Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fjwvFOPoxCAuzPSmQ5VTVKPb4u4.roa
File: fjwvFOPoxCAuzPSmQ5VTVKPb4u4.roa (raw, json)
Hash identifier: ZegMAuoxRRksAKZME3w9czPAP8E8eUfo4bLfsgmt5Z8=
Subject key identifier: 7E:3C:2F:14:E3:E8:C4:20:2E:CC:F4:A6:43:95:53:54:A3:DB:E2:EE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182162B75E7015DE96FE9752706BC7109D9
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fjwvFOPoxCAuzPSmQ5VTVKPb4u4.roa
Signing time: Tue 19 Jul 2022 11:15:23 +0000
ROA not before: Tue 19 Jul 2022 11:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211619
IP address blocks: 92.52.218.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:2b:75:e7:01:5d:e9:6f:e9:75:27:06:bc:71:09:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 19 11:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e3c2f14e3e8c4202eccf4a643955354a3dbe2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:63:2f:0b:77:74:42:3b:9b:c0:f4:d0:2b:
cf:14:fa:c8:30:80:a1:b2:92:18:73:6d:6a:7b:e5:
b1:65:3b:43:45:f3:85:91:76:6a:ef:c5:5c:80:5d:
18:5d:57:7e:46:13:11:51:1f:37:7d:88:f3:d0:f6:
03:25:2e:76:7e:70:b1:71:58:33:15:26:a9:30:d0:
48:ba:c2:76:21:f3:f2:14:a0:2d:50:1e:19:c9:21:
50:37:1c:da:af:30:36:ab:af:b4:9c:c6:95:5d:b9:
e0:b0:e3:89:5e:16:08:c1:24:5d:0a:64:97:28:0f:
c3:32:cc:09:9a:33:cf:10:7c:dd:39:bf:93:a8:8a:
e4:66:c4:c4:0f:f0:57:af:ad:39:b5:1c:03:c4:a0:
f6:b9:e0:40:1f:84:57:71:08:a6:df:6d:2e:34:fa:
6e:6e:44:2f:92:91:99:39:d7:e0:29:66:c4:38:a3:
1f:1c:6d:32:de:85:7e:47:6a:a5:0a:02:80:ae:7f:
40:33:0a:81:30:0a:b1:c4:74:82:9a:fe:12:de:a6:
77:7c:3d:a1:eb:be:d7:db:a3:e9:25:21:c4:7e:1f:
0e:cf:c6:21:8c:b8:3f:93:fb:09:d8:c4:0d:08:50:
52:f9:e3:07:a4:a1:79:96:e9:98:45:37:0e:ba:ba:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:2F:14:E3:E8:C4:20:2E:CC:F4:A6:43:95:53:54:A3:DB:E2:EE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fjwvFOPoxCAuzPSmQ5VTVKPb4u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
92.52.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:25:73:a1:bc:24:8e:df:f1:12:5c:1e:d3:cd:2a:86:1e:b1:
14:ae:86:3f:96:c1:aa:8f:a2:5c:10:db:14:64:cd:8d:d9:09:
c6:ac:e2:c1:fa:72:8d:af:8c:11:d9:7e:a4:49:3b:d6:20:ab:
53:74:55:9b:24:81:36:2c:aa:d2:11:15:05:02:4a:a0:7a:cb:
2e:76:d5:2c:af:59:94:85:86:de:ae:03:b9:83:de:c7:8d:42:
1a:45:4f:9c:86:11:4b:30:26:b3:f3:08:0f:7d:31:7b:dc:f5:
0b:87:2f:3e:e6:46:4d:d0:38:0e:4b:e8:c0:f9:1c:18:98:ff:
28:09:4c:45:f7:12:12:6c:47:3d:bf:45:0a:1f:cc:89:e7:fb:
fc:86:d0:53:bc:7f:34:48:d9:5c:a0:51:be:16:bd:59:50:99:
2b:f6:b2:49:43:b6:3c:53:5a:7a:d8:b9:e6:36:71:29:6c:a6:
c0:74:5f:79:8f:84:8e:94:79:87:19:ed:0a:e3:a3:e5:bd:f2:
a6:fd:73:c9:33:cc:fd:5b:56:af:57:76:37:ab:e9:a9:ab:b5:
ad:43:9b:c6:b9:f6:9d:08:ed:90:a7:ad:64:1f:da:5a:bb:0a:
e6:81:31:53:59:6a:b4:35:fc:ec:4d:6a:f9:e0:1d:fd:5a:ff:
f4:08:d4:6a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYIWK3XnAV3pb+l1Jwa8cQnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjIwNzE5MTExNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTNjMmYxNGUzZThjNDIwMmVjY2Y0YTY0Mzk1NTM1NGEzZGJlMmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2NjLwt3dEI7m8D00CvPFPrIMICh
spIYc21qe+WxZTtDRfOFkXZq78VcgF0YXVd+RhMRUR83fYjz0PYDJS52fnCxcVgz
FSapMNBIusJ2IfPyFKAtUB4ZySFQNxzarzA2q6+0nMaVXbngsOOJXhYIwSRdCmSX
KA/DMswJmjPPEHzdOb+TqIrkZsTED/BXr605tRwDxKD2ueBAH4RXcQim320uNPpu
bkQvkpGZOdfgKWbEOKMfHG0y3oV+R2qlCgKArn9AMwqBMAqxxHSCmv4S3qZ3fD2h
677X26PpJSHEfh8Oz8YhjLg/k/sJ2MQNCFBS+eMHpKF5lumYRTcOurrRWwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH48LxTj6MQgLsz0pkOVU1Sj2+LuMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvZmp3dkZPUG94Q0F1elBTbVE1VlRWS1BiNHU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbZwAwQA
BbZzAwQAXDTaMA0GCSqGSIb3DQEBCwUAA4IBAQB+JXOhvCSO3/ESXB7TzSqGHrEU
roY/lsGqj6JcENsUZM2N2QnGrOLB+nKNr4wR2X6kSTvWIKtTdFWbJIE2LKrSERUF
AkqgessudtUsr1mUhYbergO5g97HjUIaRU+chhFLMCaz8wgPfTF73PULhy8+5kZN
0DgOS+jA+RwYmP8oCUxF9xISbEc9v0UKH8yJ5/v8htBTvH80SNlcoFG+Fr1ZUJkr
9rJJQ7Y8U1p62LnmNnEpbKbAdF95j4SOlHmHGe0K46PlvfKm/XPJM8z9W1avV3Y3
q+mpq7WtQ5vGufadCO2Qp61kH9pauwrmgTFTWWq0NfzsTWr54B39Wv/0CNRq
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org