Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/_5ur4Tm3uk-PIzwIRNNLDvzyLis.roa
File: _5ur4Tm3uk-PIzwIRNNLDvzyLis.roa (raw, json)
Hash identifier: /45+v1Qdgz8LTioMzVdWn+0aMnsQOoto6Ft7jk8mk+0=
Subject key identifier: FF:9B:AB:E1:39:B7:BA:4F:8F:23:3C:08:44:D3:4B:0E:FC:F2:2E:2B
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0A3E97EA
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/_5ur4Tm3uk-PIzwIRNNLDvzyLis.roa
Signing time: Sat 01 Jan 2022 09:53:41 +0000
ROA not before: Sat 01 Jan 2022 09:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210107
IP address blocks: 193.36.60.97/32 maxlen: 32
193.36.60.0/24 maxlen: 24
193.36.61.0/24 maxlen: 24
193.36.60.60/32 maxlen: 32
193.36.60.80/32 maxlen: 32
2a0d:d386::/32 maxlen: 32
2a0a:fa40::/32 maxlen: 32
2a0c:4a40::/32 maxlen: 32
2a0c:586::/32 maxlen: 32
2a0d:d387::/32 maxlen: 32
2a0c:587::/32 maxlen: 32
2a0c:584::/32 maxlen: 32
2a0c:4a46::/32 maxlen: 32
2a0a:fa42::/32 maxlen: 32
2a0c:4a42::/32 maxlen: 32
2a0a:fa46::/32 maxlen: 32
2a0c:4a43::/32 maxlen: 32
2a0d:d385::/32 maxlen: 32
2a0c:585::/32 maxlen: 32
2a0c:582::/32 maxlen: 32
2a0a:fa44::/32 maxlen: 32
2a0c:4a44::/32 maxlen: 32
2a0d:d382::/32 maxlen: 32
2a0d:d383::/32 maxlen: 32
2a0a:fa43::/32 maxlen: 32
2a0c:581::/32 maxlen: 32
2a0c:4a45::/32 maxlen: 32
2a0a:fa45::/32 maxlen: 32
2a0d:d381::/32 maxlen: 32
2a0d:d384::/32 maxlen: 32
2a0c:580::/32 maxlen: 32
2a0d:d380::/32 maxlen: 32
2a0c:4a47::/32 maxlen: 32
2a0a:fa47::/32 maxlen: 32
2a0c:583::/32 maxlen: 32
2a0c:4a41::/32 maxlen: 32
2a0a:fa41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171874282 (0xa3e97ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 1 09:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff9babe139b7ba4f8f233c0844d34b0efcf22e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:ed:6f:ef:fe:b3:24:1a:29:4e:49:da:f9:
b4:f9:8d:48:6d:ae:4b:33:65:41:84:df:90:ba:35:
a6:f7:d9:c6:3a:7d:6a:bf:19:15:45:81:5d:94:b9:
e3:f5:a5:26:17:6d:1a:cf:00:8f:6d:3a:de:6d:59:
9c:ee:0b:70:6e:4d:e6:70:09:74:d5:55:ca:0e:c4:
b5:5b:0a:8e:7b:4c:f0:93:d7:3f:55:7b:59:16:1f:
38:6e:1a:59:1a:64:19:4d:49:b0:0a:f2:01:86:fe:
b7:13:b0:01:76:a1:a6:0a:2a:c7:5c:89:67:77:26:
21:42:56:b7:50:3f:49:04:9b:63:73:88:2a:d9:10:
57:2a:58:02:1a:9a:5e:1a:55:f3:d0:a7:a2:ec:57:
ee:df:2d:86:74:52:bf:ee:52:20:f4:d4:8d:c8:71:
7d:24:14:42:0f:a2:78:22:d9:30:61:cc:aa:b5:70:
be:56:86:15:ad:10:70:80:41:df:14:b3:57:81:9a:
80:13:d4:b1:88:cd:5c:de:2e:a8:2d:4b:b5:00:8a:
f7:66:9e:ba:3c:de:20:a1:17:39:de:5c:81:cf:36:
db:de:a7:8c:bb:8d:58:1d:bd:58:55:fc:8c:68:d3:
82:a8:b8:69:6a:57:ed:dd:b3:3c:28:32:be:ce:aa:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:AB:E1:39:B7:BA:4F:8F:23:3C:08:44:D3:4B:0E:FC:F2:2E:2B
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/_5ur4Tm3uk-PIzwIRNNLDvzyLis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.60.0/23
IPv6:
2a0a:fa40::/29
2a0c:580::/29
2a0c:4a40::/29
2a0d:d380::/29
Signature Algorithm: sha256WithRSAEncryption
ab:6d:7f:a2:7d:2c:53:ca:e8:cd:78:46:45:2c:c9:94:6a:7e:
6f:70:c9:c4:5c:f6:fa:57:2e:f8:73:65:2f:cb:2f:1b:bd:8a:
2b:bc:2e:0d:bd:d6:48:4e:0d:9c:c3:3d:4f:87:a5:4d:e0:08:
d0:90:6c:f6:75:24:6d:2d:16:a4:78:38:2a:ef:51:c4:5d:e0:
39:bb:53:7c:63:cd:1c:75:ad:93:12:f2:bc:8d:89:7d:1e:92:
8c:c6:5c:ba:a2:aa:8a:7a:a5:90:59:b9:91:06:89:7c:ec:77:
22:6d:c4:ac:32:8d:7e:80:91:38:15:02:8d:e7:3f:31:b3:81:
91:a3:70:57:cb:2e:f8:47:b9:0b:75:ba:62:16:40:73:4a:ba:
11:96:43:e4:fc:ea:42:e5:c9:5d:70:b6:37:aa:2c:27:d6:78:
4b:f1:75:be:3a:3f:85:b0:9b:c4:1c:a4:78:85:f8:72:72:4f:
f8:f3:db:c2:14:94:15:72:7a:0c:f8:94:b2:de:88:a8:e8:8a:
9f:93:c7:c9:b9:89:ba:a1:8e:4a:0a:1f:b7:00:24:97:b7:4e:
55:3a:f7:87:d0:c3:4e:b4:ab:77:79:72:45:c5:5f:04:1c:b7:
c0:77:a2:3b:59:32:ab:46:c1:91:b0:69:3b:c2:ea:ea:5c:70:
ad:d3:48:f8
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIECj6X6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MDU5MmU2ODg5NWM3MDY4YjQ2NTU1MDg5MTdhZDViYmRkYmQwYTVmMB4XDTIyMDEw
MTA5NTM0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmY5YmFiZTEzOWI3
YmE0ZjhmMjMzYzA4NDRkMzRiMGVmY2YyMmUyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBn7W/v/rMkGilOSdr5tPmNSG2uSzNlQYTfkLo1pvfZxjp9
ar8ZFUWBXZS54/WlJhdtGs8Aj2063m1ZnO4LcG5N5nAJdNVVyg7EtVsKjntM8JPX
P1V7WRYfOG4aWRpkGU1JsAryAYb+txOwAXahpgoqx1yJZ3cmIUJWt1A/SQSbY3OI
KtkQVypYAhqaXhpV89CnouxX7t8thnRSv+5SIPTUjchxfSQUQg+ieCLZMGHMqrVw
vlaGFa0QcIBB3xSzV4GagBPUsYjNXN4uqC1LtQCK92aeujzeIKEXOd5cgc82296n
jLuNWB29WFX8jGjTgqi4aWpX7d2zPCgyvs6qi3kCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBT/m6vhObe6T48jPAhE00sO/PIuKzAfBgNVHSMEGDAWgBRQWS5oiVxwaLRl
VQiRetW73b0KXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VGa3VhSWxjY0dpMFpWVUlrWHJWdTkyOUNsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvMmE4MTAwLTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8x
L181dXI0VG0zdWstUEl6d0lSTk5MRHZ6eUxpcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
MmE4MTAwLTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8xL1VGa3VhSWxjY0dp
MFpWVUlrWHJWdTkyOUNsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwDAQCAAEwBgMEAcEkPDAiBAIAAjAcAwUDKgr6QAMF
AyoMBYADBQMqDEpAAwUDKg3TgDANBgkqhkiG9w0BAQsFAAOCAQEAq21/on0sU8ro
zXhGRSzJlGp+b3DJxFz2+lcu+HNlL8svG72KK7wuDb3WSE4NnMM9T4elTeAI0JBs
9nUkbS0WpHg4Ku9RxF3gObtTfGPNHHWtkxLyvI2JfR6SjMZcuqKqinqlkFm5kQaJ
fOx3Im3ErDKNfoCROBUCjec/MbOBkaNwV8su+Ee5C3W6YhZAc0q6EZZD5PzqQuXJ
XXC2N6osJ9Z4S/F1vjo/hbCbxBykeIX4cnJP+PPbwhSUFXJ6DPiUst6IqOiKn5PH
ybmJuqGOSgoftwAkl7dOVTr3h9DDTrSrd3lyRcVfBBy3wHeiO1kyq0bBkbBpO8Lq
6lxwrdNI+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org