Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ce69ca-ca64-4e2e-9c08-b5f405946d4f/1/mebW_jNDnNB6IJuhNPoVFuDzj6o.roa
File: mebW_jNDnNB6IJuhNPoVFuDzj6o.roa (raw, json)
Hash identifier: zP5nPNdYox5sSj/jFEDY1X86KvN31fg5+ymY/7R32TY=
Subject key identifier: 99:E6:D6:FE:33:43:9C:D0:7A:20:9B:A1:34:FA:15:16:E0:F3:8F:AA
Certificate issuer: /CN=05592d788f179cc11ae11580225aebfef5bd8858
Certificate serial: DEF6
Authority key identifier: 05:59:2D:78:8F:17:9C:C1:1A:E1:15:80:22:5A:EB:FE:F5:BD:88:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVkteI8XnMEa4RWAIlrr_vW9iFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ce69ca-ca64-4e2e-9c08-b5f405946d4f/1/mebW_jNDnNB6IJuhNPoVFuDzj6o.roa
Signing time: Thu 16 Jun 2022 10:17:49 +0000
ROA not before: Thu 16 Jun 2022 10:17:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 171.33.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57078 (0xdef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05592d788f179cc11ae11580225aebfef5bd8858
Validity
Not Before: Jun 16 10:17:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99e6d6fe33439cd07a209ba134fa1516e0f38faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7e:b3:7e:6a:5e:ef:eb:bd:b4:fa:46:04:8a:
c8:3a:a4:bb:8b:29:5e:e9:c4:6b:10:50:b9:65:0b:
a7:b0:93:0f:49:ca:bb:92:97:8c:09:35:b4:b4:85:
29:b7:c8:23:23:c5:73:c0:5e:9b:b7:b6:10:cf:7a:
f5:3f:79:5f:7a:32:e2:b9:6b:bb:b7:1c:b7:dc:57:
01:33:1f:5c:bc:86:ab:45:95:3f:0a:9e:38:18:d9:
64:f7:a8:c1:79:82:56:a7:9d:d5:c4:b6:ea:9a:23:
68:d3:d7:72:3c:69:31:9c:03:e4:09:6d:c9:9e:5d:
74:ac:42:c2:9d:f5:02:57:51:e6:7d:b8:16:0f:77:
6e:fb:23:f9:12:b9:29:8e:79:06:10:d1:cf:f9:7e:
69:82:2f:eb:dd:3d:93:55:62:37:04:a0:ad:4b:ec:
e6:47:4c:c5:ef:ee:f3:db:f2:20:8b:65:e0:d4:d5:
35:bc:73:2e:08:80:b3:6f:69:f5:e3:24:bf:44:2d:
97:fe:2f:ae:b6:90:88:f3:22:71:1c:02:ff:f6:93:
cc:5b:87:7a:f5:44:78:f4:8f:7b:22:c3:99:9f:86:
fd:73:0c:32:e6:28:35:e2:be:bd:cd:62:a0:35:9a:
26:fa:fb:94:40:89:d1:df:2c:03:58:c6:8a:1e:51:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E6:D6:FE:33:43:9C:D0:7A:20:9B:A1:34:FA:15:16:E0:F3:8F:AA
X509v3 Authority Key Identifier:
keyid:05:59:2D:78:8F:17:9C:C1:1A:E1:15:80:22:5A:EB:FE:F5:BD:88:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVkteI8XnMEa4RWAIlrr_vW9iFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ce69ca-ca64-4e2e-9c08-b5f405946d4f/1/mebW_jNDnNB6IJuhNPoVFuDzj6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ce69ca-ca64-4e2e-9c08-b5f405946d4f/1/BVkteI8XnMEa4RWAIlrr_vW9iFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e5:de:b3:f2:53:e6:70:5c:16:c8:ea:3c:09:68:ea:df:8e:
6d:c9:91:80:8c:05:7c:5a:aa:6c:c7:e6:74:a8:3f:6d:3f:46:
18:10:46:4f:99:b2:dd:bd:3d:aa:24:b1:32:1c:2d:a3:b6:94:
9f:de:9b:13:a3:e0:41:b3:e4:73:9d:e3:98:ec:37:a5:16:ae:
44:e1:55:2e:69:54:11:15:05:98:81:19:c2:dd:e5:c3:76:b8:
16:2f:7a:c6:88:00:ed:0c:0b:32:60:12:31:f4:bc:06:d3:e8:
02:bb:1b:0a:bf:7d:eb:85:61:4f:f3:aa:f4:f3:c1:aa:69:9e:
0a:0f:f7:f7:aa:fd:59:ca:10:0a:fe:32:87:39:a3:e2:0b:92:
7a:f0:e5:6c:29:31:95:b3:27:f5:c4:c9:e9:6f:3b:86:d2:05:
cb:81:3d:1f:06:40:5a:f1:ce:ac:d1:12:be:19:08:eb:87:c4:
d6:f3:80:65:47:b9:d8:ec:f0:5c:b2:8c:56:46:d2:69:0c:bd:
90:b0:35:f1:af:f8:ad:34:be:10:88:b2:a2:36:71:f6:dc:06:
df:4e:f4:aa:10:86:da:e5:01:5b:d8:8f:c5:3d:4a:bd:e5:c4:
2b:78:5c:7f:44:91:49:ff:11:f1:77:36:c7:f0:04:99:37:a4:
5a:db:6f:0e
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAN72MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
NTkyZDc4OGYxNzljYzExYWUxMTU4MDIyNWFlYmZlZjViZDg4NTgwHhcNMjIwNjE2
MTAxNzQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5OWU2ZDZmZTMzNDM5
Y2QwN2EyMDliYTEzNGZhMTUxNmUwZjM4ZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA8n6zfmpe7+u9tPpGBIrIOqS7iyle6cRrEFC5ZQunsJMPScq7
kpeMCTW0tIUpt8gjI8VzwF6bt7YQz3r1P3lfejLiuWu7txy33FcBMx9cvIarRZU/
Cp44GNlk96jBeYJWp53VxLbqmiNo09dyPGkxnAPkCW3Jnl10rELCnfUCV1HmfbgW
D3du+yP5ErkpjnkGENHP+X5pgi/r3T2TVWI3BKCtS+zmR0zF7+7z2/Igi2Xg1NU1
vHMuCICzb2n14yS/RC2X/i+utpCI8yJxHAL/9pPMW4d69UR49I97IsOZn4b9cwwy
5ig14r69zWKgNZom+vuUQInR3ywDWMaKHlHypQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJnm1v4zQ5zQeiCboTT6FRbg84+qMB8GA1UdIwQYMBaAFAVZLXiPF5zBGuEV
gCJa6/71vYhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
QlZrdGVJOFhuTUVhNFJXQUlscnJfdlc5aUZnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hNC9jZTY5Y2EtY2E2NC00ZTJlLTljMDgtYjVmNDA1OTQ2ZDRmLzEv
bWViV19qTkRuTkI2SUp1aE5Qb1ZGdUR6ajZvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9j
ZTY5Y2EtY2E2NC00ZTJlLTljMDgtYjVmNDA1OTQ2ZDRmLzEvQlZrdGVJOFhuTUVh
NFJXQUlscnJfdlc5aUZnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqyHxMA0GCSqGSIb3DQEBCwUAA4IB
AQBN5d6z8lPmcFwWyOo8CWjq345tyZGAjAV8Wqpsx+Z0qD9tP0YYEEZPmbLdvT2q
JLEyHC2jtpSf3psTo+BBs+RzneOY7DelFq5E4VUuaVQRFQWYgRnC3eXDdrgWL3rG
iADtDAsyYBIx9LwG0+gCuxsKv33rhWFP86r088GqaZ4KD/f3qv1ZyhAK/jKHOaPi
C5J68OVsKTGVsyf1xMnpbzuG0gXLgT0fBkBa8c6s0RK+GQjrh8TW84BlR7nY7PBc
soxWRtJpDL2QsDXxr/itNL4QiLKiNnH23AbfTvSqEIba5QFb2I/FPUq95cQreFx/
RJFJ/xHxdzbH8ASZN6Ra228O
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org