Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/esX17P0Q9aPFapHkNgckl91YytA.roa
File: esX17P0Q9aPFapHkNgckl91YytA.roa (raw, json)
Hash identifier: 1cbSiLlUDPOsZ8Y+tKxXqN9TW1fp+aDc83OvR4sd/bY=
Subject key identifier: 7A:C5:F5:EC:FD:10:F5:A3:C5:6A:91:E4:36:07:24:97:DD:58:CA:D0
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 11B99E3C
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/esX17P0Q9aPFapHkNgckl91YytA.roa
Signing time: Sat 01 Jan 2022 09:59:48 +0000
ROA not before: Sat 01 Jan 2022 09:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203164
IP address blocks: 185.150.60.0/24 maxlen: 24
185.150.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297377340 (0x11b99e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Jan 1 09:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ac5f5ecfd10f5a3c56a91e436072497dd58cad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:17:af:65:6e:83:07:88:d8:e2:1a:5c:c6:
c3:f1:84:90:c8:20:1f:9d:a8:d1:2c:3d:0f:11:2c:
1a:99:01:be:65:fa:e5:06:35:bd:e7:4b:f4:75:d9:
a2:24:37:fc:d6:de:80:e8:4d:d2:39:14:92:c8:fb:
8b:fa:14:77:cc:b5:74:35:9d:f5:c1:10:3b:c7:74:
b4:57:17:ce:77:d9:d3:c3:09:59:29:d7:22:62:e3:
51:d2:0f:05:d7:2f:76:ae:1d:0f:7b:4b:78:30:0c:
dc:1c:94:86:84:ea:0d:2f:aa:7f:59:fa:19:ba:91:
ac:af:dd:3a:12:e1:9c:42:ef:3e:26:10:0e:17:16:
fe:1f:2f:24:15:29:c1:9f:31:6f:f4:b7:cb:41:7f:
c7:2b:b4:3c:0e:d3:df:77:b4:7c:ea:6d:95:cc:d1:
18:a8:06:b8:fa:77:e8:99:ae:bc:a4:39:1d:c3:15:
f0:95:5c:12:51:b2:ae:a2:c9:8d:4c:b8:a9:e3:29:
36:9e:52:23:d7:54:e5:da:c1:fd:ba:9b:3b:8b:06:
7c:20:ff:a2:3b:78:6c:4a:ab:b7:13:dd:f2:d9:f1:
3d:e0:49:57:9c:29:bb:0c:32:14:73:b9:8f:70:bd:
71:8b:54:fa:81:86:4c:dc:6f:e2:97:29:d0:15:41:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:F5:EC:FD:10:F5:A3:C5:6A:91:E4:36:07:24:97:DD:58:CA:D0
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/esX17P0Q9aPFapHkNgckl91YytA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:11:d5:98:ee:74:16:0b:08:f9:bb:35:6c:3e:23:de:93:34:
3e:de:df:a7:60:78:01:fe:fe:9e:d4:06:33:50:bb:0b:c8:90:
4e:cf:c4:2d:01:09:6a:a6:61:fb:59:9e:e7:28:74:bb:53:2a:
8a:f3:6e:ea:1e:01:db:08:91:9d:60:95:9a:6e:61:5f:7e:03:
7a:b0:e1:05:09:4e:1f:04:c5:63:8d:12:0c:8c:15:16:86:2e:
1d:89:ef:04:da:d7:ba:42:c9:0b:7d:01:24:02:f0:f6:11:d0:
7e:5b:1b:eb:df:94:66:11:ee:9a:00:de:45:b2:57:16:8f:02:
9c:da:e4:29:8b:cd:10:b2:d3:78:be:00:14:ed:43:cb:6c:d9:
eb:f0:34:2c:0a:3f:8a:2d:a3:dc:61:94:49:ed:02:2a:89:7b:
3e:e1:5e:e2:bf:18:77:da:e5:52:e7:aa:9f:63:e3:6b:47:90:
ec:14:6f:d5:4c:65:ec:93:b1:cb:5f:08:8c:99:0e:a0:a2:5a:
74:44:d0:0e:f9:45:dc:33:fc:a5:19:f0:ac:de:ad:28:f9:ec:
cf:e8:0c:87:8c:56:b8:1d:28:c9:a0:37:87:5d:d0:69:b7:0d:
e1:7c:10:aa:e0:ba:c3:c0:8e:69:0f:31:fc:ae:ae:2a:1a:74:
de:02:6c:f7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEbmePDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGE5MGY2ODk2Njc4NDQyYWZhZWUxYmFhYWE2YjJhMmRlY2FjZDNiMB4XDTIyMDEw
MTA5NTk0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2FjNWY1ZWNmZDEw
ZjVhM2M1NmE5MWU0MzYwNzI0OTdkZDU4Y2FkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdbF69lboMHiNjiGlzGw/GEkMggH52o0Sw9DxEsGpkBvmX6
5QY1vedL9HXZoiQ3/NbegOhN0jkUksj7i/oUd8y1dDWd9cEQO8d0tFcXznfZ08MJ
WSnXImLjUdIPBdcvdq4dD3tLeDAM3ByUhoTqDS+qf1n6GbqRrK/dOhLhnELvPiYQ
DhcW/h8vJBUpwZ8xb/S3y0F/xyu0PA7T33e0fOptlczRGKgGuPp36JmuvKQ5HcMV
8JVcElGyrqLJjUy4qeMpNp5SI9dU5drB/bqbO4sGfCD/ojt4bEqrtxPd8tnxPeBJ
V5wpuwwyFHO5j3C9cYtU+oGGTNxv4pcp0BVBdM8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR6xfXs/RD1o8VqkeQ2BySX3VjK0DAfBgNVHSMEGDAWgBS0qQ9olmeEQq+u
4bqqprKi3srNOzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RLa1BhSlpuaEVLdnJ1RzZxcWF5b3Q3S3pUcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjEvZTYxNjE0LWViYzUtNDczMS04NTYwLTlkMTgxMjk5OWEzNS8x
L2VzWDE3UDBROWFQRmFwSGtOZ2NrbDkxWXl0QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEv
ZTYxNjE0LWViYzUtNDczMS04NTYwLTlkMTgxMjk5OWEzNS8xL3RLa1BhSlpuaEVL
dnJ1RzZxcWF5b3Q3S3pUcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbmWPDANBgkqhkiG9w0BAQsFAAOC
AQEAXBHVmO50FgsI+bs1bD4j3pM0Pt7fp2B4Af7+ntQGM1C7C8iQTs/ELQEJaqZh
+1me5yh0u1MqivNu6h4B2wiRnWCVmm5hX34DerDhBQlOHwTFY40SDIwVFoYuHYnv
BNrXukLJC30BJALw9hHQflsb69+UZhHumgDeRbJXFo8CnNrkKYvNELLTeL4AFO1D
y2zZ6/A0LAo/ii2j3GGUSe0CKol7PuFe4r8Yd9rlUueqn2Pja0eQ7BRv1Uxl7JOx
y18IjJkOoKJadETQDvlF3DP8pRnwrN6tKPnsz+gMh4xWuB0oyaA3h13QabcN4XwQ
quC6w8COaQ8x/K6uKhp03gJs9w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org