Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/CmgllawBZUCoGgAAPWa8-hY8ns0.roa
File: CmgllawBZUCoGgAAPWa8-hY8ns0.roa (raw, json)
Hash identifier: 0RjOgRoeTJRG8MFtEQsu1TlZJ7FnPuxMen6tsMUErh8=
Subject key identifier: 0A:68:25:95:AC:01:65:40:A8:1A:00:00:3D:66:BC:FA:16:3C:9E:CD
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: BB763C
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/CmgllawBZUCoGgAAPWa8-hY8ns0.roa
Signing time: Wed 09 Mar 2022 22:01:08 +0000
ROA not before: Wed 09 Mar 2022 22:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 5.249.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12285500 (0xbb763c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Mar 9 22:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a682595ac016540a81a00003d66bcfa163c9ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:77:8e:aa:db:7a:f7:75:a9:08:28:91:a8:
78:af:15:58:5e:e3:85:b4:9a:94:3b:86:97:77:68:
f2:21:2f:80:45:3f:89:1a:f5:d5:5c:a9:1c:a0:16:
ac:b8:4c:ab:a3:61:9f:79:7d:a6:dc:f7:f7:e7:0b:
76:06:47:cf:01:53:2b:9a:20:7b:73:30:27:da:15:
5b:68:fb:59:ea:32:ab:3e:11:83:42:1b:85:ba:01:
cb:c1:4b:ee:6e:3b:86:71:0d:ae:1b:61:b6:09:c7:
4f:8f:85:13:75:11:91:d3:08:07:fb:9a:da:91:9f:
0b:7f:ec:9d:ae:31:00:05:0b:e5:57:06:d7:4a:a9:
7a:e5:3f:fb:7c:e8:bd:61:91:23:4b:d5:8d:6c:00:
0e:2b:7d:e6:f9:38:41:5c:cd:6c:ed:01:64:e0:c8:
c5:76:b3:09:b1:38:9b:4d:32:d3:dc:e0:6d:4f:53:
f8:42:a7:e5:02:f3:7c:02:33:af:11:5b:fc:de:0a:
7a:fb:b8:a4:4e:31:21:41:92:cb:c6:b2:51:b3:a1:
75:aa:0a:e5:c4:19:24:59:1a:12:ad:bc:4b:33:a7:
dc:4f:52:5a:96:37:1d:de:d3:62:10:4e:2d:c1:ae:
92:44:2c:99:ec:35:2a:26:73:33:b2:fc:11:31:86:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:68:25:95:AC:01:65:40:A8:1A:00:00:3D:66:BC:FA:16:3C:9E:CD
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/CmgllawBZUCoGgAAPWa8-hY8ns0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.176.0/20
Signature Algorithm: sha256WithRSAEncryption
cd:ce:3d:d1:eb:0a:2e:70:70:61:b5:74:85:63:29:3d:e8:b5:
05:88:54:d4:cc:9f:8b:20:7b:d3:ca:38:93:4a:fe:9f:a4:3c:
32:c6:b3:c6:e1:54:7f:43:08:45:d4:46:a5:ce:92:d9:0d:9d:
34:8f:81:d7:41:80:88:69:a9:50:f9:a1:69:30:36:e7:78:9d:
6d:b4:f3:98:62:0a:28:b6:52:f9:06:2f:7b:f7:76:89:f3:2d:
86:e4:a0:7a:4a:8c:4a:ed:2d:44:82:8c:ce:cf:82:e1:90:54:
d6:28:1f:78:76:67:7a:cc:aa:2c:c2:68:2d:1b:c3:08:bb:01:
8a:60:8a:ee:89:53:b3:c8:07:69:35:a4:84:e6:d8:30:25:c8:
24:ea:2f:e6:e4:6a:79:63:1e:06:07:81:a0:1c:ae:ae:23:79:
f1:83:d5:eb:9a:49:29:d2:ae:fe:c8:8e:88:a0:ef:74:29:05:
07:35:6b:62:74:8e:f1:1e:fd:03:51:3e:90:90:95:8c:b5:73:
1c:b6:2e:2d:cc:f3:a3:59:98:45:e0:37:88:2d:03:e1:0f:08:
90:00:39:93:a3:6e:01:f6:21:69:2e:c2:fc:09:fa:f6:58:0d:
b7:1e:72:fe:f3:ca:a0:9e:76:56:36:79:06:70:61:d4:4d:76:
ad:f3:c7:bb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEALt2PDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZTgyOTYzZmYxYWE3MGFiMTBkMWQzM2U4NmIxZDZkNDk0ZDZjZTUxMB4XDTIyMDMw
OTIyMDEwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGE2ODI1OTVhYzAx
NjU0MGE4MWEwMDAwM2Q2NmJjZmExNjNjOWVjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPBmd46q23r3dakIKJGoeK8VWF7jhbSalDuGl3do8iEvgEU/
iRr11VypHKAWrLhMq6Nhn3l9ptz39+cLdgZHzwFTK5oge3MwJ9oVW2j7Weoyqz4R
g0IbhboBy8FL7m47hnENrhthtgnHT4+FE3URkdMIB/ua2pGfC3/sna4xAAUL5VcG
10qpeuU/+3zovWGRI0vVjWwADit95vk4QVzNbO0BZODIxXazCbE4m00y09zgbU9T
+EKn5QLzfAIzrxFb/N4Kevu4pE4xIUGSy8ayUbOhdaoK5cQZJFkaEq28SzOn3E9S
WpY3Hd7TYhBOLcGukkQsmew1KiZzM7L8ETGGRiUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKaCWVrAFlQKgaAAA9Zrz6FjyezTAfBgNVHSMEGDAWgBQugpY/8apwqxDR
0z6GsdbUlNbOUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xvS1dQX0dxY0tzUTBkTS1ockhXMUpUV3psRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvOTU3YzY4LTZmMjctNDBlZC1hYmVkLWRmNjRmMGU4MjM2MC8x
L0NtZ2xsYXdCWlVDb0dnQUFQV2E4LWhZOG5zMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
OTU3YzY4LTZmMjctNDBlZC1hYmVkLWRmNjRmMGU4MjM2MC8xL0xvS1dQX0dxY0tz
UTBkTS1ockhXMUpUV3psRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBAX5sDANBgkqhkiG9w0BAQsFAAOC
AQEAzc490esKLnBwYbV0hWMpPei1BYhU1MyfiyB708o4k0r+n6Q8MsazxuFUf0MI
RdRGpc6S2Q2dNI+B10GAiGmpUPmhaTA253idbbTzmGIKKLZS+QYve/d2ifMthuSg
ekqMSu0tRIKMzs+C4ZBU1igfeHZnesyqLMJoLRvDCLsBimCK7olTs8gHaTWkhObY
MCXIJOov5uRqeWMeBgeBoByuriN58YPV65pJKdKu/siOiKDvdCkFBzVrYnSO8R79
A1E+kJCVjLVzHLYuLczzo1mYReA3iC0D4Q8IkAA5k6NuAfYhaS7C/An69lgNtx5y
/vPKoJ52VjZ5BnBh1E12rfPHuw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-fra.rpki-client.org