Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1466d7-d877-47a9-a36a-39d03edc17a4/1/CEFY-Kua6mhQXsWIc6FH5PoV99Y.roa
File: CEFY-Kua6mhQXsWIc6FH5PoV99Y.roa (raw, json)
Hash identifier: 8wyqMs1BDch9DDJd1JYJXtImD8plTZxBHIxBjHlJX6U=
Subject key identifier: 08:41:58:F8:AB:9A:EA:68:50:5E:C5:88:73:A1:47:E4:FA:15:F7:D6
Certificate issuer: /CN=7efd087431db127c15ce75fdd176d3b6f857d7ec
Certificate serial: 023DE4
Authority key identifier: 7E:FD:08:74:31:DB:12:7C:15:CE:75:FD:D1:76:D3:B6:F8:57:D7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fv0IdDHbEnwVznX90XbTtvhX1-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1466d7-d877-47a9-a36a-39d03edc17a4/1/CEFY-Kua6mhQXsWIc6FH5PoV99Y.roa
Signing time: Thu 07 Apr 2022 12:01:12 +0000
ROA not before: Thu 07 Apr 2022 12:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39605
IP address blocks: 5.42.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146916 (0x23de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7efd087431db127c15ce75fdd176d3b6f857d7ec
Validity
Not Before: Apr 7 12:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=084158f8ab9aea68505ec58873a147e4fa15f7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:8d:9d:f2:25:93:9a:54:35:a2:0e:06:e6:
bb:a3:05:2a:04:bf:8b:3c:28:fd:41:9d:1d:19:95:
13:fe:82:10:84:aa:c6:d7:1f:1b:92:fe:0f:5c:bd:
8c:3f:cb:6d:e7:49:a7:2c:fb:1a:0c:a7:e4:08:9d:
5a:7d:17:68:1c:a6:8f:7e:ee:0c:2b:90:6a:40:f9:
97:79:a8:42:1c:ae:2c:11:28:c4:b8:e4:13:22:01:
cf:97:44:c0:e6:25:83:b4:87:ba:77:13:41:10:7c:
70:33:54:dd:e6:4e:58:69:6f:31:86:72:18:67:fc:
60:72:02:32:96:4e:a5:3d:94:86:70:fc:5f:71:36:
2e:ff:fe:91:2b:bd:c8:33:27:ba:73:4b:00:de:63:
d6:db:4f:0c:eb:2d:34:86:82:47:41:7e:7f:eb:a3:
0f:ab:47:a3:c2:a2:04:be:af:89:59:79:9b:84:76:
2a:8c:5f:76:41:c5:26:9c:9c:ec:ed:e4:ba:f4:82:
bb:28:48:df:4c:af:b8:e6:e4:87:2a:b6:53:51:11:
65:ee:e3:c6:7a:f8:98:dc:e0:d1:7c:cb:a1:5d:a3:
cb:68:10:c3:8a:23:96:d3:63:59:93:15:59:8b:d3:
d6:cc:21:ef:01:fa:02:c9:63:1b:82:7a:be:a6:f3:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:58:F8:AB:9A:EA:68:50:5E:C5:88:73:A1:47:E4:FA:15:F7:D6
X509v3 Authority Key Identifier:
keyid:7E:FD:08:74:31:DB:12:7C:15:CE:75:FD:D1:76:D3:B6:F8:57:D7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fv0IdDHbEnwVznX90XbTtvhX1-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1466d7-d877-47a9-a36a-39d03edc17a4/1/CEFY-Kua6mhQXsWIc6FH5PoV99Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1466d7-d877-47a9-a36a-39d03edc17a4/1/fv0IdDHbEnwVznX90XbTtvhX1-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.197.0/24
Signature Algorithm: sha256WithRSAEncryption
52:99:86:fb:ba:9b:b3:11:c4:d4:74:0f:d3:28:13:bd:6a:eb:
7a:3b:a7:b7:11:2c:45:2d:c8:66:90:3a:8d:da:28:9c:1f:a8:
61:80:4a:1f:b2:e1:0e:bb:e5:6f:e3:74:f7:ee:f1:12:69:91:
fd:a4:57:07:bb:36:22:7e:cf:90:10:e6:94:e0:81:21:03:82:
5a:6e:b6:09:f0:41:dd:ff:9a:6d:da:12:65:a5:a8:aa:e2:44:
f2:dd:af:ab:e9:88:56:79:ad:43:31:5c:36:fb:08:89:c0:60:
4a:72:49:d2:db:40:ba:d4:80:85:b8:c5:12:30:e9:40:b0:4f:
4c:6e:72:7e:82:ed:c6:e7:e3:a3:f9:20:2c:50:15:fb:95:84:
d3:b4:7c:cf:8e:fe:aa:c8:93:c1:75:0b:84:5c:ea:12:88:ae:
36:15:a6:cd:56:54:75:f3:98:58:1f:49:b9:eb:03:11:07:4c:
de:b0:00:1e:26:c9:98:51:a7:1e:1b:42:3c:51:34:aa:05:d8:
b8:13:54:81:69:ee:c3:f7:1a:85:9b:7a:3e:a8:f5:7c:fd:f6:
ab:7d:e5:cd:51:1d:8b:11:a9:92:4f:0a:d7:3c:13:54:97:bd:
8e:a5:b0:b7:d2:c8:bb:72:2f:1e:5a:17:a0:e5:11:c7:1a:0d:
d8:6e:57:fc
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAj3kMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdl
ZmQwODc0MzFkYjEyN2MxNWNlNzVmZGQxNzZkM2I2Zjg1N2Q3ZWMwHhcNMjIwNDA3
MTIwMTEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwODQxNThmOGFiOWFl
YTY4NTA1ZWM1ODg3M2ExNDdlNGZhMTVmN2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvyiNnfIlk5pUNaIOBua7owUqBL+LPCj9QZ0dGZUT/oIQhKrG
1x8bkv4PXL2MP8tt50mnLPsaDKfkCJ1afRdoHKaPfu4MK5BqQPmXeahCHK4sESjE
uOQTIgHPl0TA5iWDtIe6dxNBEHxwM1Td5k5YaW8xhnIYZ/xgcgIylk6lPZSGcPxf
cTYu//6RK73IMye6c0sA3mPW208M6y00hoJHQX5/66MPq0ejwqIEvq+JWXmbhHYq
jF92QcUmnJzs7eS69IK7KEjfTK+45uSHKrZTURFl7uPGeviY3ODRfMuhXaPLaBDD
iiOW02NZkxVZi9PWzCHvAfoCyWMbgnq+pvMm2QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFAhBWPirmupoUF7FiHOhR+T6FffWMB8GA1UdIwQYMBaAFH79CHQx2xJ8Fc51
/dF207b4V9fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZnYwSWRESGJFbndWem5YOTBYYlR0dmhYMS13LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZC8xNDY2ZDctZDg3Ny00N2E5LWEzNmEtMzlkMDNlZGMxN2E0LzEv
Q0VGWS1LdWE2bWhRWHNXSWM2Rkg1UG9WOTlZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8x
NDY2ZDctZDg3Ny00N2E5LWEzNmEtMzlkMDNlZGMxN2E0LzEvZnYwSWRESGJFbndW
em5YOTBYYlR0dmhYMS13LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSrFMA0GCSqGSIb3DQEBCwUAA4IB
AQBSmYb7upuzEcTUdA/TKBO9aut6O6e3ESxFLchmkDqN2iicH6hhgEofsuEOu+Vv
43T37vESaZH9pFcHuzYifs+QEOaU4IEhA4JabrYJ8EHd/5pt2hJlpaiq4kTy3a+r
6YhWea1DMVw2+wiJwGBKcknS20C61ICFuMUSMOlAsE9MbnJ+gu3G5+Oj+SAsUBX7
lYTTtHzPjv6qyJPBdQuEXOoSiK42FabNVlR185hYH0m56wMRB0zesAAeJsmYUace
G0I8UTSqBdi4E1SBae7D9xqFm3o+qPV8/farfeXNUR2LEamSTwrXPBNUl72OpbC3
0si7ci8eWheg5RHHGg3Yblf8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:42 2024 by rpki-client on console-ams.rpki-client.org