Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CLciMdaBdSk7eHUbCw2Oy371qGw.roa
File: CLciMdaBdSk7eHUbCw2Oy371qGw.roa (raw, json)
Hash identifier: VT1xs457kYnB86OBA+zP/TwNE21bjhG58TV5yum+Ko8=
Subject key identifier: 08:B7:22:31:D6:81:75:29:3B:78:75:1B:0B:0D:8E:CB:7E:F5:A8:6C
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16DE15F5
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CLciMdaBdSk7eHUbCw2Oy371qGw.roa
Signing time: Sat 01 Jan 2022 12:01:36 +0000
ROA not before: Sat 01 Jan 2022 12:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61400
IP address blocks: 141.101.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383653365 (0x16de15f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08b72231d68175293b78751b0b0d8ecb7ef5a86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:b8:40:8c:3a:fe:c9:1f:68:a8:05:1d:c8:
bb:8e:57:5f:c8:31:67:fc:5b:cd:35:16:cc:2c:f4:
42:b9:01:9c:ec:0e:1f:4d:9c:36:00:84:11:25:52:
57:fe:b0:f3:da:04:3a:9e:65:ec:49:ab:40:01:6d:
bf:89:0f:53:6e:4b:08:d5:e1:33:78:69:a6:c6:1c:
04:04:a7:51:ca:3a:a0:37:39:bc:22:4c:5c:4e:de:
4e:8c:4a:4e:d5:78:92:96:ea:32:2b:0b:a1:4e:38:
5a:4b:39:d3:0c:37:29:1c:86:41:e7:44:c1:c6:e5:
e9:6e:5c:c0:d7:a7:2f:14:6a:68:34:3a:9a:18:16:
cd:d5:af:14:07:09:83:15:f9:88:46:ba:d9:03:89:
4c:d6:53:1f:6b:85:e5:01:21:ca:63:35:62:0b:d9:
6e:bc:d6:3c:13:e2:06:0d:50:9c:7c:bb:81:7a:a5:
1e:da:9d:ae:ae:86:d5:6a:1b:b8:6f:5c:02:2a:c9:
e6:a1:81:55:3c:d1:e9:88:4e:d0:09:92:73:c3:b9:
03:74:5c:89:b8:ef:73:5a:90:b3:08:e0:63:f8:f6:
b6:ec:d6:28:66:d6:4c:62:8e:db:f9:90:c1:09:12:
52:cb:8d:b5:3b:f5:a3:04:13:62:cf:5b:e3:9f:f2:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:22:31:D6:81:75:29:3B:78:75:1B:0B:0D:8E:CB:7E:F5:A8:6C
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CLciMdaBdSk7eHUbCw2Oy371qGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.255.0/24
Signature Algorithm: sha256WithRSAEncryption
07:24:bb:5f:be:b8:69:45:bf:11:a9:9f:f9:d5:fc:5c:f4:ba:
6c:0c:6e:76:20:6b:9e:d0:88:25:50:27:16:59:0c:10:d0:42:
7b:06:39:b5:a9:c1:70:e6:a2:d4:f2:2a:f9:9a:93:a6:9b:8d:
6d:be:f5:b2:31:e3:40:98:47:ac:b2:03:b5:69:a9:ca:ce:e2:
98:bb:28:82:08:0b:ca:cf:ce:63:57:9d:94:d3:68:69:a9:b9:
97:d1:e6:73:8b:c3:98:9f:51:ea:22:de:45:9c:16:a8:e9:94:
3c:86:c1:81:ba:47:da:db:84:34:24:ff:c8:3a:ca:7d:5e:3b:
64:06:75:fc:e1:e2:6b:2d:cf:c3:75:09:ec:34:a0:c7:53:ab:
14:e4:06:f2:30:30:2b:22:8b:51:9b:7f:e7:55:ea:55:2a:0e:
1d:f8:ff:ba:55:63:a0:3e:83:9c:0e:b2:0f:38:d5:b9:7a:c6:
eb:25:a6:2b:25:a8:4d:47:c4:4c:c0:a5:09:32:a8:d6:72:44:
28:6a:b6:58:cc:c2:89:90:d5:cb:60:ec:91:7a:60:56:a8:1b:
3d:90:da:88:53:8f:9b:95:42:40:da:58:65:c0:2f:fb:8c:14:
b1:6c:da:71:c4:c9:b3:48:e4:88:8f:44:b9:31:a1:c7:56:c1:
a4:98:c9:09
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFt4V9TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDEw
MTEyMDEzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhiNzIyMzFkNjgx
NzUyOTNiNzg3NTFiMGIwZDhlY2I3ZWY1YTg2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMl4uECMOv7JH2ioBR3Iu45XX8gxZ/xbzTUWzCz0QrkBnOwO
H02cNgCEESVSV/6w89oEOp5l7EmrQAFtv4kPU25LCNXhM3hppsYcBASnUco6oDc5
vCJMXE7eToxKTtV4kpbqMisLoU44Wks50ww3KRyGQedEwcbl6W5cwNenLxRqaDQ6
mhgWzdWvFAcJgxX5iEa62QOJTNZTH2uF5QEhymM1YgvZbrzWPBPiBg1QnHy7gXql
Htqdrq6G1WobuG9cAirJ5qGBVTzR6YhO0AmSc8O5A3Rcibjvc1qQswjgY/j2tuzW
KGbWTGKO2/mQwQkSUsuNtTv1owQTYs9b45/yKjUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQItyIx1oF1KTt4dRsLDY7LfvWobDAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L0NMY2lNZGFCZFNrN2VIVWJDdzJPeTM3MXFHdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI1l/zANBgkqhkiG9w0BAQsFAAOC
AQEAByS7X764aUW/Eamf+dX8XPS6bAxudiBrntCIJVAnFlkMENBCewY5tanBcOai
1PIq+ZqTppuNbb71sjHjQJhHrLIDtWmpys7imLsogggLys/OY1edlNNoaam5l9Hm
c4vDmJ9R6iLeRZwWqOmUPIbBgbpH2tuENCT/yDrKfV47ZAZ1/OHiay3Pw3UJ7DSg
x1OrFOQG8jAwKyKLUZt/51XqVSoOHfj/ulVjoD6DnA6yDzjVuXrG6yWmKyWoTUfE
TMClCTKo1nJEKGq2WMzCiZDVy2DskXpgVqgbPZDaiFOPm5VCQNpYZcAv+4wUsWza
ccTJs0jkiI9EuTGhx1bBpJjJCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org