Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DDePQAdp5mlKcPRyjInJ7HEQ3fA.roa
File: DDePQAdp5mlKcPRyjInJ7HEQ3fA.roa (raw, json)
Hash identifier: odW0MClvg8na1mgPNR5YnXYlmkfYo5jJQwln6jj0tcQ=
Subject key identifier: 0C:37:8F:40:07:69:E6:69:4A:70:F4:72:8C:89:C9:EC:71:10:DD:F0
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0344E7D7
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DDePQAdp5mlKcPRyjInJ7HEQ3fA.roa
Signing time: Sat 01 Jan 2022 16:04:38 +0000
ROA not before: Sat 01 Jan 2022 16:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209728
IP address blocks: 5.252.119.0/24 maxlen: 24
193.34.235.0/24 maxlen: 24
193.168.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54847447 (0x344e7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c378f400769e6694a70f4728c89c9ec7110ddf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:e6:69:a0:a7:13:4d:29:99:7e:6d:02:43:
4e:26:46:73:46:dd:0d:31:28:0e:48:93:60:e4:4a:
b1:31:ce:6b:0e:6a:75:bb:ff:05:20:55:6b:3f:4e:
e4:e1:50:a2:a2:0f:78:a2:f8:17:c4:86:7f:d2:50:
6f:4f:17:a4:66:ad:73:3b:38:0b:e9:28:e5:b5:7a:
fd:cd:ad:30:a8:cb:3c:5f:5a:c1:e8:23:cc:0b:31:
9d:a7:f6:04:79:d1:9f:29:c7:36:2c:6e:68:ca:63:
27:0b:44:fd:cf:c9:ac:6e:70:86:ae:2f:8f:ab:16:
3c:8d:08:ba:8e:4e:fa:10:7a:0f:7c:fe:6d:69:b5:
5f:ed:f1:0a:08:67:57:bb:ed:c9:97:de:76:3d:dd:
82:3e:26:cc:94:f2:c1:8a:b5:69:31:82:28:8a:7a:
75:94:8f:7e:2d:5a:8a:6c:3d:ad:f6:2d:3a:a5:fd:
d5:19:a1:57:6a:69:6f:01:7c:d9:54:14:47:61:d1:
d9:ea:aa:0c:c5:49:bc:eb:d6:ce:9e:45:f8:b9:a2:
52:9b:5a:c1:f0:a5:6b:de:d8:d1:3b:2b:02:f8:b3:
4a:88:5b:bb:4b:cc:fa:d7:10:07:8d:e6:a6:53:b9:
08:71:b5:8f:b3:f7:4e:6c:6f:6d:82:f5:a2:0c:3e:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:37:8F:40:07:69:E6:69:4A:70:F4:72:8C:89:C9:EC:71:10:DD:F0
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DDePQAdp5mlKcPRyjInJ7HEQ3fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.119.0/24
193.34.235.0/24
193.168.225.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:03:d8:26:0e:50:2c:94:7e:9e:af:f7:a9:ff:d7:23:03:45:
7c:f4:42:4b:a5:7a:1a:d1:1f:91:cc:a5:c3:b9:10:9d:21:6d:
01:8a:a9:89:35:b9:3b:c5:20:9e:42:ba:74:d3:60:95:e7:41:
57:d4:d5:b4:f9:d3:63:55:77:ba:fb:29:18:f9:0d:8f:e2:42:
7f:12:db:38:2a:bc:0b:8b:80:ad:db:86:79:17:11:78:5a:23:
d0:b9:eb:e5:dc:20:51:39:12:13:fd:73:99:f1:c6:cc:51:83:
5c:8c:7d:b0:20:4d:ce:a9:42:6d:01:b2:cc:18:cc:b9:e5:dc:
eb:ad:93:00:09:0d:89:6f:92:60:c0:9a:f5:7e:9c:0c:87:93:
3f:6c:2d:f7:ed:6b:a2:9a:93:db:d7:1e:49:50:f8:ab:5c:26:
86:05:2e:81:1a:0e:73:b5:da:f0:93:10:a7:08:60:ab:78:95:
55:7e:53:10:f1:93:e6:fa:0a:27:42:3b:60:aa:2e:2d:fd:7e:
82:5b:9d:1a:86:7c:aa:41:b1:13:4e:f9:90:7a:c4:c1:f9:3c:
05:ee:25:1b:82:a1:af:ce:5b:31:6b:5c:65:05:74:e6:c9:67:
78:7f:4b:b5:ea:3b:79:28:81:c4:71:d4:4d:f6:41:a1:1a:93:
5f:d6:d2:2f
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA0Tn1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGY5NjM0NWQzZjIyZWRiMzk1ZDI0N2Y3Yjg2ZDJkNzNlNGEwMDkxMB4XDTIyMDEw
MTE2MDQzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGMzNzhmNDAwNzY5
ZTY2OTRhNzBmNDcyOGM4OWM5ZWM3MTEwZGRmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANAo5mmgpxNNKZl+bQJDTiZGc0bdDTEoDkiTYORKsTHOaw5q
dbv/BSBVaz9O5OFQoqIPeKL4F8SGf9JQb08XpGatczs4C+ko5bV6/c2tMKjLPF9a
wegjzAsxnaf2BHnRnynHNixuaMpjJwtE/c/JrG5whq4vj6sWPI0Iuo5O+hB6D3z+
bWm1X+3xCghnV7vtyZfedj3dgj4mzJTywYq1aTGCKIp6dZSPfi1aimw9rfYtOqX9
1RmhV2ppbwF82VQUR2HR2eqqDMVJvOvWzp5F+LmiUptawfCla97Y0TsrAvizSohb
u0vM+tcQB43mplO5CHG1j7P3TmxvbYL1ogw+QzcCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQMN49AB2nmaUpw9HKMicnscRDd8DAfBgNVHSMEGDAWgBS0+WNF0/Iu2zld
JH97htLXPkoAkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RQbGpSZFB5THRzNVhTUl9lNGJTMXo1S0FKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8x
L0REZVBRQWRwNW1sS2NQUnlqSW5KN0hFUTNmQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8xL3RQbGpSZFB5THRz
NVhTUl9lNGJTMXo1S0FKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAAX8dwMEAMEi6wMEAMGo4TANBgkq
hkiG9w0BAQsFAAOCAQEAqgPYJg5QLJR+nq/3qf/XIwNFfPRCS6V6GtEfkcylw7kQ
nSFtAYqpiTW5O8UgnkK6dNNgledBV9TVtPnTY1V3uvspGPkNj+JCfxLbOCq8C4uA
rduGeRcReFoj0Lnr5dwgUTkSE/1zmfHGzFGDXIx9sCBNzqlCbQGyzBjMueXc662T
AAkNiW+SYMCa9X6cDIeTP2wt9+1ropqT29ceSVD4q1wmhgUugRoOc7Xa8JMQpwhg
q3iVVX5TEPGT5voKJ0I7YKouLf1+gludGoZ8qkGxE075kHrEwfk8Be4lG4Khr85b
MWtcZQV05slneH9Lteo7eSiBxHHUTfZBoRqTX9bSLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org