Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/f0X2gJgLMuc1W09zgrjAwcW-j_I.roa
File: f0X2gJgLMuc1W09zgrjAwcW-j_I.roa (raw, json)
Hash identifier: WOxcP8/XSWnSVqgBN2oasrHSrPVIRTqmxJ04QVsGl/c=
Subject key identifier: 7F:45:F6:80:98:0B:32:E7:35:5B:4F:73:82:B8:C0:C1:C5:BE:8F:F2
Certificate issuer: /CN=728c2bfd6bb503a01d018602bda152d734ed56f0
Certificate serial: 102B621F
Authority key identifier: 72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/f0X2gJgLMuc1W09zgrjAwcW-j_I.roa
Signing time: Sat 01 Jan 2022 11:00:12 +0000
ROA not before: Sat 01 Jan 2022 11:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209094
IP address blocks: 5.182.188.0/24 maxlen: 24
2a0e:6400::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271278623 (0x102b621f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728c2bfd6bb503a01d018602bda152d734ed56f0
Validity
Not Before: Jan 1 11:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f45f680980b32e7355b4f7382b8c0c1c5be8ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:4b:9d:5b:e3:3f:9a:bd:35:f1:95:78:21:
ea:0b:06:37:c9:82:03:3f:e7:43:36:5b:92:61:a1:
84:e0:d0:83:98:12:d0:bd:3f:50:2b:45:c1:c9:dc:
0a:6a:23:92:d5:36:8b:98:28:2f:71:b6:dd:3a:c9:
16:59:bc:36:9e:b8:82:6e:25:3f:15:ee:f5:16:20:
cd:89:37:d0:76:cb:91:11:e7:e6:ef:90:98:78:86:
8a:01:89:0d:8e:88:f6:a7:86:09:0d:7c:65:2c:a4:
b1:1e:a4:a5:b3:88:31:cf:80:db:ee:a5:2f:da:db:
28:a1:2b:0c:85:fc:18:b7:3c:fc:a2:d8:1b:96:b0:
10:4f:26:0e:db:3f:22:d3:f9:45:73:0b:f9:82:1c:
e4:b8:af:de:4b:95:90:ef:ad:86:ac:f0:98:7e:ba:
51:53:8b:6c:46:ee:56:fd:e6:94:cc:e5:ba:29:a4:
e8:e7:35:16:21:d4:68:8f:e7:e2:23:ca:f7:3a:41:
d9:2c:71:a9:38:29:d7:03:70:a3:f2:fa:8e:6f:52:
5e:05:63:47:88:8a:0e:be:c5:ab:e2:25:15:cb:b1:
fe:b3:f1:3d:c3:0b:7a:6d:89:c4:b1:c1:a3:2e:51:
2a:33:6c:27:58:d2:89:d6:b7:64:41:64:05:fa:38:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:45:F6:80:98:0B:32:E7:35:5B:4F:73:82:B8:C0:C1:C5:BE:8F:F2
X509v3 Authority Key Identifier:
keyid:72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/f0X2gJgLMuc1W09zgrjAwcW-j_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.188.0/24
IPv6:
2a0e:6400::/32
Signature Algorithm: sha256WithRSAEncryption
36:e8:fa:71:d8:44:d5:dc:f3:ac:c4:72:df:3f:1e:9a:69:78:
13:11:40:fa:e8:72:6f:4b:a5:73:52:21:c7:8e:12:b0:ea:38:
80:33:4b:64:e8:b8:17:ea:0e:2b:fe:f4:49:ec:1b:c1:51:7f:
36:30:f1:8b:17:43:1b:b5:2d:b5:e3:0f:9a:99:3a:f3:90:7c:
87:19:41:63:fb:21:29:26:84:b6:25:15:1c:95:17:c7:13:b4:
af:eb:e4:53:9a:47:c1:e8:6d:c3:26:68:07:e2:83:70:64:6c:
b9:6c:fa:c7:ef:0b:de:1d:eb:d9:43:6f:fe:6f:ed:88:99:b5:
ba:96:e1:8b:8a:b4:f1:56:90:f6:85:77:f8:ed:8e:72:54:83:
94:ca:5d:68:dc:7b:f8:81:a2:d9:47:5b:d0:19:3c:ab:8f:bd:
04:b4:34:51:59:6e:b6:d7:38:3c:8c:29:26:b7:41:30:03:3a:
98:c1:a3:17:5b:e5:95:38:dc:b2:29:7f:8f:fe:b0:bc:b0:18:
54:fd:7a:17:8c:55:a9:16:59:44:6f:70:86:da:66:71:9f:3d:
25:08:a8:fa:84:73:8e:25:5f:3b:3b:94:53:90:72:4a:00:fa:
d3:54:9b:10:53:be:2c:4c:c9:8d:7b:bb:eb:69:37:57:3d:93:
9e:cd:17:bd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEECtiHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjhjMmJmZDZiYjUwM2EwMWQwMTg2MDJiZGExNTJkNzM0ZWQ1NmYwMB4XDTIyMDEw
MTExMDAxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Y0NWY2ODA5ODBi
MzJlNzM1NWI0ZjczODJiOGMwYzFjNWJlOGZmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKBrS51b4z+avTXxlXgh6gsGN8mCAz/nQzZbkmGhhODQg5gS
0L0/UCtFwcncCmojktU2i5goL3G23TrJFlm8Np64gm4lPxXu9RYgzYk30HbLkRHn
5u+QmHiGigGJDY6I9qeGCQ18ZSyksR6kpbOIMc+A2+6lL9rbKKErDIX8GLc8/KLY
G5awEE8mDts/ItP5RXML+YIc5Liv3kuVkO+thqzwmH66UVOLbEbuVv3mlMzluimk
6Oc1FiHUaI/n4iPK9zpB2SxxqTgp1wNwo/L6jm9SXgVjR4iKDr7Fq+IlFcux/rPx
PcMLem2JxLHBoy5RKjNsJ1jSida3ZEFkBfo4AY0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBR/RfaAmAsy5zVbT3OCuMDBxb6P8jAfBgNVHSMEGDAWgBRyjCv9a7UDoB0B
hgK9oVLXNO1W8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Nvd3JfV3UxQTZBZEFZWUN2YUZTMXpUdFZ2QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2UvNjdmNDJlLTcwNjItNDExMi1hZDQyLTkzNDlmMTBhMjY0OS8x
L2YwWDJnSmdMTXVjMVcwOXpncmpBd2NXLWpfSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Uv
NjdmNDJlLTcwNjItNDExMi1hZDQyLTkzNDlmMTBhMjY0OS8xL2Nvd3JfV3UxQTZB
ZEFZWUN2YUZTMXpUdFZ2QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAAW2vDANBAIAAjAHAwUAKg5kADAN
BgkqhkiG9w0BAQsFAAOCAQEANuj6cdhE1dzzrMRy3z8emml4ExFA+uhyb0ulc1Ih
x44SsOo4gDNLZOi4F+oOK/70SewbwVF/NjDxixdDG7UtteMPmpk685B8hxlBY/sh
KSaEtiUVHJUXxxO0r+vkU5pHwehtwyZoB+KDcGRsuWz6x+8L3h3r2UNv/m/tiJm1
upbhi4q08VaQ9oV3+O2OclSDlMpdaNx7+IGi2Udb0Bk8q4+9BLQ0UVluttc4PIwp
JrdBMAM6mMGjF1vllTjcsil/j/6wvLAYVP16F4xVqRZZRG9whtpmcZ89JQio+oRz
jiVfOzuUU5BySgD601SbEFO+LEzJjXu762k3Vz2Tns0XvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:25 2024 by rpki-client on console-fra.rpki-client.org