Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/6jhgXSjkKpGl1QMbnpBpibEUxvI.roa
File: 6jhgXSjkKpGl1QMbnpBpibEUxvI.roa (raw, json)
Hash identifier: rc+PCF7L/BmImvih27IxaQ13Q5YGvtcxW7mDZcHiXaY=
Subject key identifier: EA:38:60:5D:28:E4:2A:91:A5:D5:03:1B:9E:90:69:89:B1:14:C6:F2
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 022519D8
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/6jhgXSjkKpGl1QMbnpBpibEUxvI.roa
Signing time: Sat 01 Jan 2022 14:08:00 +0000
ROA not before: Sat 01 Jan 2022 14:08:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47692
IP address blocks: 5.183.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35985880 (0x22519d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Jan 1 14:08:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea38605d28e42a91a5d5031b9e906989b114c6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:d7:30:5c:0e:3f:8f:27:e3:1c:45:be:8f:
ff:91:9d:68:65:14:d5:2a:db:68:4a:a6:3a:20:2c:
35:59:f7:86:43:88:0d:db:6b:ba:bd:b5:f9:f5:11:
88:4a:24:a5:4a:f4:e6:cc:a5:a2:0e:aa:c7:b4:0b:
a7:8a:ee:7a:ac:7f:9f:8b:2c:29:e8:05:88:9d:a6:
47:75:86:03:34:98:83:8f:2c:6e:c8:57:e2:a6:74:
4e:08:38:f2:59:88:10:86:c1:8f:80:1c:f0:82:bd:
cf:86:19:0e:2b:62:5e:46:c6:ff:27:f7:c4:e0:de:
e2:b1:db:ed:f5:f7:35:3e:16:61:ba:69:9f:bb:d3:
28:99:30:c7:f9:5d:4f:ae:18:25:54:4d:b0:0e:c8:
d5:a0:7b:4a:1d:05:d2:1b:1f:dc:44:74:00:cf:1b:
93:29:a2:06:37:b5:34:a3:42:1e:06:d8:92:68:c7:
04:06:26:7a:0b:23:a3:5d:3c:28:7c:ff:a1:7e:65:
41:95:dd:64:db:37:cf:49:76:ea:7e:72:60:ee:07:
14:87:d1:7d:d4:d6:ff:44:89:5d:1f:48:e7:24:57:
e0:a2:44:96:a3:26:5f:50:f3:50:61:19:cc:e1:3d:
78:07:b2:e6:ea:32:ce:2d:d2:61:1b:f4:b6:96:f4:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:60:5D:28:E4:2A:91:A5:D5:03:1B:9E:90:69:89:B1:14:C6:F2
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/6jhgXSjkKpGl1QMbnpBpibEUxvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.172.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c4:d3:50:28:5e:9b:01:df:6f:1a:5b:d1:c4:8a:ff:a6:d7:
d3:96:ab:20:d4:fa:8b:c7:58:ac:cc:ff:a6:6d:ca:eb:86:f6:
49:8c:ef:48:29:9b:9a:2a:da:86:ec:31:b0:28:b1:21:2d:61:
e0:be:61:f8:69:2a:1c:b4:76:df:0c:cf:b9:7d:18:2c:a2:35:
0a:e0:dd:7a:82:df:83:0d:d8:04:2b:e6:0a:4f:20:cb:bb:a5:
5c:20:07:f1:bd:ad:88:00:97:c9:a2:76:20:dd:64:2e:c6:b2:
52:27:ed:e2:ca:55:d6:ff:26:ad:ed:ff:fb:9b:f4:07:9d:aa:
ec:c9:bd:49:d8:81:5e:a6:1e:cb:c8:26:4d:dc:7a:41:99:ca:
09:91:1b:e0:3b:1d:9d:23:b5:22:56:29:25:af:1f:29:6a:ea:
7e:14:0f:e0:85:72:fb:89:e9:0a:a4:69:0e:41:0f:92:ec:03:
55:7e:e0:c1:c2:77:2c:cc:30:9e:a3:ee:1c:a7:0a:8c:90:75:
c0:c8:75:7a:da:37:88:4b:00:0f:ce:85:90:29:05:31:9a:35:
a2:1a:c2:7b:de:98:10:c4:c7:bb:a4:da:68:9e:ff:2b:9b:54:
4f:65:b0:93:80:21:99:80:68:b7:89:54:51:12:6a:76:65:c3:
0b:2e:3b:c3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAiUZ2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MzY4ODMwNWZlZDVjOTk3NjBhZWM3Yzg5NGM2YmEyMWU0ZWFkNjc1MB4XDTIyMDEw
MTE0MDgwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWEzODYwNWQyOGU0
MmE5MWE1ZDUwMzFiOWU5MDY5ODliMTE0YzZmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK3a1zBcDj+PJ+McRb6P/5GdaGUU1SrbaEqmOiAsNVn3hkOI
Ddtrur21+fURiEokpUr05sylog6qx7QLp4rueqx/n4ssKegFiJ2mR3WGAzSYg48s
bshX4qZ0Tgg48lmIEIbBj4Ac8IK9z4YZDitiXkbG/yf3xODe4rHb7fX3NT4WYbpp
n7vTKJkwx/ldT64YJVRNsA7I1aB7Sh0F0hsf3ER0AM8bkymiBje1NKNCHgbYkmjH
BAYmegsjo108KHz/oX5lQZXdZNs3z0l26n5yYO4HFIfRfdTW/0SJXR9I5yRX4KJE
lqMmX1DzUGEZzOE9eAey5uoyzi3SYRv0tpb0rNcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTqOGBdKOQqkaXVAxuekGmJsRTG8jAfBgNVHSMEGDAWgBSjaIMF/tXJl2Cu
x8iUxroh5OrWdTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L28yaURCZjdWeVpkZ3JzZklsTWE2SWVUcTFuVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmYvZjllMjU3LTAxNjItNGRlZi05NmFkLWRlYzk3OTZmNjIyMy8x
LzZqaGdYU2prS3BHbDFRTWJucEJwaWJFVXh2SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYv
ZjllMjU3LTAxNjItNGRlZi05NmFkLWRlYzk3OTZmNjIyMy8xL28yaURCZjdWeVpk
Z3JzZklsTWE2SWVUcTFuVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW3rDANBgkqhkiG9w0BAQsFAAOC
AQEAkcTTUChemwHfbxpb0cSK/6bX05arINT6i8dYrMz/pm3K64b2SYzvSCmbmira
huwxsCixIS1h4L5h+GkqHLR23wzPuX0YLKI1CuDdeoLfgw3YBCvmCk8gy7ulXCAH
8b2tiACXyaJ2IN1kLsayUift4spV1v8mre3/+5v0B52q7Mm9SdiBXqYey8gmTdx6
QZnKCZEb4DsdnSO1IlYpJa8fKWrqfhQP4IVy+4npCqRpDkEPkuwDVX7gwcJ3LMww
nqPuHKcKjJB1wMh1eto3iEsAD86FkCkFMZo1ohrCe96YEMTHu6TaaJ7/K5tUT2Ww
k4AhmYBot4lUURJqdmXDCy47ww==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:08 2023 by rpki-client on console-ams.rpki-client.org