Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/5eklREB662Paf2_szewK435-uTs.roa
File: 5eklREB662Paf2_szewK435-uTs.roa (raw, json)
Hash identifier: evc1cL1XpWhLUkzvS5VYBvf61qTao5L4+6Kh9Qau45E=
Subject key identifier: E5:E9:25:44:40:7A:EB:63:DA:7F:6F:EC:CD:EC:0A:E3:7E:7E:B9:3B
Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Certificate serial: 0183607EAD4E347A959DD05214B1C01BA56B
Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/5eklREB662Paf2_szewK435-uTs.roa
Signing time: Wed 21 Sep 2022 14:40:58 +0000
ROA not before: Wed 21 Sep 2022 14:40:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 185.109.120.0/22 maxlen: 24
193.188.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:7e:ad:4e:34:7a:95:9d:d0:52:14:b1:c0:1b:a5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Validity
Not Before: Sep 21 14:40:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5e92544407aeb63da7f6feccdec0ae37e7eb93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:56:a8:5e:f9:5f:a6:19:b2:21:75:a1:24:dc:
81:76:0e:72:99:29:a4:eb:2f:21:6a:e4:12:79:49:
4e:1c:48:a7:0f:28:8f:26:b5:12:1f:36:9c:df:a8:
ee:c3:f4:0d:f6:25:d6:81:bb:89:64:ff:b9:58:32:
18:aa:aa:a2:38:35:1d:6e:c6:ad:0b:00:f8:c6:90:
19:74:68:c2:59:af:65:9f:10:3b:6a:ed:73:1a:cb:
4e:98:63:15:db:e4:51:b5:bc:2a:9e:bf:f2:21:e1:
c1:5e:f9:17:1c:93:01:22:b4:6a:25:fa:95:bc:bb:
34:3c:cd:1c:0e:f4:3f:54:32:e3:31:af:46:c4:57:
af:59:a4:da:f6:b2:7b:4d:6c:e5:73:93:c8:f8:d4:
88:95:6e:f6:4c:e5:52:e1:67:f5:d1:a9:e0:b1:b9:
9b:28:51:71:0f:ea:a8:e1:ea:43:72:2f:05:47:8c:
73:c6:1d:87:63:14:71:36:f3:f9:2a:24:ee:44:32:
26:ca:32:3f:cb:9c:cf:c6:9e:8c:59:1e:fa:c1:66:
d1:39:5f:52:c3:8a:48:60:a6:78:7c:a6:45:d5:e2:
18:9d:dc:44:d2:76:ea:1f:49:fb:09:62:92:d5:91:
95:64:7e:d5:22:5f:77:5b:dc:d3:01:0b:d5:30:63:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E9:25:44:40:7A:EB:63:DA:7F:6F:EC:CD:EC:0A:E3:7E:7E:B9:3B
X509v3 Authority Key Identifier:
keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/5eklREB662Paf2_szewK435-uTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.120.0/22
193.188.64.0/19
Signature Algorithm: sha256WithRSAEncryption
94:d2:f7:24:22:3d:14:07:f5:70:db:f2:37:35:72:24:49:81:
4c:a4:11:b4:0a:99:88:13:f8:bf:6b:98:dc:40:3b:66:87:c8:
e5:6b:4a:c3:1b:da:5a:38:2f:74:a2:7c:d2:71:a5:32:ec:45:
5c:f7:a4:a7:92:57:a1:e5:94:23:36:56:68:d0:0e:7f:14:bc:
c8:d4:86:dc:29:e1:81:e9:fb:16:16:81:5e:c1:af:6d:98:2c:
a7:8b:9a:cf:39:96:7e:f2:93:fc:9c:db:4c:cf:23:2c:62:72:
5e:f1:f0:6c:fb:58:38:86:0e:cd:1b:22:b6:59:73:91:b6:fa:
26:f3:8f:b0:6e:38:d0:1d:6f:cf:83:74:85:68:a9:3b:5b:cb:
54:20:70:fb:83:9d:d8:22:cd:ba:93:f1:8c:e2:a5:7e:5a:fc:
e6:1a:dd:bc:58:13:b2:a5:11:22:3c:38:40:67:1c:e0:16:85:
8c:cd:58:d6:9d:d0:f3:6e:b9:b3:bb:0e:85:d5:cf:26:a8:c8:
8a:0b:56:03:51:e1:15:6d:73:1b:76:91:4f:21:9d:f8:3f:c2:
26:e7:9b:70:fa:f8:b1:40:c5:33:b8:ec:d9:d6:8a:b7:eb:a8:
d8:c4:1e:ff:3a:ed:6a:c9:42:58:f3:d2:1c:c1:45:ad:a2:49:
80:53:d3:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYNgfq1ONHqVndBSFLHAG6VrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWI2YjJjM2UwOWNhMWM0NWZkNzU0N2U0NTg5NDZjYzhh
NDY4YjQwHhcNMjIwOTIxMTQ0MDU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWU5MjU0NDQwN2FlYjYzZGE3ZjZmZWNjZGVjMGFlMzdlN2ViOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFaoXvlfphmyIXWhJNyBdg5ymSmk
6y8hauQSeUlOHEinDyiPJrUSHzac36juw/QN9iXWgbuJZP+5WDIYqqqiODUdbsat
CwD4xpAZdGjCWa9lnxA7au1zGstOmGMV2+RRtbwqnr/yIeHBXvkXHJMBIrRqJfqV
vLs0PM0cDvQ/VDLjMa9GxFevWaTa9rJ7TWzlc5PI+NSIlW72TOVS4Wf10angsbmb
KFFxD+qo4epDci8FR4xzxh2HYxRxNvP5KiTuRDImyjI/y5zPxp6MWR76wWbROV9S
w4pIYKZ4fKZF1eIYndxE0nbqH0n7CWKS1ZGVZH7VIl93W9zTAQvVMGOTVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOXpJURAeutj2n9v7M3sCuN+frk7MB8GA1UdIwQY
MBaAFE7rayw+CcocRf11R+RYlGzIpGi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjct
NmU5YWRkYzgxNjJiLzEvNWVrbFJFQjY2MlBhZjJfc3pld0s0MzUtdVRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjctNmU5YWRkYzgxNjJi
LzEvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuW14AwQF
wbxAMA0GCSqGSIb3DQEBCwUAA4IBAQCU0vckIj0UB/Vw2/I3NXIkSYFMpBG0CpmI
E/i/a5jcQDtmh8jla0rDG9paOC90onzScaUy7EVc96Snkleh5ZQjNlZo0A5/FLzI
1IbcKeGB6fsWFoFewa9tmCyni5rPOZZ+8pP8nNtMzyMsYnJe8fBs+1g4hg7NGyK2
WXORtvom84+wbjjQHW/Pg3SFaKk7W8tUIHD7g53YIs26k/GM4qV+WvzmGt28WBOy
pREiPDhAZxzgFoWMzVjWndDzbrmzuw6F1c8mqMiKC1YDUeEVbXMbdpFPIZ34P8Im
55tw+vixQMUzuOzZ1oq366jYxB7/Ou1qyUJY89IcwUWtokmAU9O2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:11 2024 by rpki-client on console-fra.rpki-client.org