Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/waYuaeV31NYDMzudieRaWco6nDA.roa
File: waYuaeV31NYDMzudieRaWco6nDA.roa (raw, json)
Hash identifier: qxD9JoA8JaSWmsc/cz8fFziL40nLiTSBkY1+Y9+cUH0=
Subject key identifier: C1:A6:2E:69:E5:77:D4:D6:03:33:3B:9D:89:E4:5A:59:CA:3A:9C:30
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 0AFAE413
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/waYuaeV31NYDMzudieRaWco6nDA.roa
Signing time: Thu 05 May 2022 08:20:06 +0000
ROA not before: Thu 05 May 2022 08:20:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39202
IP address blocks: 81.20.48.0/20 maxlen: 20
2a01:6000::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184214547 (0xafae413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: May 5 08:20:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1a62e69e577d4d603333b9d89e45a59ca3a9c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:a2:0a:f6:1e:6f:e5:a2:f2:e8:3c:49:fe:
88:98:b2:cd:de:d7:71:92:36:de:e5:ea:54:68:a3:
5d:5a:4d:de:e7:cf:1a:a6:cb:13:86:49:43:5d:7f:
51:9f:b2:3b:ab:f4:58:60:4b:7d:79:49:9b:d4:66:
2a:51:75:46:6b:f8:3b:5f:55:7e:92:b3:83:07:4a:
ab:ef:fe:3f:cf:18:05:7c:64:49:59:44:15:5a:5e:
89:d1:52:74:74:37:5e:c8:55:92:cc:26:fe:f9:62:
14:b1:46:a8:84:07:09:17:b3:e2:8f:70:6b:3c:e2:
89:91:3f:7b:30:99:5f:f2:0e:e7:eb:6c:99:ad:1e:
ff:d5:9f:f6:3b:6d:3c:53:09:a0:6c:25:20:d0:62:
8a:c2:0c:5c:3e:bd:7a:92:e9:06:eb:36:2b:7e:fd:
ee:1d:e2:6d:0d:9c:4a:30:1a:8b:6a:b1:cc:7b:b0:
f4:13:27:18:ba:62:f0:ab:24:97:f0:bf:63:d1:5d:
6d:d5:cf:f2:01:d2:78:0e:3e:70:34:34:a5:9d:ec:
1f:36:cc:7c:71:85:36:bc:aa:53:bd:db:6c:07:d6:
a6:51:1f:9f:09:8d:17:69:21:5e:73:d2:97:7d:42:
0d:a7:14:f7:0a:f8:5d:bf:6d:59:7c:13:0e:23:86:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A6:2E:69:E5:77:D4:D6:03:33:3B:9D:89:E4:5A:59:CA:3A:9C:30
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/waYuaeV31NYDMzudieRaWco6nDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.48.0/20
IPv6:
2a01:6000::/32
Signature Algorithm: sha256WithRSAEncryption
8c:5e:cd:2e:eb:17:21:1b:ff:23:94:e4:90:d0:20:c1:0b:6f:
54:67:24:b6:98:07:7e:72:83:57:3f:27:dc:aa:44:99:3b:c0:
06:1a:ad:99:64:c7:02:fb:05:26:eb:ed:d8:33:76:d6:dd:86:
31:b4:27:49:08:01:ca:03:0d:a6:c8:61:94:1d:04:df:90:cc:
fb:e6:07:48:27:00:b5:e2:ec:80:21:1b:fc:8b:4a:7d:32:8f:
7d:1e:40:91:99:f4:68:c1:92:ab:a6:8e:d7:09:42:c6:b2:e2:
0b:9a:04:b7:89:d3:98:6d:8c:44:7c:7b:a5:1a:a4:de:21:51:
d0:9c:9f:82:fd:1f:00:d9:6c:fa:dc:88:da:4c:4b:92:42:88:
bd:38:bf:cb:40:6f:d0:76:e6:c0:f2:f1:e3:70:e3:31:a8:bc:
df:dd:c3:47:87:81:4b:3d:83:b0:1b:f1:d6:11:03:be:45:fb:
d5:90:1f:91:80:52:26:a9:f5:7a:9b:df:51:a1:c3:22:56:36:
e8:13:78:7c:6e:f5:c9:5b:c7:6f:85:bd:04:d8:52:81:36:89:
46:9c:d4:5c:51:d1:99:d5:d7:41:2e:8c:91:72:bc:5c:42:45:
7e:ba:12:fd:57:92:c4:5f:5f:8c:b3:eb:ef:91:23:87:dc:29:
2e:4c:ed:d1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECvrkEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YWVmY2ZlZDUxZmYxNThmYmU2OGNjZDYwYjdiMzliZTVmM2VhZTIwMB4XDTIyMDUw
NTA4MjAwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzFhNjJlNjllNTc3
ZDRkNjAzMzMzYjlkODllNDVhNTljYTNhOWMzMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDpogr2Hm/lovLoPEn+iJiyzd7XcZI23uXqVGijXVpN3ufP
GqbLE4ZJQ11/UZ+yO6v0WGBLfXlJm9RmKlF1Rmv4O19VfpKzgwdKq+/+P88YBXxk
SVlEFVpeidFSdHQ3XshVkswm/vliFLFGqIQHCRez4o9wazziiZE/ezCZX/IO5+ts
ma0e/9Wf9jttPFMJoGwlINBiisIMXD69epLpBus2K3797h3ibQ2cSjAai2qxzHuw
9BMnGLpi8Kskl/C/Y9FdbdXP8gHSeA4+cDQ0pZ3sHzbMfHGFNryqU73bbAfWplEf
nwmNF2khXnPSl31CDacU9wr4Xb9tWXwTDiOGxzsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTBpi5p5XfU1gMzO52J5FpZyjqcMDAfBgNVHSMEGDAWgBRK78/tUf8Vj75o
zNYLezm+Xz6uIDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N1X1A3VkhfRlktLWFNeldDM3M1dmw4LXJpQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvOGU1NTc2LTMzYzgtNDAwMi1hNDM3LWRiNjY3MWFjNzY3Mi8x
L3dhWXVhZVYzMU5ZRE16dWRpZVJhV2NvNm5EQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
OGU1NTc2LTMzYzgtNDAwMi1hNDM3LWRiNjY3MWFjNzY3Mi8xL1N1X1A3VkhfRlkt
LWFNeldDM3M1dmw4LXJpQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBFEUMDANBAIAAjAHAwUAKgFgADAN
BgkqhkiG9w0BAQsFAAOCAQEAjF7NLusXIRv/I5TkkNAgwQtvVGcktpgHfnKDVz8n
3KpEmTvABhqtmWTHAvsFJuvt2DN21t2GMbQnSQgBygMNpshhlB0E35DM++YHSCcA
teLsgCEb/ItKfTKPfR5AkZn0aMGSq6aO1wlCxrLiC5oEt4nTmG2MRHx7pRqk3iFR
0Jyfgv0fANls+tyI2kxLkkKIvTi/y0Bv0HbmwPLx43DjMai8393DR4eBSz2DsBvx
1hEDvkX71ZAfkYBSJqn1epvfUaHDIlY26BN4fG71yVvHb4W9BNhSgTaJRpzUXFHR
mdXXQS6MkXK8XEJFfroS/VeSxF9fjLPr75Ejh9wpLkzt0Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:09 2024 by rpki-client on console-fra.rpki-client.org