Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/5NlbQEtI3z-diSnjnN3OiJDGTEs.roa
File: 5NlbQEtI3z-diSnjnN3OiJDGTEs.roa (raw, json)
Hash identifier: aAo/lLK7HEoJB9MVAqOb89qyWGYawuXXm9ljJcRYg/c=
Subject key identifier: E4:D9:5B:40:4B:48:DF:3F:9D:89:29:E3:9C:DD:CE:88:90:C6:4C:4B
Certificate issuer: /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial: 01825EE1F60CADADEA835A47E2A319F688B8
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/5NlbQEtI3z-diSnjnN3OiJDGTEs.roa
Signing time: Tue 02 Aug 2022 14:07:23 +0000
ROA not before: Tue 02 Aug 2022 14:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49911
IP address blocks: 185.76.49.0/24 maxlen: 24
185.76.48.0/22 maxlen: 22
185.76.48.0/24 maxlen: 24
185.76.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:e1:f6:0c:ad:ad:ea:83:5a:47:e2:a3:19:f6:88:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
Validity
Not Before: Aug 2 14:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4d95b404b48df3f9d8929e39cddce8890c64c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b9:b1:39:1a:e0:85:d5:71:0d:09:1e:bd:cb:
e0:27:e5:a7:be:5d:0b:f0:af:54:0e:93:09:ec:30:
88:5c:ed:b4:57:f8:94:8f:a5:a3:92:82:d5:8c:86:
b3:fa:64:1e:9a:0d:ed:d6:47:d8:28:fc:33:a0:b0:
cd:2a:8c:a9:73:6e:02:ed:c4:60:96:a2:49:dc:a1:
70:d9:3e:4d:f6:08:f1:f8:1a:26:fa:ef:74:37:24:
e1:61:6a:4e:35:42:59:53:a0:5a:7e:d0:40:54:d6:
2b:c3:8b:6d:cc:55:8a:d8:23:30:a1:1b:3f:3d:dd:
59:c3:38:0d:06:53:82:42:54:d5:52:0f:78:1b:b1:
68:43:cf:15:9c:a1:21:37:6a:29:da:5c:c8:b7:a5:
92:fb:c6:a4:c8:b3:42:b5:4e:3f:3e:4d:b4:3d:8d:
c0:9a:68:b0:10:2b:5b:3d:6e:7a:f0:f3:c8:6b:0b:
7e:62:58:91:15:78:63:75:39:d2:03:12:76:37:b8:
28:ef:fd:62:72:bf:0b:35:a7:17:75:d1:88:df:ac:
45:49:c2:bf:39:b2:d3:ec:89:47:68:4f:16:a0:93:
93:c0:d0:b1:e3:a1:dd:25:d0:d1:ad:5a:4e:47:fb:
63:df:07:2b:c6:9c:82:48:f1:75:f2:65:2f:2b:19:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:5B:40:4B:48:DF:3F:9D:89:29:E3:9C:DD:CE:88:90:C6:4C:4B
X509v3 Authority Key Identifier:
keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/5NlbQEtI3z-diSnjnN3OiJDGTEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:61:91:33:3e:23:0d:2b:ec:d6:8a:9f:32:0e:e5:77:42:9c:
7b:4b:ee:ed:50:c1:a9:16:8a:7d:76:3d:80:af:f1:a3:05:af:
79:af:60:e8:99:ec:87:e3:1c:ff:a8:87:f1:f9:fb:7d:87:da:
1f:38:bf:f7:96:79:66:29:8f:c3:95:56:fc:70:3c:a3:b7:32:
66:e0:78:48:0c:62:6d:14:06:0d:42:de:1a:6d:e7:5e:ec:67:
a5:43:3c:63:91:7c:98:6c:b8:41:2e:b3:51:17:f6:ef:f1:d5:
ea:8c:70:fb:45:de:1b:03:18:bd:6a:0f:0a:27:c4:e4:9c:99:
38:95:31:26:c5:73:06:3d:f4:8f:6b:c5:67:8e:64:41:51:be:
0c:6d:bd:8a:66:6b:0b:9d:1a:94:e7:cb:eb:dc:75:ad:cd:22:
f7:d5:dc:c9:45:f4:4b:32:80:55:f5:c3:21:0e:6f:61:9a:32:
47:5e:6d:d8:9a:f4:d9:b9:b2:3e:ae:b0:06:16:da:09:eb:54:
2c:07:15:67:2a:c3:49:32:51:e8:59:07:ba:8c:a4:d7:6b:b1:
3b:2a:15:fb:c6:82:95:25:4a:c8:a8:a5:52:a0:da:76:ef:54:
00:d6:1a:4e:ea:6c:0f:c1:dc:77:47:16:e0:cc:0d:58:69:fc:
22:f5:f0:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJe4fYMra3qg1pH4qMZ9oi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MThiZTE5YzEwOTgwZjE1YmNkZWUwNzY2OTAwNzg0OTFh
OGFhMjEwHhcNMjIwODAyMTQwNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGQ5NWI0MDRiNDhkZjNmOWQ4OTI5ZTM5Y2RkY2U4ODkwYzY0YzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbmxORrghdVxDQkevcvgJ+Wnvl0L
8K9UDpMJ7DCIXO20V/iUj6WjkoLVjIaz+mQemg3t1kfYKPwzoLDNKoypc24C7cRg
lqJJ3KFw2T5N9gjx+Bom+u90NyThYWpONUJZU6BaftBAVNYrw4ttzFWK2CMwoRs/
Pd1ZwzgNBlOCQlTVUg94G7FoQ88VnKEhN2op2lzIt6WS+8akyLNCtU4/Pk20PY3A
mmiwECtbPW568PPIawt+YliRFXhjdTnSAxJ2N7go7/1icr8LNacXddGI36xFScK/
ObLT7IlHaE8WoJOTwNCx46HdJdDRrVpOR/tj3wcrxpyCSPF18mUvKxl/NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOTZW0BLSN8/nYkp45zdzoiQxkxLMB8GA1UdIwQY
MBaAFMgYvhnBCYDxW83uB2aQB4SRqKohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMt
NmM0NzE5YmNmOWVlLzEvNU5sYlFFdEkzei1kaVNuam5OM09pSkRHVEVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMtNmM0NzE5YmNmOWVl
LzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUwwMA0G
CSqGSIb3DQEBCwUAA4IBAQC2YZEzPiMNK+zWip8yDuV3Qpx7S+7tUMGpFop9dj2A
r/GjBa95r2DomeyH4xz/qIfx+ft9h9ofOL/3lnlmKY/DlVb8cDyjtzJm4HhIDGJt
FAYNQt4abede7GelQzxjkXyYbLhBLrNRF/bv8dXqjHD7Rd4bAxi9ag8KJ8TknJk4
lTEmxXMGPfSPa8VnjmRBUb4Mbb2KZmsLnRqU58vr3HWtzSL31dzJRfRLMoBV9cMh
Dm9hmjJHXm3YmvTZubI+rrAGFtoJ61QsBxVnKsNJMlHoWQe6jKTXa7E7KhX7xoKV
JUrIqKVSoNp271QA1hpO6mwPwdx3RxbgzA1Yafwi9fA8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:56 2024 by rpki-client on console-ams.rpki-client.org