Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/X4G_YENW4bW3JB0Hneg7x-oh0XU.roa
File: X4G_YENW4bW3JB0Hneg7x-oh0XU.roa (raw, json)
Hash identifier: zaA+eyYw+zAIZYlhsxOh63uwLeeuxili3XntmOlrPBY=
Subject key identifier: 5F:81:BF:60:43:56:E1:B5:B7:24:1D:07:9D:E8:3B:C7:EA:21:D1:75
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 17A7AF59
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/X4G_YENW4bW3JB0Hneg7x-oh0XU.roa
Signing time: Sat 01 Jan 2022 13:03:31 +0000
ROA not before: Sat 01 Jan 2022 13:03:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212567
IP address blocks: 5.1.66.0/24 maxlen: 32
185.150.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396865369 (0x17a7af59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 13:03:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f81bf604356e1b5b7241d079de83bc7ea21d175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:c8:2a:cd:4b:d9:c1:14:aa:15:64:c6:c1:
d0:05:99:fe:ce:df:d3:3e:0e:72:bb:9f:aa:aa:19:
e2:04:83:a8:a7:2c:cf:f8:b3:8c:3d:92:ee:80:b0:
07:a0:ff:a7:b2:82:42:5e:20:d8:97:4b:75:b1:2f:
0a:bb:a8:96:51:3b:c2:c8:b8:de:c5:92:1f:22:af:
b7:f8:4a:31:aa:fe:85:78:d2:e2:c9:c8:61:82:96:
21:94:5d:de:5e:9f:38:dc:a2:7f:fa:6e:b3:0c:8f:
f6:f6:b0:06:cb:69:77:b0:cf:a3:31:c9:a1:2f:60:
70:b8:aa:39:05:c7:45:b0:6e:d2:79:01:b3:ec:d2:
78:5e:86:f0:5a:df:49:f3:26:27:87:f0:58:b9:5f:
78:db:9a:bb:0f:4f:52:c9:f8:06:ca:fa:35:5b:69:
60:82:a4:a8:29:75:17:a8:7e:b5:da:5e:95:37:ad:
c4:88:58:ec:b0:21:d7:2f:8a:ad:8d:2e:74:1f:58:
20:d5:13:e8:af:f0:45:71:d9:f5:fd:56:0a:fe:e4:
dc:d8:58:a4:e2:bd:5f:3f:e8:bb:7d:e6:f7:29:49:
fd:39:7b:37:5d:2f:19:8e:8e:48:cd:04:51:51:5e:
a7:cd:88:7b:2d:34:da:db:19:87:4c:44:f2:61:d5:
69:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:BF:60:43:56:E1:B5:B7:24:1D:07:9D:E8:3B:C7:EA:21:D1:75
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/X4G_YENW4bW3JB0Hneg7x-oh0XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.66.0/24
185.150.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d8:5f:7f:9a:46:f0:8b:f8:d8:76:ea:56:a2:a5:95:70:b3:
6c:ff:56:7a:b1:2e:43:0c:d6:c6:f9:04:90:b0:45:d7:b4:87:
d3:68:09:4a:54:ec:3b:c2:72:45:1e:95:d2:88:5c:8c:8c:ec:
16:50:04:7e:c5:5b:a1:45:fa:75:e1:cd:9f:91:fe:b8:c2:7d:
21:39:af:e8:6c:38:fd:a1:30:7a:8b:78:5e:c5:3e:d7:f4:d2:
b7:73:7f:2b:b0:89:08:b0:bd:71:6e:fb:51:a1:fe:ba:00:a9:
e1:52:6a:e3:91:77:7c:69:25:6d:ac:4f:e4:1c:67:fe:05:22:
87:ea:f6:fa:c5:b6:58:1d:ea:52:50:01:82:40:84:b4:2b:5d:
32:7a:4b:45:9a:f0:24:41:84:c7:e6:0d:af:8f:8a:30:d0:2f:
14:47:84:84:3f:9e:f1:9c:1f:e6:fc:b7:5d:07:d4:4c:50:ef:
e6:fd:eb:54:01:a8:31:f8:f9:7a:22:f3:ec:8c:da:50:f8:d7:
8f:85:8b:bd:05:b3:15:12:8e:c8:7c:1c:d2:10:68:95:dc:6b:
d4:85:09:0c:6e:75:a4:ea:e3:a2:8a:d6:1c:18:65:6f:66:d1:
85:3f:0b:d7:d6:f2:a8:b4:86:0c:f3:f7:42:6a:3f:92:e9:90:
a3:40:a5:4a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEF6evWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NDI1M2M0ZjIzM2NlOTg0NzY5OWFlNjhlY2JmNWQ3NTE0YjBmYWRiMB4XDTIyMDEw
MTEzMDMzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWY4MWJmNjA0MzU2
ZTFiNWI3MjQxZDA3OWRlODNiYzdlYTIxZDE3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/5yCrNS9nBFKoVZMbB0AWZ/s7f0z4OcrufqqoZ4gSDqKcs
z/izjD2S7oCwB6D/p7KCQl4g2JdLdbEvCruollE7wsi43sWSHyKvt/hKMar+hXjS
4snIYYKWIZRd3l6fONyif/puswyP9vawBstpd7DPozHJoS9gcLiqOQXHRbBu0nkB
s+zSeF6G8FrfSfMmJ4fwWLlfeNuauw9PUsn4Bsr6NVtpYIKkqCl1F6h+tdpelTet
xIhY7LAh1y+KrY0udB9YINUT6K/wRXHZ9f1WCv7k3NhYpOK9Xz/ou33m9ylJ/Tl7
N10vGY6OSM0EUVFep82Iey002tsZh0xE8mHVaXECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRfgb9gQ1bhtbckHQed6DvH6iHRdTAfBgNVHSMEGDAWgBS0JTxPIzzphHaZ
rmjsv111FLD62zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RDVThUeU04NllSMm1hNW83TDlkZFJTdy10cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDFkNmUxLTVjYWQtNDBkYi05NzczLTU4YjM4ZjVhYzgwYi8x
L1g0R19ZRU5XNGJXM0pCMEhuZWc3eC1vaDBYVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDFkNmUxLTVjYWQtNDBkYi05NzczLTU4YjM4ZjVhYzgwYi8xL3RDVThUeU04NllS
Mm1hNW83TDlkZFJTdy10cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAUBQgMEALmWYzANBgkqhkiG9w0B
AQsFAAOCAQEAndhff5pG8Iv42HbqVqKllXCzbP9WerEuQwzWxvkEkLBF17SH02gJ
SlTsO8JyRR6V0ohcjIzsFlAEfsVboUX6deHNn5H+uMJ9ITmv6Gw4/aEweot4XsU+
1/TSt3N/K7CJCLC9cW77UaH+ugCp4VJq45F3fGklbaxP5Bxn/gUih+r2+sW2WB3q
UlABgkCEtCtdMnpLRZrwJEGEx+YNr4+KMNAvFEeEhD+e8Zwf5vy3XQfUTFDv5v3r
VAGoMfj5eiLz7IzaUPjXj4WLvQWzFRKOyHwc0hBoldxr1IUJDG51pOrjoorWHBhl
b2bRhT8L19byqLSGDPP3Qmo/kumQo0ClSg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:31 2024 by rpki-client on console-ams.rpki-client.org