Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/dwu1cYvC4AAmrYv6pTkATiYditY.roa
File: dwu1cYvC4AAmrYv6pTkATiYditY.roa (raw, json)
Hash identifier: aZqDHFwUXOh0Hf5eD0CCfUZwEiQ7e3FWcX6/L3wPimU=
Subject key identifier: 77:0B:B5:71:8B:C2:E0:00:26:AD:8B:FA:A5:39:00:4E:26:1D:8A:D6
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 06A8DEF0
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/dwu1cYvC4AAmrYv6pTkATiYditY.roa
Signing time: Sat 01 Jan 2022 04:59:50 +0000
ROA not before: Sat 01 Jan 2022 04:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 192.42.192.0/21 maxlen: 21
192.42.200.0/23 maxlen: 23
130.223.0.0/16 maxlen: 16
192.42.180.0/22 maxlen: 22
192.42.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111730416 (0x6a8def0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Jan 1 04:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=770bb5718bc2e00026ad8bfaa539004e261d8ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:63:20:2c:5b:95:ba:76:2d:99:1d:ef:98:
18:02:88:05:f1:20:9f:ef:90:f9:e1:1d:ff:81:51:
0f:eb:63:ee:5a:dc:ad:72:28:4b:d8:73:8e:78:d9:
23:eb:61:36:03:de:94:d1:9c:6d:59:96:18:2d:9a:
9c:27:0b:e0:3a:7a:3c:5f:3d:2f:18:b9:68:4e:34:
e2:12:4b:e2:b0:eb:09:ea:79:e1:6d:8c:17:18:70:
45:fb:ee:6d:17:2f:e4:39:92:9b:c8:b4:31:80:82:
31:75:7d:77:91:1f:19:89:d9:f9:e6:be:8f:d1:15:
40:9e:6b:a7:d5:af:d4:23:3a:9e:d2:51:e1:88:73:
b2:46:00:ab:30:58:3f:be:50:5f:37:c4:6e:21:60:
4e:fb:71:e5:fa:db:a1:eb:18:88:5a:97:ff:aa:37:
6e:de:41:e2:4a:48:1c:03:f4:b7:bd:ee:bb:8c:2e:
4a:34:55:d0:8f:98:9a:32:ef:11:b3:fe:a1:de:ab:
8b:9f:6a:ef:b2:e7:ae:fa:79:33:58:25:2c:fe:2a:
a8:9a:16:eb:46:ca:d6:74:61:8d:4f:73:1f:22:98:
2f:2c:33:f8:9a:c7:f7:7b:58:98:33:53:e0:5a:9d:
0a:9d:70:06:07:43:b9:00:59:b3:e4:0e:88:22:9c:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:B5:71:8B:C2:E0:00:26:AD:8B:FA:A5:39:00:4E:26:1D:8A:D6
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/dwu1cYvC4AAmrYv6pTkATiYditY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.223.0.0/16
192.42.180.0-192.42.201.255
Signature Algorithm: sha256WithRSAEncryption
95:43:b2:01:a0:2a:64:66:d2:d2:79:d5:98:78:af:ed:2e:04:
83:07:ba:23:84:38:ec:35:e9:9e:ee:e4:4c:10:45:cc:31:0a:
5a:9a:81:09:ef:28:b8:ab:34:1f:c6:e9:cf:5c:66:1e:e5:6c:
b3:af:e3:f8:65:6d:c0:97:f2:6c:4e:7b:46:9b:ff:01:4c:4c:
3a:21:d6:1d:71:8f:f6:95:33:52:8f:9e:fd:b2:f5:6c:09:d3:
61:57:53:25:ad:12:02:36:cd:56:5b:89:86:fe:f7:26:16:43:
a7:2f:2b:e5:3f:de:a2:d1:c9:6b:dd:17:42:6c:86:9c:44:9b:
ab:57:80:c5:fb:d7:d1:b2:02:ca:7c:3a:76:ae:14:1b:a8:9f:
7d:f5:97:d2:6f:aa:5a:d2:d9:7c:30:30:49:b4:ef:21:4c:89:
5c:65:2d:ea:43:f8:d4:31:35:c8:69:18:32:9f:87:3f:26:c7:
b9:f8:de:99:1c:92:74:e0:0a:3b:5f:e3:16:d9:bf:cd:b3:e9:
cf:4d:8d:cd:39:5b:5f:c4:17:d8:8e:4a:75:ae:05:21:e8:58:
43:fd:2c:ca:06:2d:97:30:e9:65:c7:ce:f1:c5:04:2d:e8:ee:
cd:78:d5:0e:84:c5:4e:61:f7:03:8c:b5:bd:94:fd:68:0a:e4:
a5:79:2a:b0
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIEBqje8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ODUxYTNmZWU3N2U5MjQxNDYxNzcxMjNkZDY3NTNiMDZmZGUyNDUyMB4XDTIyMDEw
MTA0NTk1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzcwYmI1NzE4YmMy
ZTAwMDI2YWQ4YmZhYTUzOTAwNGUyNjFkOGFkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJoIYyAsW5W6di2ZHe+YGAKIBfEgn++Q+eEd/4FRD+tj7lrc
rXIoS9hzjnjZI+thNgPelNGcbVmWGC2anCcL4Dp6PF89Lxi5aE404hJL4rDrCep5
4W2MFxhwRfvubRcv5DmSm8i0MYCCMXV9d5EfGYnZ+ea+j9EVQJ5rp9Wv1CM6ntJR
4YhzskYAqzBYP75QXzfEbiFgTvtx5frboesYiFqX/6o3bt5B4kpIHAP0t73uu4wu
SjRV0I+YmjLvEbP+od6ri59q77Lnrvp5M1glLP4qqJoW60bK1nRhjU9zHyKYLywz
+JrH93tYmDNT4FqdCp1wBgdDuQBZs+QOiCKcHqkCAwEAAaOCAhYwggISMB0GA1Ud
DgQWBBR3C7Vxi8LgACati/qlOQBOJh2K1jAfBgNVHSMEGDAWgBRoUaP+536SQUYX
cSPdZ1Owb94kUjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FGR2pfdWQta2tGR0YzRWozV2RUc0dfZUpGSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvMDA1OWI1LWY2MzctNDI2NS1hM2U0LWEzYjU4NjI4MDYwZC8x
L2R3dTFjWXZDNEFBbXJZdjZwVGtBVGlZZGl0WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
MDA1OWI1LWY2MzctNDI2NS1hM2U0LWEzYjU4NjI4MDYwZC8xL2FGR2pfdWQta2tG
R0YzRWozV2RUc0dfZUpGSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAs
BggrBgEFBQcBBwEB/wQdMBswGQQCAAEwEwMDAILfMAwDBALAKrQDBAHAKsgwDQYJ
KoZIhvcNAQELBQADggEBAJVDsgGgKmRm0tJ51Zh4r+0uBIMHuiOEOOw16Z7u5EwQ
RcwxClqagQnvKLirNB/G6c9cZh7lbLOv4/hlbcCX8mxOe0ab/wFMTDoh1h1xj/aV
M1KPnv2y9WwJ02FXUyWtEgI2zVZbiYb+9yYWQ6cvK+U/3qLRyWvdF0JshpxEm6tX
gMX719GyAsp8OnauFBuon331l9JvqlrS2XwwMEm07yFMiVxlLepD+NQxNchpGDKf
hz8mx7n43pkcknTgCjtf4xbZv82z6c9Njc05W1/EF9iOSnWuBSHoWEP9LMoGLZcw
6WXHzvHFBC3o7s141Q6ExU5h9wOMtb2U/WgK5KV5KrA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org