Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/5HzH22mgdKokoHUboTCzntJPndI.roa
File: 5HzH22mgdKokoHUboTCzntJPndI.roa (raw, json)
Hash identifier: ScidB8D22B3Sw730jpFHGQans8OVKeWglWhXm3TEJIM=
Subject key identifier: E4:7C:C7:DB:69:A0:74:AA:24:A0:75:1B:A1:30:B3:9E:D2:4F:9D:D2
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 01C390E8
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/5HzH22mgdKokoHUboTCzntJPndI.roa
Signing time: Thu 17 Mar 2022 13:23:26 +0000
ROA not before: Thu 17 Mar 2022 13:23:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60561
IP address blocks: 188.64.137.0/24 maxlen: 24
2a11:1040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29593832 (0x1c390e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Mar 17 13:23:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e47cc7db69a074aa24a0751ba130b39ed24f9dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:6d:62:47:1e:1b:df:78:57:e7:39:86:e6:
6e:b4:bd:f6:c7:40:9d:68:0e:9d:1c:f8:f3:b5:b5:
c1:ad:1c:fc:9e:eb:24:bc:d6:f5:f3:da:1f:02:1a:
96:7d:7f:ab:3c:07:aa:c4:5f:7b:df:f0:cb:4e:82:
42:c7:ae:52:e9:a6:fa:6f:fa:de:9b:ee:8c:d4:a6:
aa:15:cc:ae:ef:d5:ce:30:b0:bd:af:79:7f:1f:59:
ef:09:83:eb:c9:d0:bf:e6:de:2b:c1:2a:b9:60:0f:
37:ff:b4:4d:3c:7d:ea:cb:12:3c:e5:2e:6c:1c:05:
0c:09:e8:5f:76:77:69:d6:ef:eb:4d:a6:d5:72:91:
52:58:cc:ae:04:15:12:7d:92:81:b5:ba:2e:2c:2e:
f9:7f:7e:e9:e5:73:99:cf:69:55:24:2a:ac:6d:23:
d6:ed:dc:02:86:34:8f:45:7f:ea:42:58:f1:8e:97:
45:66:d5:e4:1f:ec:01:2a:94:55:77:06:c8:8a:3a:
2f:97:01:e5:f9:88:10:e2:46:68:ec:23:5e:0a:33:
20:79:a4:5e:c0:b0:75:39:fc:84:8b:ee:d6:c4:b1:
f0:ad:c9:21:07:15:37:91:7f:a9:6e:99:5e:5a:27:
69:83:76:d5:ca:a0:5c:91:72:78:8c:59:44:61:8a:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:C7:DB:69:A0:74:AA:24:A0:75:1B:A1:30:B3:9E:D2:4F:9D:D2
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/5HzH22mgdKokoHUboTCzntJPndI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.137.0/24
IPv6:
2a11:1040::/29
Signature Algorithm: sha256WithRSAEncryption
4b:df:78:93:34:78:4f:f9:29:49:33:aa:25:0c:b7:06:df:b7:
85:53:5c:19:7e:63:a6:06:86:40:4f:e9:5f:dd:3d:37:b7:f6:
6d:6e:c6:6a:58:7f:f8:4c:a7:e6:61:d8:33:d4:6c:83:1d:12:
00:e6:1b:07:94:80:fc:ab:be:42:21:68:5a:8e:13:19:46:1b:
a9:3f:ce:86:d1:2f:be:bf:06:9f:d1:e2:74:12:41:6c:b2:20:
56:12:8d:d3:46:0e:6c:b3:9b:c4:7f:48:82:73:c8:3e:f9:f5:
97:3f:0f:5e:fe:5f:c6:dc:0f:d7:81:66:a2:54:86:01:f1:d1:
a3:51:7b:2e:08:fa:75:91:50:0a:9d:15:dd:f0:e1:67:ac:5e:
21:02:a0:86:4f:d7:51:d2:8d:ea:42:04:f0:8f:31:c2:cc:0c:
94:8e:3f:48:20:9d:06:7e:73:94:fc:c4:2e:46:97:9f:fc:03:
1e:e2:52:b5:4f:71:4c:e6:70:e3:df:c8:15:0e:fe:9d:2e:9c:
d8:e1:52:43:e6:21:73:7f:ad:25:74:60:53:48:93:5f:53:06:
f7:2a:87:59:f5:b6:9f:c2:b0:03:bd:73:a5:68:c4:7d:0b:0f:
b2:8d:fb:a7:2b:25:02:38:78:e5:d3:2d:81:5f:1f:e4:2d:d6:
41:92:4e:77
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAcOQ6DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZWQxZDdkZjI1YTRhOWQ1ZTcyN2M0MmY1NWU5ZTMxODNkMzZhOTNhMB4XDTIyMDMx
NzEzMjMyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTQ3Y2M3ZGI2OWEw
NzRhYTI0YTA3NTFiYTEzMGIzOWVkMjRmOWRkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMdpbWJHHhvfeFfnOYbmbrS99sdAnWgOnRz487W1wa0c/J7r
JLzW9fPaHwIaln1/qzwHqsRfe9/wy06CQseuUumm+m/63pvujNSmqhXMru/VzjCw
va95fx9Z7wmD68nQv+beK8EquWAPN/+0TTx96ssSPOUubBwFDAnoX3Z3adbv602m
1XKRUljMrgQVEn2SgbW6Liwu+X9+6eVzmc9pVSQqrG0j1u3cAoY0j0V/6kJY8Y6X
RWbV5B/sASqUVXcGyIo6L5cB5fmIEOJGaOwjXgozIHmkXsCwdTn8hIvu1sSx8K3J
IQcVN5F/qW6ZXlonaYN21cqgXJFyeIxZRGGK6wMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTkfMfbaaB0qiSgdRuhMLOe0k+d0jAfBgNVHSMEGDAWgBRO0dffJaSp1ecn
xC9V6eMYPTapOjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1R0SFgzeVdrcWRYbko4UXZWZW5qR0QwMnFUby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNDU5ZTYzLTQwYjgtNDUzNi04NGI0LWFhODFiOTYwMzg1Ny8x
LzVIekgyMm1nZEtva29IVWJvVEN6bnRKUG5kSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
NDU5ZTYzLTQwYjgtNDUzNi04NGI0LWFhODFiOTYwMzg1Ny8xL1R0SFgzeVdrcWRY
bko4UXZWZW5qR0QwMnFUby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALxAiTANBAIAAjAHAwUDKhEQQDAN
BgkqhkiG9w0BAQsFAAOCAQEAS994kzR4T/kpSTOqJQy3Bt+3hVNcGX5jpgaGQE/p
X909N7f2bW7Galh/+Eyn5mHYM9Rsgx0SAOYbB5SA/Ku+QiFoWo4TGUYbqT/OhtEv
vr8Gn9HidBJBbLIgVhKN00YObLObxH9IgnPIPvn1lz8PXv5fxtwP14FmolSGAfHR
o1F7Lgj6dZFQCp0V3fDhZ6xeIQKghk/XUdKN6kIE8I8xwswMlI4/SCCdBn5zlPzE
LkaXn/wDHuJStU9xTOZw49/IFQ7+nS6c2OFSQ+Yhc3+tJXRgU0iTX1MG9yqHWfW2
n8KwA71zpWjEfQsPso37pyslAjh45dMtgV8f5C3WQZJOdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:47 2024 by rpki-client on console-ams.rpki-client.org