Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/V_oCFR1AZJjxnJP4MmSYihpHaJ8.roa
File: V_oCFR1AZJjxnJP4MmSYihpHaJ8.roa (raw, json)
Hash identifier: jis+gzWfKZX83KJ/iIAI35ArorRy0F6JcUcFnNsVFSQ=
Subject key identifier: 57:FA:02:15:1D:40:64:98:F1:9C:93:F8:32:64:98:8A:1A:47:68:9F
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 179AD02B
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/V_oCFR1AZJjxnJP4MmSYihpHaJ8.roa
Signing time: Sat 01 Jan 2022 13:03:25 +0000
ROA not before: Sat 01 Jan 2022 13:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204063
IP address blocks: 5.1.64.0/21 maxlen: 32
94.247.47.0/24 maxlen: 32
185.90.161.0/24 maxlen: 32
185.90.160.0/24 maxlen: 32
185.90.163.0/24 maxlen: 32
185.90.162.0/24 maxlen: 32
5.1.94.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396021803 (0x179ad02b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 13:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57fa02151d406498f19c93f83264988a1a47689f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:99:82:16:fc:69:68:2e:7f:0a:4e:28:9b:
9f:b3:4e:c1:6a:08:d2:d0:bb:7f:06:d9:90:09:e2:
60:40:24:26:17:67:2f:00:19:93:2d:42:cf:d0:7d:
59:f1:8a:0f:36:46:10:51:b3:24:43:d9:80:fa:e9:
b6:04:b9:60:79:85:1b:92:37:0a:87:27:16:49:09:
61:c8:9f:42:6f:3b:f7:64:af:b1:ce:97:e2:26:c8:
67:97:29:71:b3:00:96:5a:25:4c:95:d2:6b:41:f4:
c2:b0:5a:8a:83:f8:71:d1:80:05:96:56:7f:fd:ea:
7d:b1:d5:19:77:5c:fd:a8:a7:0e:83:cb:c3:d6:3c:
18:55:dc:28:af:46:f7:5c:a9:de:9c:7f:52:8e:29:
e5:6e:c0:ce:fc:6e:f5:ae:2d:1c:15:2c:c2:24:6d:
51:ea:89:bb:be:a6:6b:3d:cd:d6:98:00:fe:16:da:
0f:0f:2a:47:ca:aa:3b:6f:4f:01:54:16:82:c9:cf:
5c:02:23:e9:8b:15:89:be:5b:34:16:6b:9e:18:c2:
87:35:08:c2:95:34:d2:9a:8a:af:23:83:f9:4a:9f:
86:4c:c7:d2:95:fd:a3:76:59:72:35:12:72:9d:b4:
37:96:6f:43:54:d5:37:67:93:52:eb:40:62:db:79:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:02:15:1D:40:64:98:F1:9C:93:F8:32:64:98:8A:1A:47:68:9F
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/V_oCFR1AZJjxnJP4MmSYihpHaJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.64.0/21
5.1.94.0/24
94.247.47.0/24
185.90.160.0/22
Signature Algorithm: sha256WithRSAEncryption
98:f0:81:5c:4d:9e:b0:9f:91:1c:5b:53:58:e5:43:68:82:1d:
59:00:cf:94:26:3b:ba:7d:b0:29:d9:51:b5:b6:7f:7e:00:4c:
34:2a:b0:11:60:ab:76:e6:42:b2:72:67:fd:3e:27:64:9d:a1:
e6:07:de:b3:0b:e3:13:d0:f5:43:6a:33:38:1c:b3:7b:3a:23:
47:81:27:8d:cc:35:10:8a:06:59:f8:6b:58:bc:81:14:39:4f:
06:ba:bb:93:17:ed:e7:94:44:e0:5c:c6:d4:e2:dd:53:c6:53:
0c:f9:fc:b2:00:fa:21:87:98:68:84:06:53:26:dd:00:c3:96:
7e:31:a6:5e:5b:3d:bd:d1:58:d9:56:66:a1:08:ec:25:c5:ac:
d3:61:2d:44:ed:6f:66:2f:eb:86:ab:b2:f8:91:b1:cf:8c:5c:
8a:72:64:fe:a3:57:e6:21:24:89:52:85:12:64:86:c6:a7:6f:
27:9b:b5:35:2d:e1:7f:ee:bf:28:72:74:49:dd:97:d2:0d:3d:
e5:19:9d:27:df:cc:2f:b9:7f:84:d6:fa:44:74:85:5c:71:dc:
56:00:11:d4:2c:04:f7:73:72:1d:71:cf:55:70:27:91:61:7b:
0c:83:f2:48:0a:02:14:f5:59:53:3f:bd:f0:17:52:ea:0d:6d:
30:3d:4b:bb
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEF5rQKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NDI1M2M0ZjIzM2NlOTg0NzY5OWFlNjhlY2JmNWQ3NTE0YjBmYWRiMB4XDTIyMDEw
MTEzMDMyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTdmYTAyMTUxZDQw
NjQ5OGYxOWM5M2Y4MzI2NDk4OGExYTQ3Njg5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL71mYIW/GloLn8KTiibn7NOwWoI0tC7fwbZkAniYEAkJhdn
LwAZky1Cz9B9WfGKDzZGEFGzJEPZgPrptgS5YHmFG5I3CocnFkkJYcifQm8792Sv
sc6X4ibIZ5cpcbMAllolTJXSa0H0wrBaioP4cdGABZZWf/3qfbHVGXdc/ainDoPL
w9Y8GFXcKK9G91yp3px/Uo4p5W7Azvxu9a4tHBUswiRtUeqJu76maz3N1pgA/hba
Dw8qR8qqO29PAVQWgsnPXAIj6YsVib5bNBZrnhjChzUIwpU00pqKryOD+UqfhkzH
0pX9o3ZZcjUScp20N5ZvQ1TVN2eTUutAYtt5HtECAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRX+gIVHUBkmPGck/gyZJiKGkdonzAfBgNVHSMEGDAWgBS0JTxPIzzphHaZ
rmjsv111FLD62zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RDVThUeU04NllSMm1hNW83TDlkZFJTdy10cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDFkNmUxLTVjYWQtNDBkYi05NzczLTU4YjM4ZjVhYzgwYi8x
L1Zfb0NGUjFBWkpqeG5KUDRNbVNZaWhwSGFKOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDFkNmUxLTVjYWQtNDBkYi05NzczLTU4YjM4ZjVhYzgwYi8xL3RDVThUeU04NllS
Mm1hNW83TDlkZFJTdy10cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAwUBQAMEAAUBXgMEAF73LwMEArla
oDANBgkqhkiG9w0BAQsFAAOCAQEAmPCBXE2esJ+RHFtTWOVDaIIdWQDPlCY7un2w
KdlRtbZ/fgBMNCqwEWCrduZCsnJn/T4nZJ2h5gfeswvjE9D1Q2ozOByzezojR4En
jcw1EIoGWfhrWLyBFDlPBrq7kxft55RE4FzG1OLdU8ZTDPn8sgD6IYeYaIQGUybd
AMOWfjGmXls9vdFY2VZmoQjsJcWs02EtRO1vZi/rhquy+JGxz4xcinJk/qNX5iEk
iVKFEmSGxqdvJ5u1NS3hf+6/KHJ0Sd2X0g095RmdJ9/ML7l/hNb6RHSFXHHcVgAR
1CwE93NyHXHPVXAnkWF7DIPySAoCFPVZUz+98BdS6g1tMD1Luw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org