Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/uL06V-6Gk6bCjGI6KWT4E1JmW68.roa
File: uL06V-6Gk6bCjGI6KWT4E1JmW68.roa (raw, json)
Hash identifier: vEu4I7CajlqJgSl2YE+B14HE1EyP4fVMC98PFgK7zSA=
Subject key identifier: B8:BD:3A:57:EE:86:93:A6:C2:8C:62:3A:29:64:F8:13:52:66:5B:AF
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 09E9D909
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/uL06V-6Gk6bCjGI6KWT4E1JmW68.roa
Signing time: Sat 01 Jan 2022 12:56:01 +0000
ROA not before: Sat 01 Jan 2022 12:56:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 786
IP address blocks: 143.239.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166320393 (0x9e9d909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Jan 1 12:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8bd3a57ee8693a6c28c623a2964f81352665baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:45:da:f4:3c:bd:52:23:d8:a9:90:99:3c:8b:
92:40:b1:bf:c2:24:1e:fd:c7:ed:bf:45:c2:5d:6d:
48:d7:3b:fb:46:25:88:4b:f2:e9:8f:8d:c2:22:bb:
a1:46:c1:0e:26:51:61:14:35:90:ba:88:95:55:d1:
6a:d6:1d:de:91:c2:e4:3a:ba:96:fe:d4:ee:ba:9c:
6d:1e:eb:3d:b6:71:ad:47:59:77:18:04:0e:27:76:
b1:6a:37:dd:88:7f:22:0c:5f:81:5f:89:b4:c9:67:
e0:99:bd:08:83:d1:0b:0e:40:fc:1e:07:96:15:d5:
42:82:92:2f:56:51:88:31:85:42:a3:fc:49:b6:d3:
f3:0c:76:01:d5:fa:c1:54:d4:7a:6b:73:d5:93:b2:
17:a0:af:93:60:74:2e:55:81:49:f6:47:3a:ad:b2:
b9:68:fb:ae:ca:44:a3:eb:78:be:e0:be:49:37:f4:
83:c5:bb:55:0b:e7:cc:2a:b3:56:eb:0f:cd:c7:e5:
ea:08:13:02:76:92:3a:0c:ac:8a:62:2b:4e:35:54:
fc:d5:40:c5:f8:ff:13:f3:c0:99:69:29:be:1e:c8:
04:74:17:50:71:58:bc:c4:41:da:35:91:93:59:ee:
95:8f:cf:b1:76:c7:f7:b7:40:ea:89:79:dd:55:8c:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BD:3A:57:EE:86:93:A6:C2:8C:62:3A:29:64:F8:13:52:66:5B:AF
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/uL06V-6Gk6bCjGI6KWT4E1JmW68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:4b:bb:94:6b:b5:92:89:a5:0f:80:59:02:58:ed:4b:eb:d9:
a7:37:e2:3d:28:e2:4f:8c:55:02:a3:ab:56:f0:6d:a7:52:d9:
91:7e:df:da:be:b2:f2:55:7d:cb:a4:e9:8f:c4:43:2c:5f:5e:
f8:51:54:53:83:d2:91:59:3d:a9:9e:1c:36:27:38:a0:e7:14:
47:50:96:75:45:84:cf:2e:e5:27:f8:78:9d:47:0a:a0:3c:d8:
f5:35:e9:56:dc:16:3d:ab:61:1d:89:a8:05:f8:7c:4b:6a:4c:
dd:4f:46:10:42:7c:16:dd:30:86:03:2c:86:24:4f:37:9e:d6:
6c:37:1c:c9:1d:da:4b:b6:c6:ca:07:74:d1:f3:04:cd:e9:97:
de:66:36:20:97:49:15:ae:b9:c2:6d:ef:dd:19:8a:b0:1b:4b:
3e:9d:b9:64:91:2f:70:bd:36:a4:48:cb:17:46:0b:ca:f9:f9:
6e:d8:34:20:ce:85:b2:4e:ff:63:1f:c2:d3:25:ab:1d:4e:61:
1a:90:6b:4c:71:7a:89:c4:44:dd:28:97:e3:54:3d:20:d7:c2:
0a:5d:63:1d:15:1f:aa:99:5f:5c:85:37:92:57:c4:1a:11:33:
71:b9:e2:71:56:b2:0c:1f:b5:c8:d2:de:84:85:c7:c1:7a:0b:
78:50:51:3c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIECenZCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YzRjMjYyNzNkYTI4MjFmY2UyNjA3NWFhMGE2ZTIzMDFlYzg0OTI3MB4XDTIyMDEw
MTEyNTYwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjhiZDNhNTdlZTg2
OTNhNmMyOGM2MjNhMjk2NGY4MTM1MjY2NWJhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAItF2vQ8vVIj2KmQmTyLkkCxv8IkHv3H7b9Fwl1tSNc7+0Yl
iEvy6Y+NwiK7oUbBDiZRYRQ1kLqIlVXRatYd3pHC5Dq6lv7U7rqcbR7rPbZxrUdZ
dxgEDid2sWo33Yh/IgxfgV+JtMln4Jm9CIPRCw5A/B4HlhXVQoKSL1ZRiDGFQqP8
SbbT8wx2AdX6wVTUemtz1ZOyF6Cvk2B0LlWBSfZHOq2yuWj7rspEo+t4vuC+STf0
g8W7VQvnzCqzVusPzcfl6ggTAnaSOgysimIrTjVU/NVAxfj/E/PAmWkpvh7IBHQX
UHFYvMRB2jWRk1nulY/PsXbH97dA6ol53VWMkrsCAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBS4vTpX7oaTpsKMYjopZPgTUmZbrzAfBgNVHSMEGDAWgBQcTCYnPaKCH84m
B1qgpuIwHshJJzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hFd21KejJpZ2hfT0pnZGFvS2JpTUI3SVNTYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDUvNTQ1Y2NlLWFmMTEtNGVmNy05YTVkLWQzNWI0MzBhZjI2ZC8x
L3VMMDZWLTZHazZiQ2pHSTZLV1Q0RTFKbVc2OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUv
NTQ1Y2NlLWFmMTEtNGVmNy05YTVkLWQzNWI0MzBhZjI2ZC8xL0hFd21KejJpZ2hf
T0pnZGFvS2JpTUI3SVNTYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAI/vMA0GCSqGSIb3DQEBCwUAA4IB
AQBSS7uUa7WSiaUPgFkCWO1L69mnN+I9KOJPjFUCo6tW8G2nUtmRft/avrLyVX3L
pOmPxEMsX174UVRTg9KRWT2pnhw2Jzig5xRHUJZ1RYTPLuUn+HidRwqgPNj1NelW
3BY9q2EdiagF+HxLakzdT0YQQnwW3TCGAyyGJE83ntZsNxzJHdpLtsbKB3TR8wTN
6ZfeZjYgl0kVrrnCbe/dGYqwG0s+nblkkS9wvTakSMsXRgvK+flu2DQgzoWyTv9j
H8LTJasdTmEakGtMcXqJxETdKJfjVD0g18IKXWMdFR+qmV9chTeSV8QaETNxueJx
VrIMH7XI0t6EhcfBegt4UFE8
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:45 2025 by rpki-client