Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/5R_uZfqyVksgW_ymqzZjskGcxmo.roa
File: 5R_uZfqyVksgW_ymqzZjskGcxmo.roa (raw, json)
Hash identifier: f5ehB0UNggPQjY4pK321CzkJeYq1toJVkDoeVfVMe0A=
Subject key identifier: E5:1F:EE:65:FA:B2:56:4B:20:5B:FC:A6:AB:36:63:B2:41:9C:C6:6A
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 04513510
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/5R_uZfqyVksgW_ymqzZjskGcxmo.roa
Signing time: Sat 01 Jan 2022 10:57:03 +0000
ROA not before: Sat 01 Jan 2022 10:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42068
IP address blocks: 195.242.150.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72430864 (0x4513510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jan 1 10:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e51fee65fab2564b205bfca6ab3663b2419cc66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:c0:87:59:c5:e5:d7:63:c2:62:e5:57:e0:
9d:54:7b:63:e6:62:5b:ca:a5:c3:9f:3a:9b:ff:6a:
af:1d:7a:ea:76:bc:a9:e8:3d:cf:bf:ed:dc:0f:95:
ef:d8:c0:ed:0f:45:4c:2a:b0:8e:1a:fc:72:6e:2e:
ef:c2:87:81:bb:c2:6b:57:fb:19:3d:39:dd:bf:15:
f4:d1:b0:11:89:24:be:55:b1:36:f6:b9:cb:51:00:
0c:aa:99:0b:95:24:32:d0:f8:07:00:d4:2f:5a:37:
26:64:a1:39:02:a5:fa:33:c5:44:bf:65:cf:7f:46:
ff:6a:40:d6:63:75:07:6f:71:a2:51:39:6d:b6:33:
19:32:e2:8b:18:7c:94:c7:eb:98:cf:01:9e:5c:69:
fb:81:5d:39:96:e0:00:f3:a7:6a:44:af:e0:58:85:
f7:c9:2f:0e:71:fb:87:27:f3:a2:ce:af:ee:75:cb:
3a:72:d1:a7:4a:c9:cc:c0:d0:e1:6a:65:b5:b8:97:
2d:79:0e:51:25:b5:b0:bc:c4:eb:af:7e:fb:18:8c:
c9:e4:1e:b1:0e:3d:90:81:8a:7c:fe:24:7c:49:5c:
a6:63:09:7b:d7:a5:a1:db:15:10:57:29:d7:7c:29:
1f:20:59:a9:f0:0d:ec:71:a2:01:d9:71:4f:bc:16:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1F:EE:65:FA:B2:56:4B:20:5B:FC:A6:AB:36:63:B2:41:9C:C6:6A
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/5R_uZfqyVksgW_ymqzZjskGcxmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.150.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:55:82:86:54:91:d6:09:02:0c:37:d2:bc:42:fe:1a:f8:94:
42:56:26:b1:c0:90:44:c7:fb:62:3a:cb:37:56:b9:c6:6b:d6:
d3:18:f3:72:16:d6:0d:f4:8b:36:56:93:d2:8f:82:4f:ea:31:
58:69:2b:84:fa:9e:2a:39:b5:6c:b0:01:0f:1e:d2:b7:15:b1:
5a:62:38:7e:33:35:5b:86:1f:6d:b5:73:38:1d:d4:8e:41:ae:
05:03:a2:fa:3a:09:ab:72:9e:14:c6:7b:20:3c:74:d0:59:b6:
b2:74:14:07:c1:3a:ee:e3:d0:07:c0:3f:3d:db:91:0a:05:da:
ac:43:d3:30:e1:62:3a:84:cb:6a:e7:0a:24:ea:7c:f8:02:a2:
fd:10:1e:6e:8f:26:ee:25:3f:bb:00:90:36:89:44:e1:7c:9b:
b6:df:b2:48:27:5d:64:6e:1f:62:1c:69:ea:30:d8:f1:50:28:
d3:b5:f0:44:32:d8:00:4d:6d:2a:0f:09:ab:7d:9d:1f:31:8d:
c8:90:cb:b3:4c:ba:70:9e:d8:88:0d:f9:cb:c2:e8:68:cd:35:
e7:b4:b3:a6:a0:ac:1f:b8:9e:49:a9:5d:fa:a1:0c:68:a3:8e:
03:c9:8d:21:db:f1:01:c7:93:2a:07:cc:67:7d:1f:dd:d3:bd:
56:34:16:f9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBFE1EDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
N2MwYWEyZTllODIwMGVlZTY3MDI2OTQyYTJjNTI0ODgwMmYzM2I4MB4XDTIyMDEw
MTEwNTcwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTUxZmVlNjVmYWIy
NTY0YjIwNWJmY2E2YWIzNjYzYjI0MTljYzY2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANltwIdZxeXXY8Ji5VfgnVR7Y+ZiW8qlw586m/9qrx166na8
qeg9z7/t3A+V79jA7Q9FTCqwjhr8cm4u78KHgbvCa1f7GT053b8V9NGwEYkkvlWx
Nva5y1EADKqZC5UkMtD4BwDUL1o3JmShOQKl+jPFRL9lz39G/2pA1mN1B29xolE5
bbYzGTLiixh8lMfrmM8Bnlxp+4FdOZbgAPOnakSv4FiF98kvDnH7hyfzos6v7nXL
OnLRp0rJzMDQ4WpltbiXLXkOUSW1sLzE669++xiMyeQesQ49kIGKfP4kfElcpmMJ
e9elodsVEFcp13wpHyBZqfAN7HGiAdlxT7wW1TcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTlH+5l+rJWSyBb/KarNmOyQZzGajAfBgNVHSMEGDAWgBRHwKounoIA7uZw
JpQqLFJIgC8zuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1I4Q3FMcDZDQU83bWNDYVVLaXhTU0lBdk03Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvODQ2YWUyLTdkZGYtNDMzMi1hMzYzLWM2OTI3ODIwNjRiMC8x
LzVSX3VaZnF5VmtzZ1dfeW1xelpqc2tHY3htby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
ODQ2YWUyLTdkZGYtNDMzMi1hMzYzLWM2OTI3ODIwNjRiMC8xL1I4Q3FMcDZDQU83
bWNDYVVLaXhTU0lBdk03Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcPyljANBgkqhkiG9w0BAQsFAAOC
AQEAv1WChlSR1gkCDDfSvEL+GviUQlYmscCQRMf7YjrLN1a5xmvW0xjzchbWDfSL
NlaT0o+CT+oxWGkrhPqeKjm1bLABDx7StxWxWmI4fjM1W4YfbbVzOB3UjkGuBQOi
+joJq3KeFMZ7IDx00Fm2snQUB8E67uPQB8A/PduRCgXarEPTMOFiOoTLaucKJOp8
+AKi/RAebo8m7iU/uwCQNolE4Xybtt+ySCddZG4fYhxp6jDY8VAo07XwRDLYAE1t
Kg8Jq32dHzGNyJDLs0y6cJ7YiA35y8LoaM0157SzpqCsH7ieSald+qEMaKOOA8mN
IdvxAceTKgfMZ30f3dO9VjQW+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:18 2024 by rpki-client on console-ams.rpki-client.org