Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/5Ov_Js_ShJsNDJdvU92x72Efj3g.roa
File: 5Ov_Js_ShJsNDJdvU92x72Efj3g.roa (raw, json)
Hash identifier: ecO8WPSY7xRR3z8Z8uJcykNeFvjqEiwAc4w+t9LCiW8=
Subject key identifier: E4:EB:FF:26:CF:D2:84:9B:0D:0C:97:6F:53:DD:B1:EF:61:1F:8F:78
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 0BB0A3E0
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/5Ov_Js_ShJsNDJdvU92x72Efj3g.roa
Signing time: Sat 01 Jan 2022 11:03:07 +0000
ROA not before: Sat 01 Jan 2022 11:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60136
IP address blocks: 84.20.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196125664 (0xbb0a3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Jan 1 11:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4ebff26cfd2849b0d0c976f53ddb1ef611f8f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:fe:09:e6:b6:b6:b2:58:22:47:20:fc:85:
09:e2:d0:0a:f2:d7:45:3f:ad:54:68:fe:a8:ca:32:
39:07:55:fa:08:70:9f:21:22:b5:99:ac:ca:ca:73:
d4:b9:e4:88:93:31:62:ee:93:e1:77:e6:68:9a:b4:
39:06:12:d1:8a:91:4b:40:d7:d4:87:20:57:bb:04:
5a:8a:65:8a:9a:d7:f4:2b:ec:0a:94:e4:f0:39:d7:
49:c1:44:88:13:00:cd:b4:24:7d:a9:94:8d:e9:61:
23:81:8c:1c:34:7d:9f:6c:25:40:ad:e0:71:0c:13:
71:e3:7d:38:18:c5:e7:d7:22:43:fd:45:43:c2:10:
f8:da:41:92:f1:cf:8e:1a:0b:f6:98:5f:e1:7e:37:
da:86:f7:f0:6f:67:08:55:f7:bc:07:25:06:3c:30:
64:05:7d:09:f2:11:d2:d3:74:f6:b6:10:c7:65:17:
69:66:ff:3c:e1:49:5e:15:df:3e:61:c4:51:21:b5:
e3:48:8e:fc:53:25:9c:2d:0a:e8:1a:c5:ae:62:ca:
98:72:da:64:29:f0:ae:d1:bf:41:c2:a4:d0:dd:61:
c1:73:2e:55:dd:bb:a8:3c:25:95:85:f4:4f:86:d7:
7d:a8:f0:a1:b6:13:51:6c:bb:33:de:ed:10:b4:41:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EB:FF:26:CF:D2:84:9B:0D:0C:97:6F:53:DD:B1:EF:61:1F:8F:78
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/5Ov_Js_ShJsNDJdvU92x72Efj3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.20.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:52:44:90:6a:9d:2a:97:9d:d5:45:e4:f6:ed:f9:9e:09:c9:
ac:10:a8:cf:8b:27:f9:96:99:9c:ad:37:ea:ad:1e:53:9e:ad:
0a:fd:aa:4b:92:c9:3c:c5:72:f3:6f:84:46:63:c3:c9:34:6f:
09:f6:c9:14:f9:e8:8e:c9:6d:08:24:ce:d7:35:61:9f:bc:11:
33:b4:ab:34:3d:6a:e5:4c:74:ba:06:69:37:25:b4:f1:47:0e:
b2:8a:f9:58:9e:c2:43:24:69:10:33:fb:b0:94:1b:0f:18:98:
41:53:cf:ff:f6:92:c1:7e:4f:f2:5f:a9:8c:b1:c5:c7:9b:11:
ed:7b:a0:22:76:d5:d9:43:1e:1e:61:a6:e7:24:c7:93:49:87:
17:5a:cf:c0:2b:df:f4:8f:f5:77:6d:87:ea:7d:e3:96:90:56:
a1:4a:0a:0d:f2:56:8a:92:d2:9b:4e:11:81:2d:97:d2:f3:d0:
f9:f7:5c:ad:6a:84:73:42:48:ce:b3:f6:e0:6f:33:03:9b:79:
76:d3:21:1f:22:f2:fb:3b:35:e5:bd:44:8e:ed:40:da:d4:70:
7a:b1:b3:e1:51:56:49:7a:d6:b8:06:42:6a:f3:c7:10:0e:1b:
58:1d:ca:2c:c4:27:4d:49:f1:42:b1:3b:58:5e:a8:ca:0f:a3:
c8:d7:85:ba
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC7Cj4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZDEwOWRlZTZmYmRjMjU2ZGY5MTE0NjBjY2M5MTVkMDY2YThmZjhiMB4XDTIyMDEw
MTExMDMwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTRlYmZmMjZjZmQy
ODQ5YjBkMGM5NzZmNTNkZGIxZWY2MTFmOGY3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJtC/gnmtrayWCJHIPyFCeLQCvLXRT+tVGj+qMoyOQdV+ghw
nyEitZmsyspz1LnkiJMxYu6T4XfmaJq0OQYS0YqRS0DX1IcgV7sEWopliprX9Cvs
CpTk8DnXScFEiBMAzbQkfamUjelhI4GMHDR9n2wlQK3gcQwTceN9OBjF59ciQ/1F
Q8IQ+NpBkvHPjhoL9phf4X432ob38G9nCFX3vAclBjwwZAV9CfIR0tN09rYQx2UX
aWb/POFJXhXfPmHEUSG140iO/FMlnC0K6BrFrmLKmHLaZCnwrtG/QcKk0N1hwXMu
Vd27qDwllYX0T4bXfajwobYTUWy7M97tELRBXlcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTk6/8mz9KEmw0Ml29T3bHvYR+PeDAfBgNVHSMEGDAWgBStEJ3ub73CVt+R
FGDMyRXQZqj/izAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JSQ2Q3bS05d2xiZmtSUmd6TWtWMEdhb180cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvNDYxNWJlLWU1NjYtNDI1My04M2VmLWY2NjI2YjYzMzgzZS8x
LzVPdl9Kc19TaEpzTkRKZHZVOTJ4NzJFZmozZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
NDYxNWJlLWU1NjYtNDI1My04M2VmLWY2NjI2YjYzMzgzZS8xL3JSQ2Q3bS05d2xi
ZmtSUmd6TWtWMEdhb180cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFQUTTANBgkqhkiG9w0BAQsFAAOC
AQEAOlJEkGqdKped1UXk9u35ngnJrBCoz4sn+ZaZnK036q0eU56tCv2qS5LJPMVy
82+ERmPDyTRvCfbJFPnojsltCCTO1zVhn7wRM7SrND1q5Ux0ugZpNyW08UcOsor5
WJ7CQyRpEDP7sJQbDxiYQVPP//aSwX5P8l+pjLHFx5sR7XugInbV2UMeHmGm5yTH
k0mHF1rPwCvf9I/1d22H6n3jlpBWoUoKDfJWipLSm04RgS2X0vPQ+fdcrWqEc0JI
zrP24G8zA5t5dtMhHyLy+zs15b1Eju1A2tRwerGz4VFWSXrWuAZCavPHEA4bWB3K
LMQnTUnxQrE7WF6oyg+jyNeFug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:40 2024 by rpki-client on console-fra.rpki-client.org