Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/5CltM2U4_TbM5tTNPVdc2UhqTQ8.roa
File: 5CltM2U4_TbM5tTNPVdc2UhqTQ8.roa (raw, json)
Hash identifier: jvtkEbOyGbZgJzPIZZLOdputclbXOdCa8nd4RfWW5G8=
Subject key identifier: E4:29:6D:33:65:38:FD:36:CC:E6:D4:CD:3D:57:5C:D9:48:6A:4D:0F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0182F2B3776F09DC9D6D6C34B7EAB949538F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/5CltM2U4_TbM5tTNPVdc2UhqTQ8.roa
Signing time: Wed 31 Aug 2022 07:00:23 +0000
ROA not before: Wed 31 Aug 2022 07:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 91.186.220.0/22 maxlen: 24
178.253.38.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
83.147.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:b3:77:6f:09:dc:9d:6d:6c:34:b7:ea:b9:49:53:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 31 07:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4296d336538fd36cce6d4cd3d575cd9486a4d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:bd:c2:b2:f7:cf:df:cd:c0:1a:e4:47:22:
15:8e:3b:23:32:9e:e2:d8:8a:08:39:b0:4c:3a:b8:
a5:6f:47:17:e6:24:6c:c6:c6:64:32:f5:07:ff:a5:
9d:6c:23:aa:89:f1:57:3b:87:a0:80:10:e0:54:12:
c3:e8:e2:2c:c9:41:e0:13:2d:0f:b8:95:7f:9f:2e:
92:38:85:8a:74:2c:03:50:00:1d:ab:8d:4a:b3:c2:
c7:73:9a:d7:12:cc:3e:4a:41:da:1b:13:af:bf:ad:
b6:91:e5:b7:18:4d:21:7e:46:35:34:92:27:86:a6:
5b:42:cc:50:f2:42:0b:a2:43:9f:50:68:17:87:0c:
2a:89:c7:e5:5c:d0:be:d7:75:22:42:28:55:ed:eb:
40:25:f8:a0:1f:4d:0d:a5:ab:ce:da:4d:be:b4:51:
6f:6a:5a:79:d7:af:6f:45:29:f2:56:52:09:bb:31:
a6:4e:99:d3:33:82:48:ae:39:88:12:d6:25:c5:ed:
0f:92:c0:64:08:c8:96:ad:3c:a6:29:dd:7b:de:8a:
27:c9:75:e7:4d:80:17:4c:10:15:d9:e8:00:7f:18:
fe:e5:61:88:78:e6:e0:fd:cb:36:24:d7:c8:46:40:
2a:22:74:82:32:61:49:6e:ab:07:5e:c8:40:34:81:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:29:6D:33:65:38:FD:36:CC:E6:D4:CD:3D:57:5C:D9:48:6A:4D:0F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/5CltM2U4_TbM5tTNPVdc2UhqTQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.220.0/22
178.253.38.0/23
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
58:b5:89:ae:e1:24:f6:ca:f7:b9:59:99:79:53:d4:74:10:6a:
60:68:46:8d:3e:a1:9b:d8:e2:28:94:b1:eb:3d:1f:c9:74:4a:
c0:ea:1d:56:4b:00:ee:47:28:c9:ac:bd:4d:eb:0a:29:a3:68:
02:e5:aa:3c:c0:17:6a:74:62:d2:9a:99:a2:b6:be:6d:9f:a3:
fd:90:12:80:c8:33:46:97:cd:24:ca:45:89:44:fc:33:df:f2:
89:0d:1a:a6:ee:4d:97:9c:7f:e1:99:16:ee:37:48:74:60:00:
35:e7:0c:d7:fb:7c:80:0c:2b:8e:ad:21:2e:31:59:d5:cd:51:
6a:f3:1f:95:55:5f:d0:e7:1c:ef:ee:ed:60:4b:dc:47:4e:f4:
3c:e8:9c:59:7b:d1:8d:49:12:b1:99:2e:08:e7:f7:88:e8:5e:
9e:7b:ea:2e:f7:33:89:69:69:14:57:eb:30:6b:08:90:00:0f:
1a:5f:29:69:c3:2f:99:bf:74:b3:2c:0b:4a:b8:e5:e5:70:ff:
d0:79:4f:23:61:ea:e1:c1:27:fa:a6:b3:7c:6e:fa:eb:da:dd:
bb:4b:3b:42:39:3d:d3:87:a6:08:b3:b8:30:8a:b1:53:eb:d1:
68:5b:fb:e4:04:60:fb:b9:76:f0:9d:16:00:6e:e8:b7:a8:81:
e9:4b:6b:a5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYLys3dvCdydbWw0t+q5SVOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjIwODMxMDcwMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDI5NmQzMzY1MzhmZDM2Y2NlNmQ0Y2QzZDU3NWNkOTQ4NmE0ZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobO9wrL3z9/NwBrkRyIVjjsjMp7i
2IoIObBMOrilb0cX5iRsxsZkMvUH/6WdbCOqifFXO4eggBDgVBLD6OIsyUHgEy0P
uJV/ny6SOIWKdCwDUAAdq41Ks8LHc5rXEsw+SkHaGxOvv622keW3GE0hfkY1NJIn
hqZbQsxQ8kILokOfUGgXhwwqicflXNC+13UiQihV7etAJfigH00NpavO2k2+tFFv
alp5169vRSnyVlIJuzGmTpnTM4JIrjmIEtYlxe0PksBkCMiWrTymKd173oonyXXn
TYAXTBAV2egAfxj+5WGIeObg/cs2JNfIRkAqInSCMmFJbqsHXshANIGfKwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOQpbTNlOP02zObUzT1XXNlIak0PMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvNUNsdE0yVTRfVGJNNXRUTlBWZGMyVWhxVFE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCU5P4AwQC
W7rcAwQBsv0mAwQBsv0sMA0GCSqGSIb3DQEBCwUAA4IBAQBYtYmu4ST2yve5WZl5
U9R0EGpgaEaNPqGb2OIolLHrPR/JdErA6h1WSwDuRyjJrL1N6wopo2gC5ao8wBdq
dGLSmpmitr5tn6P9kBKAyDNGl80kykWJRPwz3/KJDRqm7k2XnH/hmRbuN0h0YAA1
5wzX+3yADCuOrSEuMVnVzVFq8x+VVV/Q5xzv7u1gS9xHTvQ86JxZe9GNSRKxmS4I
5/eI6F6ee+ou9zOJaWkUV+swawiQAA8aXylpwy+Zv3SzLAtKuOXlcP/QeU8jYerh
wSf6prN8bvrr2t27SztCOT3Th6YIs7gwirFT69FoW/vkBGD7uXbwnRYAbui3qIHp
S2ul
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org