Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/xtUGZ-LNUsTH2WozuCOeQIV5h8c.roa
File: xtUGZ-LNUsTH2WozuCOeQIV5h8c.roa (raw, json)
Hash identifier: Ce1/WjS7h5XA0Xy9I/+lNtwrrpRjtO3xjHOxkYa5Rns=
Subject key identifier: C6:D5:06:67:E2:CD:52:C4:C7:D9:6A:33:B8:23:9E:40:85:79:87:C7
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 04FEA5F6
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/xtUGZ-LNUsTH2WozuCOeQIV5h8c.roa
Signing time: Sun 27 Feb 2022 19:18:35 +0000
ROA not before: Sun 27 Feb 2022 19:18:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14593
IP address blocks: 145.224.64.0/21 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83797494 (0x4fea5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Feb 27 19:18:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6d50667e2cd52c4c7d96a33b8239e40857987c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:e1:24:41:7e:96:d3:93:74:4a:90:3d:9e:
13:f3:f8:e9:7f:1e:04:bd:24:95:c3:5b:fb:05:ca:
2f:d4:5a:be:12:82:a8:f5:d8:9f:4a:b5:c3:e0:db:
45:c4:4b:6d:a4:01:8f:c7:d1:19:95:28:6a:a7:ac:
38:9e:d1:8e:c4:65:85:40:22:69:dd:d6:3c:f7:9a:
c0:bb:86:6c:80:d2:c8:bf:b4:31:b4:4c:2b:21:25:
10:b6:b1:56:a8:86:29:5d:47:b4:66:3c:1a:87:40:
27:37:29:52:64:82:f1:ae:eb:4e:ff:ae:ab:e2:cd:
b9:16:ca:63:e8:53:45:d4:1f:cc:b1:45:84:f1:1a:
2b:3c:e2:bd:fc:1a:e2:81:ab:94:01:0b:a8:cb:d8:
a3:eb:ee:4e:72:f5:c4:46:7e:97:44:96:be:2d:01:
52:f6:c0:8d:a1:62:02:f9:76:68:75:54:ca:ef:10:
c1:7d:b9:85:c8:80:8a:49:f6:fe:05:c7:46:ef:88:
47:19:6e:15:d0:70:56:93:e8:d2:31:05:44:c5:99:
85:14:49:1c:27:97:0b:1a:39:a8:db:59:21:bc:a9:
1b:99:48:df:cf:0c:a5:41:7a:6b:2b:91:6d:84:cf:
30:4e:f1:73:c8:dd:7c:eb:e8:ff:95:ec:8d:5d:c6:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D5:06:67:E2:CD:52:C4:C7:D9:6A:33:B8:23:9E:40:85:79:87:C7
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/xtUGZ-LNUsTH2WozuCOeQIV5h8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.224.64.0/20
145.224.94.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:03:ea:fb:9c:01:59:e6:70:a5:76:70:0a:24:c5:6e:e3:2d:
fc:6f:80:38:0f:8a:78:9f:e5:28:2b:59:4c:07:b0:00:5e:81:
e0:4b:fb:ac:9a:38:58:b3:5c:32:35:4e:1b:85:17:40:78:63:
ca:ec:48:3c:60:f6:28:ea:5f:56:ad:8a:34:86:fc:42:e2:5b:
ef:d1:0a:9a:ad:9a:d5:9b:1f:b3:15:b8:7b:b1:d5:97:e2:d4:
0d:cf:9c:a5:17:9e:12:48:4b:c0:c9:ef:90:77:54:2b:72:ca:
bb:10:c5:56:a1:f7:92:e0:88:1c:6c:b1:ec:66:20:ad:d4:5f:
d5:1c:36:09:71:f9:22:5a:0a:21:4e:a6:42:d3:fe:91:df:fc:
63:26:59:1a:82:aa:a8:5b:1e:47:80:0c:ed:42:9b:d3:1b:b3:
4c:75:d0:f6:00:62:ba:7a:ba:95:00:24:a3:35:eb:cd:ee:4c:
46:c0:3a:7d:44:96:18:ac:36:67:9c:df:cb:7c:a9:0b:40:fe:
d8:a2:94:ed:5a:37:c8:9a:9b:e7:f4:0e:49:f0:b1:63:49:cf:
8e:65:84:c9:2b:53:9c:84:fb:2c:8a:24:1d:fb:99:bb:37:6a:
6b:fe:77:a7:46:f9:52:7e:9f:40:f6:7c:72:ef:0d:7e:c1:d2:
87:44:d6:7c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBP6l9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
Nzk5YjMyN2RkNmNkYTFhZDM3YmMxYzIyNGE0NTRiMDJkZWEyYWZjMB4XDTIyMDIy
NzE5MTgzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzZkNTA2NjdlMmNk
NTJjNGM3ZDk2YTMzYjgyMzllNDA4NTc5ODdjNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZr4SRBfpbTk3RKkD2eE/P46X8eBL0klcNb+wXKL9RavhKC
qPXYn0q1w+DbRcRLbaQBj8fRGZUoaqesOJ7RjsRlhUAiad3WPPeawLuGbIDSyL+0
MbRMKyElELaxVqiGKV1HtGY8GodAJzcpUmSC8a7rTv+uq+LNuRbKY+hTRdQfzLFF
hPEaKzzivfwa4oGrlAELqMvYo+vuTnL1xEZ+l0SWvi0BUvbAjaFiAvl2aHVUyu8Q
wX25hciAikn2/gXHRu+IRxluFdBwVpPo0jEFRMWZhRRJHCeXCxo5qNtZIbypG5lI
388MpUF6ayuRbYTPME7xc8jdfOvo/5XsjV3GR7ECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTG1QZn4s1SxMfZajO4I55AhXmHxzAfBgNVHSMEGDAWgBRXmbMn3WzaGtN7
wcIkpFSwLeoq/DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Y1bXpKOTFzMmhyVGU4SENKS1JVc0MzcUt2dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWQvOGMyYWU5LTBhNzctNDllYi1hZDNhLWVhMTUwZTc2MzhjZS8x
L3h0VUdaLUxOVXNUSDJXb3p1Q09lUUlWNWg4Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQv
OGMyYWU5LTBhNzctNDllYi1hZDNhLWVhMTUwZTc2MzhjZS8xL1Y1bXpKOTFzMmhy
VGU4SENKS1JVc0MzcUt2dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBJHgQAMEAZHgXjANBgkqhkiG9w0B
AQsFAAOCAQEAigPq+5wBWeZwpXZwCiTFbuMt/G+AOA+KeJ/lKCtZTAewAF6B4Ev7
rJo4WLNcMjVOG4UXQHhjyuxIPGD2KOpfVq2KNIb8QuJb79EKmq2a1ZsfsxW4e7HV
l+LUDc+cpReeEkhLwMnvkHdUK3LKuxDFVqH3kuCIHGyx7GYgrdRf1Rw2CXH5IloK
IU6mQtP+kd/8YyZZGoKqqFseR4AM7UKb0xuzTHXQ9gBiunq6lQAkozXrze5MRsA6
fUSWGKw2Z5zfy3ypC0D+2KKU7Vo3yJqb5/QOSfCxY0nPjmWEyStTnIT7LIokHfuZ
uzdqa/53p0b5Un6fQPZ8cu8NfsHSh0TWfA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:46 2024 by rpki-client on console-fra.rpki-client.org