Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/tSgJne6bH4qA1_zExzBa4uYt0i8.roa
File: tSgJne6bH4qA1_zExzBa4uYt0i8.roa (raw, json)
Hash identifier: MAg4bmm4yEEoSVWEKJiVdCiCEzRJL1cSVvUhiti4ceA=
Subject key identifier: B5:28:09:9D:EE:9B:1F:8A:80:D7:FC:C4:C7:30:5A:E2:E6:2D:D2:2F
Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial: 0182818261C095C0872533B68129452FF080
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/tSgJne6bH4qA1_zExzBa4uYt0i8.roa
Signing time: Tue 09 Aug 2022 07:29:41 +0000
ROA not before: Tue 09 Aug 2022 07:29:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47513
IP address blocks: 91.204.132.0/22 maxlen: 22
46.150.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:82:61:c0:95:c0:87:25:33:b6:81:29:45:2f:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
Validity
Not Before: Aug 9 07:29:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b528099dee9b1f8a80d7fcc4c7305ae2e62dd22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:2f:7d:3a:2d:4c:f9:84:b4:c7:47:c1:7e:
c9:a4:58:aa:8f:00:fb:92:47:94:8f:06:dd:fc:5d:
5b:9d:88:25:c8:83:81:d8:5e:fe:0f:d0:d3:03:76:
bc:76:bc:5e:31:5f:fb:23:88:3b:ac:70:fd:f4:7f:
f6:94:b5:a0:10:2c:e2:63:c5:c4:cb:d9:3e:7b:90:
9a:43:ba:35:2e:9e:df:47:6b:b0:67:47:54:c7:2f:
8f:77:a9:70:b7:a9:a1:06:9a:5f:d5:c4:af:79:89:
79:75:9b:75:52:f6:d7:4e:a8:82:6a:3f:9c:eb:e7:
58:af:ff:27:d7:03:e1:4c:37:6d:30:68:01:78:48:
27:2d:d2:6d:47:e1:e2:79:6f:0b:49:cd:41:07:bf:
57:5a:89:fd:73:96:e9:1f:08:2f:73:0a:c0:27:50:
75:20:ba:9b:32:81:5d:8f:3d:97:d3:ac:80:17:fe:
f2:3a:2b:09:40:d5:17:b0:d3:5b:dc:88:84:e5:17:
d3:d5:47:6d:f3:bc:45:25:8a:79:98:0b:22:08:c6:
dd:53:21:60:7e:9b:56:4c:dd:7d:5e:ad:d2:9a:44:
7a:e4:af:75:38:6b:0b:f0:64:e2:d4:9b:51:fb:d7:
5d:dd:aa:6c:8c:f5:eb:9a:e6:48:57:72:a5:03:bb:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:28:09:9D:EE:9B:1F:8A:80:D7:FC:C4:C7:30:5A:E2:E6:2D:D2:2F
X509v3 Authority Key Identifier:
keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/tSgJne6bH4qA1_zExzBa4uYt0i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.0.0/19
91.204.132.0/22
Signature Algorithm: sha256WithRSAEncryption
54:b8:cd:83:e6:bf:0c:4b:b1:e5:44:e6:fd:48:c7:b8:3e:c0:
90:e4:a2:12:10:cc:75:d9:30:61:d6:1c:a8:c9:38:76:f9:ca:
db:f8:49:2d:c7:ea:d2:8f:37:82:73:3b:37:a9:f7:23:15:5a:
d6:0e:bc:72:ac:c3:fb:d4:cf:fc:57:d0:97:32:1d:ac:f8:fa:
91:f3:cd:14:52:93:b2:cf:8f:74:4b:e4:1e:30:55:13:2a:cb:
57:fa:10:8a:c1:0b:38:bb:67:9a:e4:1c:72:7e:d8:dc:16:c0:
fc:72:3f:80:6a:2a:ed:51:4a:22:d5:c4:15:71:2b:35:a2:9a:
82:b7:9b:79:77:ab:d9:b4:2b:93:56:09:a3:7d:f8:4c:b4:a0:
1e:20:40:d7:82:0e:8e:77:5b:10:02:47:f9:c6:d1:c5:0e:1c:
4a:87:5e:9a:6b:78:a2:ff:35:24:c3:f6:6f:b9:6c:a6:f4:9a:
9f:a1:5e:72:cf:53:0e:f9:0c:c4:08:1a:06:79:db:3f:94:a0:
6d:07:51:76:ef:bd:b2:44:83:03:ec:d4:3e:6c:d2:c7:2a:bd:
f3:7d:b4:2e:0c:b4:08:89:c3:08:32:d8:2b:15:3b:44:f8:6a:
2d:f0:0c:f5:7a:89:f5:51:c9:2d:9b:6d:68:ee:c2:b7:ab:86:
d4:54:2c:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYKBgmHAlcCHJTO2gSlFL/CAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMzFkOTc5YjcxMGVkZTIwNjg4MjM4ODFhYTYxMWFkMTNh
ZjU0NTkwHhcNMjIwODA5MDcyOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTI4MDk5ZGVlOWIxZjhhODBkN2ZjYzRjNzMwNWFlMmU2MmRkMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioYvfTotTPmEtMdHwX7JpFiqjwD7
kkeUjwbd/F1bnYglyIOB2F7+D9DTA3a8drxeMV/7I4g7rHD99H/2lLWgECziY8XE
y9k+e5CaQ7o1Lp7fR2uwZ0dUxy+Pd6lwt6mhBppf1cSveYl5dZt1UvbXTqiCaj+c
6+dYr/8n1wPhTDdtMGgBeEgnLdJtR+HieW8LSc1BB79XWon9c5bpHwgvcwrAJ1B1
ILqbMoFdjz2X06yAF/7yOisJQNUXsNNb3IiE5RfT1Udt87xFJYp5mAsiCMbdUyFg
fptWTN19Xq3SmkR65K91OGsL8GTi1JtR+9dd3apsjPXrmuZIV3KlA7u6SwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLUoCZ3umx+KgNf8xMcwWuLmLdIvMB8GA1UdIwQY
MBaAFF8x2Xm3EO3iBogjiBqmEa0Tr1RZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHpIWmViY1E3ZUlHaUNPSUdxWVJyUk92VkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZGUyOGQtMzc0OS00ZDAyLWJlOWMt
NDFjNjY0NThkZDczLzEvdFNnSm5lNmJINHFBMV96RXh6QmE0dVl0MGk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZGUyOGQtMzc0OS00ZDAyLWJlOWMtNDFjNjY0NThkZDcz
LzEvWHpIWmViY1E3ZUlHaUNPSUdxWVJyUk92VkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFLpYAAwQC
W8yEMA0GCSqGSIb3DQEBCwUAA4IBAQBUuM2D5r8MS7HlROb9SMe4PsCQ5KISEMx1
2TBh1hyoyTh2+crb+Ektx+rSjzeCczs3qfcjFVrWDrxyrMP71M/8V9CXMh2s+PqR
880UUpOyz490S+QeMFUTKstX+hCKwQs4u2ea5BxyftjcFsD8cj+AairtUUoi1cQV
cSs1opqCt5t5d6vZtCuTVgmjffhMtKAeIEDXgg6Od1sQAkf5xtHFDhxKh16aa3ii
/zUkw/ZvuWym9JqfoV5yz1MO+QzECBoGeds/lKBtB1F2772yRIMD7NQ+bNLHKr3z
fbQuDLQIicMIMtgrFTtE+Got8Az1eon1Ucktm21o7sK3q4bUVCxG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:49 2024 by rpki-client on console-ams.rpki-client.org