Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/dnDkBzXYUEJ3_2t2WYxycBg6H9Q.roa
File: dnDkBzXYUEJ3_2t2WYxycBg6H9Q.roa (raw, json)
Hash identifier: pck5+8goEGKoXrEjBDeAYYJv9+CPAeCicVsSJrOEDns=
Subject key identifier: 76:70:E4:07:35:D8:50:42:77:FF:6B:76:59:8C:72:70:18:3A:1F:D4
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 09702B20
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/dnDkBzXYUEJ3_2t2WYxycBg6H9Q.roa
Signing time: Sat 01 Jan 2022 10:04:06 +0000
ROA not before: Sat 01 Jan 2022 10:04:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36352
IP address blocks: 5.226.171.0/24 maxlen: 24
5.226.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158346016 (0x9702b20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Jan 1 10:04:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7670e40735d8504277ff6b76598c7270183a1fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:2a:60:66:f3:a4:c3:8d:4b:38:07:f0:1b:
a2:e1:aa:dd:74:09:5d:38:2e:ad:5a:5a:d8:8c:28:
80:bf:59:03:46:5a:8c:1d:06:51:22:91:a1:18:b8:
42:38:b1:b4:69:5f:a6:51:5e:ce:f1:f9:7c:d1:f2:
75:7e:fa:14:60:0b:d3:c5:75:64:52:43:7e:63:a3:
68:3e:03:0a:49:10:ff:19:e5:d7:ca:32:47:dc:ba:
6e:99:51:f6:6e:28:82:3a:34:99:37:05:fc:85:68:
f4:41:71:a3:aa:ae:bd:b7:84:fc:fe:3f:84:9f:7a:
1f:7c:02:1e:d4:46:07:45:8c:46:8d:d7:89:65:96:
50:1d:31:94:44:dc:34:a4:b0:b0:22:5c:0c:dc:1c:
b3:f4:4c:96:c2:e1:98:8f:59:12:23:bd:5d:d1:3b:
b3:a6:94:42:2d:e5:97:a9:74:0a:d0:27:8f:a1:fe:
f4:56:ec:1c:8c:da:21:bf:22:47:33:c1:f9:43:46:
98:4c:5c:97:47:55:5a:e2:e5:58:ef:af:61:b0:51:
af:49:94:43:49:e9:f9:dd:49:6e:db:fa:ac:04:36:
9b:77:5d:95:40:10:01:da:b0:35:bf:df:40:ba:6a:
8f:45:f1:fa:23:8e:99:32:40:5a:63:61:88:3b:cd:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:70:E4:07:35:D8:50:42:77:FF:6B:76:59:8C:72:70:18:3A:1F:D4
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/dnDkBzXYUEJ3_2t2WYxycBg6H9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.171.0/24
5.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
89:08:2d:d5:9c:5d:36:c8:37:87:9c:9e:24:cf:93:8d:d4:a5:
d2:3a:2f:6a:27:bb:ef:38:6a:5e:be:6b:01:45:15:fc:f9:a9:
60:5d:9a:69:df:f1:78:81:30:77:d2:b2:25:29:ed:46:26:d5:
a5:9e:ef:9d:cd:aa:ac:31:0e:66:4c:d7:e1:19:60:e7:b8:55:
8a:3e:61:2d:2a:a7:1b:d0:21:26:df:af:a4:a3:bf:ed:bc:c7:
7b:eb:84:4e:1d:d6:b7:b1:84:39:52:77:fc:45:36:64:a5:af:
e2:27:88:af:b4:86:09:41:07:14:f0:b0:d0:13:0a:36:15:b4:
97:50:cc:37:ca:91:37:12:db:1b:06:a6:cd:06:40:53:3a:5e:
85:63:e4:23:8b:2b:a6:9e:76:61:a6:e7:28:b2:ce:e7:d0:70:
81:11:18:d7:3b:d5:2d:eb:8e:39:e5:3a:4b:65:e5:9e:e1:af:
5b:c8:ac:f3:56:9a:fd:d1:fc:de:0e:4c:f4:12:a2:23:0e:cc:
5a:a6:ce:54:ce:8e:e9:2f:2f:ea:ab:16:0d:61:48:0b:fc:47:
3c:8e:c3:26:0d:20:e6:6f:2b:23:98:48:46:c7:0e:44:76:d3:
01:3c:99:bc:aa:0d:7e:3e:73:24:df:15:30:66:63:d0:10:ae:
82:ae:2b:dd
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECXArIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OTMzNDgxZDNmYTQ4NzEwZGNiOTczZmRjZDI5MzQwZGVkYjYyMjlhMB4XDTIyMDEw
MTEwMDQwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzY3MGU0MDczNWQ4
NTA0Mjc3ZmY2Yjc2NTk4YzcyNzAxODNhMWZkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJgSKmBm86TDjUs4B/AbouGq3XQJXTgurVpa2IwogL9ZA0Za
jB0GUSKRoRi4QjixtGlfplFezvH5fNHydX76FGAL08V1ZFJDfmOjaD4DCkkQ/xnl
18oyR9y6bplR9m4ogjo0mTcF/IVo9EFxo6quvbeE/P4/hJ96H3wCHtRGB0WMRo3X
iWWWUB0xlETcNKSwsCJcDNwcs/RMlsLhmI9ZEiO9XdE7s6aUQi3ll6l0CtAnj6H+
9FbsHIzaIb8iRzPB+UNGmExcl0dVWuLlWO+vYbBRr0mUQ0np+d1Jbtv6rAQ2m3dd
lUAQAdqwNb/fQLpqj0Xx+iOOmTJAWmNhiDvNq0kCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR2cOQHNdhQQnf/a3ZZjHJwGDof1DAfBgNVHSMEGDAWgBTJM0gdP6SHENy5
c/3NKTQN7bYimjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lUTklIVC1raHhEY3VYUDl6U2swRGUyMklwby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2UvNzMyODAxLTYyOTQtNDEyYi05NTVlLWZlZmQzNzY2Njc0MS8x
L2RuRGtCelhZVUVKM18ydDJXWXh5Y0JnNkg5US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Uv
NzMyODAxLTYyOTQtNDEyYi05NTVlLWZlZmQzNzY2Njc0MS8xL3lUTklIVC1raHhE
Y3VYUDl6U2swRGUyMklwby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAXiqwMEAAXirTANBgkqhkiG9w0B
AQsFAAOCAQEAiQgt1ZxdNsg3h5yeJM+TjdSl0jovaie77zhqXr5rAUUV/PmpYF2a
ad/xeIEwd9KyJSntRibVpZ7vnc2qrDEOZkzX4Rlg57hVij5hLSqnG9AhJt+vpKO/
7bzHe+uETh3Wt7GEOVJ3/EU2ZKWv4ieIr7SGCUEHFPCw0BMKNhW0l1DMN8qRNxLb
GwamzQZAUzpehWPkI4srpp52YabnKLLO59BwgREY1zvVLeuOOeU6S2XlnuGvW8is
81aa/dH83g5M9BKiIw7MWqbOVM6O6S8v6qsWDWFIC/xHPI7DJg0g5m8rI5hIRscO
RHbTATyZvKoNfj5zJN8VMGZj0BCugq4r3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:25 2024 by rpki-client on console-fra.rpki-client.org