Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/1-l6PujSYiQemlLju2v7HpIKqo_Q.roa
File: 1-l6PujSYiQemlLju2v7HpIKqo_Q.roa (raw, json)
Hash identifier: 4ZLl3Dbpol8bfPoQVgcn+K8NVWF2vrxqdgB6GnTjC1Q=
Subject key identifier: FA:5E:8F:BA:34:98:89:07:A6:94:B8:EE:DA:FE:C7:A4:82:AA:A3:F4
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018212C9BB8B82BD4B2D49CBFCE5F8E0C3A8
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/1-l6PujSYiQemlLju2v7HpIKqo_Q.roa
Signing time: Mon 18 Jul 2022 19:29:46 +0000
ROA not before: Mon 18 Jul 2022 19:29:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 79.133.180.0/24 maxlen: 24
5.253.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:c9:bb:8b:82:bd:4b:2d:49:cb:fc:e5:f8:e0:c3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jul 18 19:29:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa5e8fba34988907a694b8eedafec7a482aaa3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:78:db:f9:8c:86:92:cf:84:35:55:b7:03:
1d:69:d8:05:f8:11:1c:d6:0e:10:42:17:42:b5:3c:
5c:1b:3e:71:17:ff:0f:05:b6:4d:99:7e:a2:02:d2:
ce:d1:56:80:d6:0d:6c:0b:48:a5:24:9b:79:53:1e:
45:b0:00:c1:3f:e6:e5:94:3c:39:29:6c:09:c2:fc:
40:3e:63:09:63:e5:87:64:fd:40:7a:8e:65:cf:4a:
83:56:4e:6b:87:79:2b:ea:43:f6:3a:77:a0:ea:20:
a8:18:2b:99:ca:2b:0a:7d:89:cf:68:ef:ad:5d:56:
8b:27:09:63:a9:4c:38:2f:7c:84:6e:9a:8a:0e:47:
c2:32:12:bb:8b:6b:3a:3e:39:2c:8e:c9:7c:62:5c:
cb:05:18:d9:ba:94:54:ec:f7:b6:d7:2d:86:ff:63:
5f:3a:64:6c:08:9a:4c:ac:1a:e2:85:28:6b:f0:c4:
35:65:7a:9e:97:97:64:0b:a7:52:6b:09:86:07:ed:
da:ca:e2:6b:89:4e:df:59:d5:93:20:46:70:d5:d4:
28:79:73:63:a3:38:90:90:4c:e2:4f:50:62:f2:a6:
15:e8:be:19:c1:d9:30:7f:be:ac:9b:17:3f:52:a0:
82:95:0b:75:05:aa:68:af:42:e7:61:ab:d4:4d:ee:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5E:8F:BA:34:98:89:07:A6:94:B8:EE:DA:FE:C7:A4:82:AA:A3:F4
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/1-l6PujSYiQemlLju2v7HpIKqo_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.63.0/24
79.133.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:03:03:62:c6:59:25:18:2c:40:27:37:c3:2c:1e:57:5f:c6:
4d:b1:40:44:aa:95:02:03:87:d4:b8:ad:e8:3b:88:b4:bf:c2:
b5:ac:07:74:80:83:e8:20:9d:37:83:61:d0:a8:33:79:7d:9b:
b2:ba:37:f8:49:26:ce:8c:ab:7c:16:d4:98:19:2c:39:45:b5:
c2:c6:e8:0d:8a:c2:cc:ce:59:ec:19:b3:82:c8:c3:79:8f:a5:
05:25:6e:cb:e7:a2:89:aa:75:47:2d:ef:0a:b4:f1:f0:54:1a:
d0:63:7b:81:8e:7c:4c:d6:8e:27:5f:d1:2b:47:d2:81:5a:9b:
10:75:5f:35:ac:ee:61:05:f9:9e:34:f6:a5:4b:39:11:59:f7:
3b:83:a5:fa:4e:cd:03:48:1a:ae:4f:04:a5:60:4c:57:a4:c9:
16:3f:46:f9:49:2d:05:40:f8:b6:54:a8:76:05:3c:7b:da:17:
23:23:f6:23:e5:74:18:6a:39:35:f6:b6:83:70:a0:6d:f2:1c:
a3:3a:b6:38:16:72:4d:36:6d:db:57:31:16:72:70:93:e9:79:
29:cb:51:6f:00:aa:68:43:c9:46:07:21:18:74:65:1a:3a:8a:
69:fb:97:70:76:e0:8e:95:77:6f:ae:a1:46:6b:0a:f4:fa:be:
6f:63:16:f7
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYISybuLgr1LLUnL/OX44MOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjIwNzE4MTkyOTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTVlOGZiYTM0OTg4OTA3YTY5NGI4ZWVkYWZlYzdhNDgyYWFhM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5B42/mMhpLPhDVVtwMdadgF+BEc
1g4QQhdCtTxcGz5xF/8PBbZNmX6iAtLO0VaA1g1sC0ilJJt5Ux5FsADBP+bllDw5
KWwJwvxAPmMJY+WHZP1Aeo5lz0qDVk5rh3kr6kP2Oneg6iCoGCuZyisKfYnPaO+t
XVaLJwljqUw4L3yEbpqKDkfCMhK7i2s6Pjksjsl8YlzLBRjZupRU7Pe21y2G/2Nf
OmRsCJpMrBrihShr8MQ1ZXqel5dkC6dSawmGB+3ayuJriU7fWdWTIEZw1dQoeXNj
oziQkEziT1Bi8qYV6L4Zwdkwf76smxc/UqCClQt1Bapor0LnYavUTe6SeQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPpej7o0mIkHppS47tr+x6SCqqP0MB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvMS1sNlB1alNZaVFlbWxManUydjdIcElLcW9fUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTEvZjQzMTlmLTNkZmItNDJlYS1iYTk1LTQ5MmFiMzcyNjg5
ZC8xL1g3NWxyaVB5Ql9wcFVsWDFXcEI2d1dDTDRKUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAX9PwME
AE+FtDANBgkqhkiG9w0BAQsFAAOCAQEAHQMDYsZZJRgsQCc3wyweV1/GTbFARKqV
AgOH1Lit6DuItL/CtawHdICD6CCdN4Nh0KgzeX2bsro3+EkmzoyrfBbUmBksOUW1
wsboDYrCzM5Z7BmzgsjDeY+lBSVuy+eiiap1Ry3vCrTx8FQa0GN7gY58TNaOJ1/R
K0fSgVqbEHVfNazuYQX5njT2pUs5EVn3O4Ol+k7NA0gark8EpWBMV6TJFj9G+Ukt
BUD4tlSodgU8e9oXIyP2I+V0GGo5Nfa2g3CgbfIcozq2OBZyTTZt21cxFnJwk+l5
KctRbwCqaEPJRgchGHRlGjqKafuXcHbgjpV3b66hRmsK9Pq+b2MW9w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org