Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/n0ehF7jv0QgYuk0cVkIUlfi_3jg.roa
File: n0ehF7jv0QgYuk0cVkIUlfi_3jg.roa (raw, json)
Hash identifier: j2vj9SJq6eC6nqGe0z3GITm5EXp6V8NwHtGRiutPk/k=
Subject key identifier: 9F:47:A1:17:B8:EF:D1:08:18:BA:4D:1C:56:42:14:95:F8:BF:DE:38
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 17396F73
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/n0ehF7jv0QgYuk0cVkIUlfi_3jg.roa
Signing time: Sat 01 Jan 2022 14:04:39 +0000
ROA not before: Sat 01 Jan 2022 14:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199554
IP address blocks: 185.164.152.0/22 maxlen: 22
185.164.152.0/24 maxlen: 24
5.57.200.0/21 maxlen: 21
5.57.200.0/24 maxlen: 24
2a01:4540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389640051 (0x17396f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Jan 1 14:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f47a117b8efd10818ba4d1c56421495f8bfde38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:cc:b6:6a:60:11:d4:21:7c:85:e0:30:2e:
9b:ef:77:dd:be:44:3b:90:42:8a:cf:6a:5f:01:a3:
d4:f7:00:05:4d:63:2d:51:b4:4a:b1:72:cc:e8:ea:
3e:2b:36:25:00:a8:47:a0:23:8e:d2:32:24:56:a4:
89:a0:f0:51:95:ab:3e:4d:c9:ce:15:13:0d:df:76:
bb:0e:e9:74:a8:75:38:e7:1a:92:af:65:01:de:53:
3f:da:f9:2a:b6:1e:0a:52:34:3f:c3:fe:22:0c:3f:
71:0d:09:5e:22:ed:eb:af:d5:0a:de:e6:17:89:62:
f4:7c:2a:bd:45:af:3e:80:9d:11:8d:b9:bf:45:1b:
aa:db:3d:07:84:00:b4:16:b7:4d:cb:82:6b:9c:f0:
93:e4:11:5a:4d:5f:8c:dd:0a:ad:ce:c9:02:9c:be:
16:bb:18:dd:e7:0f:7f:09:47:65:3b:51:13:e6:f8:
7a:97:1a:36:fc:fe:d5:5c:81:91:c3:ba:01:94:fa:
d8:a8:45:a1:3f:5f:8f:0d:6f:f2:f6:66:09:58:83:
09:0f:7a:35:c5:c8:d9:1f:fb:84:7a:83:b5:11:74:
fa:40:1e:d7:e3:5c:36:6d:b6:cc:c3:74:45:e2:ba:
67:0c:02:a4:fd:a1:9f:bd:bc:41:a5:52:d9:4c:dc:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:A1:17:B8:EF:D1:08:18:BA:4D:1C:56:42:14:95:F8:BF:DE:38
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/n0ehF7jv0QgYuk0cVkIUlfi_3jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.200.0/21
185.164.152.0/22
IPv6:
2a01:4540::/29
Signature Algorithm: sha256WithRSAEncryption
a1:03:9a:ce:18:6c:84:ab:41:3c:b2:f8:10:6a:f8:00:33:8f:
e5:f9:86:e1:3b:63:b3:1f:39:bb:ab:e1:83:e9:9c:8b:00:76:
5d:87:79:9e:77:af:c6:76:b4:31:d1:da:63:ff:a7:3e:50:21:
f5:4c:45:2f:b3:95:be:d4:34:de:fa:16:da:1c:52:17:9c:2d:
10:24:91:3d:2d:aa:cd:59:31:04:3a:60:c5:72:1a:70:5f:28:
87:b4:8f:39:83:96:e0:6c:e9:a4:3b:5d:e4:9c:89:12:df:c7:
e1:2c:ac:76:12:b8:66:fa:82:5a:bb:4c:bd:05:27:6d:ab:03:
43:e2:85:d4:c3:e6:d6:cb:4e:21:e6:a2:e4:f3:45:7c:c0:26:
5c:e0:a5:0c:10:99:79:87:4d:59:b7:1b:15:b7:85:85:02:10:
88:16:18:82:98:24:55:9d:54:2f:40:2d:55:f4:9c:a8:cc:dd:
23:3b:39:8c:9e:6a:5e:3f:fb:8e:e5:d2:cb:b8:ad:ce:be:22:
51:23:42:2c:71:fb:c0:2e:79:79:fd:c6:b5:92:6c:03:b8:53:
99:e0:4b:2f:b3:4b:72:81:81:b7:e7:a6:a0:81:90:4e:4e:28:
26:64:39:5f:cf:99:f0:70:0a:ec:56:2a:5d:dd:63:b4:e1:d2:
cd:3a:ca:98
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEFzlvczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NzhkODU0YmQyYmVlMjQyYTgyZmI4MzkyMmQxNDliY2NmMTllZDAyMB4XDTIyMDEw
MTE0MDQzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWY0N2ExMTdiOGVm
ZDEwODE4YmE0ZDFjNTY0MjE0OTVmOGJmZGUzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJVezLZqYBHUIXyF4DAum+933b5EO5BCis9qXwGj1PcABU1j
LVG0SrFyzOjqPis2JQCoR6AjjtIyJFakiaDwUZWrPk3JzhUTDd92uw7pdKh1OOca
kq9lAd5TP9r5KrYeClI0P8P+Igw/cQ0JXiLt66/VCt7mF4li9HwqvUWvPoCdEY25
v0Ubqts9B4QAtBa3TcuCa5zwk+QRWk1fjN0Krc7JApy+FrsY3ecPfwlHZTtRE+b4
epcaNvz+1VyBkcO6AZT62KhFoT9fjw1v8vZmCViDCQ96NcXI2R/7hHqDtRF0+kAe
1+NcNm22zMN0ReK6ZwwCpP2hn728QaVS2UzcwqECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSfR6EXuO/RCBi6TRxWQhSV+L/eODAfBgNVHSMEGDAWgBRXjYVL0r7iQqgv
uDki0Um8zxntAjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Y0MkZTOUstNGtLb0w3ZzVJdEZKdk04WjdRSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvMTI4YmM2LWY2ZmYtNGM5MC04YjVhLTFhYjVmNTM5OWQzYS8x
L24wZWhGN2p2MFFnWXVrMGNWa0lVbGZpXzNqZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
MTI4YmM2LWY2ZmYtNGM5MC04YjVhLTFhYjVmNTM5OWQzYS8xL1Y0MkZTOUstNGtL
b0w3ZzVJdEZKdk04WjdRSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAwU5yAMEArmkmDANBAIAAjAHAwUD
KgFFQDANBgkqhkiG9w0BAQsFAAOCAQEAoQOazhhshKtBPLL4EGr4ADOP5fmG4Ttj
sx85u6vhg+mciwB2XYd5nnevxna0MdHaY/+nPlAh9UxFL7OVvtQ03voW2hxSF5wt
ECSRPS2qzVkxBDpgxXIacF8oh7SPOYOW4GzppDtd5JyJEt/H4SysdhK4ZvqCWrtM
vQUnbasDQ+KF1MPm1stOIeai5PNFfMAmXOClDBCZeYdNWbcbFbeFhQIQiBYYgpgk
VZ1UL0AtVfScqMzdIzs5jJ5qXj/7juXSy7itzr4iUSNCLHH7wC55ef3GtZJsA7hT
meBLL7NLcoGBt+emoIGQTk4oJmQ5X8+Z8HAK7FYqXd1jtOHSzTrKmA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:53 2024 by rpki-client on console-fra.rpki-client.org