkbqf2n1ud2FDn-hM0YM.roa (raw, json)
Hash identifier: WWSyaFh5LPN5+3BUZ9J2nF5mqKClD8Uy3Bkk3fCZlO4=
Subject key identifier: 1E:12:2D:22:86:51:91:BA:9F:DA:7D:6E:77:61:43:9F:E8:4C:D1:83
Certificate issuer: /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial: 0B3FD439
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/HhItIoZRkbqf2n1ud2FDn-hM0YM.roa
Signing time: Sat 01 Jan 2022 13:03:53 +0000
ROA not before: Sat 01 Jan 2022 13:03:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60118
IP address blocks: 5.254.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188732473 (0xb3fd439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Validity
Not Before: Jan 1 13:03:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e122d22865191ba9fda7d6e7761439fe84cd183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:1e:6a:de:db:b5:38:35:af:da:98:c8:94:
20:43:98:95:4f:15:2d:cc:60:ee:35:74:9f:ec:6c:
29:e3:81:b2:6d:29:ac:a6:5c:2c:bc:09:96:31:96:
62:6a:a2:38:fc:37:6e:a3:56:c6:45:0c:9a:c0:dd:
ba:67:bf:4a:c7:a6:93:df:78:6f:4e:a6:fe:05:c2:
bc:89:db:5b:cd:d3:35:8d:42:e0:30:0d:9c:7e:0e:
f8:cf:f7:0f:6d:ec:b8:67:81:21:56:2f:b1:37:4e:
7c:44:5c:1a:e1:39:ee:80:88:ba:59:a7:2d:67:c3:
67:10:dd:d0:81:dc:a0:83:b0:3f:f3:34:10:52:e8:
47:7b:03:2d:fa:c9:4e:58:06:7d:26:34:02:ee:35:
52:b6:f0:d8:8f:79:6d:cc:cd:ba:a4:88:04:11:3f:
54:81:18:0c:c1:31:85:cc:a4:01:e9:70:7b:5f:5e:
d5:c7:ab:81:9e:34:42:04:10:f4:b3:5e:70:49:ea:
53:0f:ab:17:70:dd:83:9b:a1:7c:3f:16:31:0d:07:
ad:44:43:d7:20:d8:6c:06:af:85:95:80:29:1d:e8:
94:da:c0:a9:d9:81:2a:bd:e9:8e:88:9b:d6:c2:87:
85:1a:7e:66:d0:37:77:1f:1d:52:08:31:b5:7e:fa:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:2D:22:86:51:91:BA:9F:DA:7D:6E:77:61:43:9F:E8:4C:D1:83
X509v3 Authority Key Identifier:
keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/HhItIoZRkbqf2n1ud2FDn-hM0YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:06:fe:d5:e3:ed:cf:40:15:34:e7:e7:05:43:48:b2:03:af:
07:10:1d:e7:9e:3e:d9:c7:4e:8d:98:23:25:ea:e0:94:01:e9:
eb:17:c0:79:ff:65:de:f2:57:7b:86:1a:c8:ee:5b:1f:a9:2c:
39:3f:11:86:bd:54:86:73:e8:a5:d5:50:87:36:8e:bf:ca:47:
61:78:d5:58:8d:a3:21:af:85:22:04:7e:ea:02:4b:21:9a:bc:
a8:49:80:27:11:73:98:93:c5:9d:b5:af:ab:40:10:ae:60:fe:
08:dc:00:96:3b:2c:73:26:e0:13:fa:53:47:f1:06:4e:b0:6e:
52:e5:d9:1c:11:9b:4e:11:66:59:6b:c0:9c:98:32:d5:07:7c:
f0:70:10:ce:21:48:41:fb:0c:b7:3e:60:06:28:cf:63:79:b6:
63:64:9e:34:a2:4b:7a:72:63:10:f8:3d:da:a9:ef:00:0a:f1:
ee:11:00:26:d5:80:46:81:a1:6e:34:c3:a3:72:2d:9d:4d:a7:
4a:c1:ee:59:e6:37:df:d9:2e:34:0c:dc:f2:26:a3:10:f2:61:
26:df:08:a8:98:fb:0c:08:38:2b:4b:64:b2:d9:fb:ed:44:cc:
68:74:1f:90:c2:fa:b0:91:2b:60:f4:c3:fa:fd:c0:c5:c6:41:
c8:c0:2c:29
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECz/UOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
OTdiNDRjNGE3OTMxYzY2YTZmZjllOTJkYmIzMmNhNzIzZDRjY2Y3MB4XDTIyMDEw
MTEzMDM1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWUxMjJkMjI4NjUx
OTFiYTlmZGE3ZDZlNzc2MTQzOWZlODRjZDE4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMkZHmre27U4Na/amMiUIEOYlU8VLcxg7jV0n+xsKeOBsm0p
rKZcLLwJljGWYmqiOPw3bqNWxkUMmsDdume/Ssemk994b06m/gXCvInbW83TNY1C
4DANnH4O+M/3D23suGeBIVYvsTdOfERcGuE57oCIulmnLWfDZxDd0IHcoIOwP/M0
EFLoR3sDLfrJTlgGfSY0Au41Urbw2I95bczNuqSIBBE/VIEYDMExhcykAelwe19e
1cergZ40QgQQ9LNecEnqUw+rF3Ddg5uhfD8WMQ0HrURD1yDYbAavhZWAKR3olNrA
qdmBKr3pjoib1sKHhRp+ZtA3dx8dUggxtX76lqUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQeEi0ihlGRup/afW53YUOf6EzRgzAfBgNVHSMEGDAWgBRZe0TEp5McZqb/
npLbsyynI9TM9zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dYdEV4S2VUSEdhbV81NlMyN01zcHlQVXpQYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvOTVmZjhmLTY2YmMtNGIxMS05OGYwLTBhYjIxYjJmMjc1NC8x
L0hoSXRJb1pSa2JxZjJuMXVkMkZEbi1oTTBZTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
OTVmZjhmLTY2YmMtNGIxMS05OGYwLTBhYjIxYjJmMjc1NC8xL1dYdEV4S2VUSEdh
bV81NlMyN01zcHlQVXpQYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAX+fTANBgkqhkiG9w0BAQsFAAOC
AQEAsQb+1ePtz0AVNOfnBUNIsgOvBxAd554+2cdOjZgjJerglAHp6xfAef9l3vJX
e4YayO5bH6ksOT8Rhr1UhnPopdVQhzaOv8pHYXjVWI2jIa+FIgR+6gJLIZq8qEmA
JxFzmJPFnbWvq0AQrmD+CNwAljsscybgE/pTR/EGTrBuUuXZHBGbThFmWWvAnJgy
1Qd88HAQziFIQfsMtz5gBijPY3m2Y2SeNKJLenJjEPg92qnvAArx7hEAJtWARoGh
bjTDo3ItnU2nSsHuWeY339kuNAzc8iajEPJhJt8IqJj7DAg4K0tkstn77UTMaHQf
kML6sJErYPTD+v3AxcZByMAsKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:30 2024 by rpki-client on console-fra.rpki-client.org