Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/OKlNHvRjzgWkRkqTkpCfRThOsWM.roa
File: OKlNHvRjzgWkRkqTkpCfRThOsWM.roa (raw, json)
Hash identifier: E1Vh2BO4ANwZ+FUGyBaViAoCrZ4X4UAXJDtosMdajpE=
Subject key identifier: 38:A9:4D:1E:F4:63:CE:05:A4:46:4A:93:92:90:9F:45:38:4E:B1:63
Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial: 07ACC198
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/OKlNHvRjzgWkRkqTkpCfRThOsWM.roa
Signing time: Wed 22 Jun 2022 16:41:32 +0000
ROA not before: Wed 22 Jun 2022 16:41:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394548
IP address blocks: 5.183.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128762264 (0x7acc198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Validity
Not Before: Jun 22 16:41:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38a94d1ef463ce05a4464a9392909f45384eb163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:b4:06:5f:de:b5:62:c5:49:74:d7:c5:4c:
3d:4b:ff:05:7f:2f:d8:0f:40:8b:e9:34:5e:52:6f:
bf:b0:53:7d:2c:79:2a:b7:28:39:9e:b5:7d:28:f3:
78:d8:71:50:b8:6e:92:30:45:ae:c8:7b:3a:ad:5e:
8d:1c:ff:48:27:12:d1:25:90:ca:89:e9:a2:db:09:
65:35:93:10:e1:c3:2d:d7:06:97:ff:e3:6e:c5:d9:
e6:2e:5e:fc:6e:b8:d4:dd:11:29:56:25:a0:92:f3:
ae:af:8b:f7:a7:62:12:ea:a9:6a:f6:4b:bd:48:32:
a5:53:41:da:7d:9f:8a:93:ad:a5:c3:bd:86:d2:92:
f7:dd:5c:13:c1:df:8a:a7:d9:79:c2:8a:62:b4:b1:
c9:2e:23:3a:91:25:ee:c6:d5:69:39:35:bc:07:27:
43:8c:f9:90:37:92:f9:64:7f:8e:94:ff:06:97:cb:
a4:d4:af:46:f0:0b:25:68:d3:20:a2:f0:01:bc:b6:
2f:67:5b:7e:a3:44:51:9e:4e:fc:38:ee:39:c5:80:
df:f8:b4:39:5f:a2:a7:94:04:33:21:d4:64:41:27:
73:ec:2a:5e:c4:9d:4e:0d:00:79:8a:bd:93:a6:7f:
f2:f1:77:20:1d:a0:54:ab:4b:4b:c0:68:52:5f:83:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A9:4D:1E:F4:63:CE:05:A4:46:4A:93:92:90:9F:45:38:4E:B1:63
X509v3 Authority Key Identifier:
keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/OKlNHvRjzgWkRkqTkpCfRThOsWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.196.0/22
Signature Algorithm: sha256WithRSAEncryption
11:49:66:e9:7b:ea:72:d5:c1:51:a8:80:c1:a9:dc:e0:36:1c:
5f:e8:38:b2:be:ba:fc:b0:32:90:18:0e:5a:b4:da:a0:ba:f7:
7d:27:cd:e5:0c:db:9a:9f:ee:c7:f7:3f:b2:28:02:15:61:bb:
dd:7a:7d:12:c6:56:3c:89:c2:ed:fb:80:84:74:d8:72:b3:2a:
4a:ff:9a:8a:62:41:94:1e:6e:aa:dd:1c:d3:fe:d1:32:9f:bc:
45:e1:19:9a:87:b4:86:30:e9:d5:99:36:54:6d:ba:3c:a0:2a:
74:ea:f5:4e:0d:d5:54:f4:98:97:67:b6:2c:62:e2:10:5e:2f:
95:3f:ae:23:49:00:7d:d7:05:f0:c1:ac:b1:9b:4d:50:d2:b5:
ee:4b:df:7e:8f:8f:f9:d7:2a:83:73:e0:8d:09:20:cf:c7:2e:
d1:2b:7b:f9:6b:7a:42:1f:6b:fd:e8:53:7b:32:e6:c6:41:a4:
00:fb:2f:f4:6e:37:bb:52:4e:10:6f:c2:3f:b5:71:ae:f0:cf:
4f:08:42:71:01:f0:91:cb:b6:73:f4:3a:ca:e1:28:49:5f:ec:
6c:2f:75:7f:69:74:1f:16:ac:00:13:84:73:12:e5:9a:c2:a5:
a8:f7:a6:25:ee:e3:4e:2a:a1:1d:76:d5:dd:73:89:e8:57:c9:
ee:b1:9a:47
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB6zBmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MmZkNTU4YTY0ZTk3NTg2YTQzZGM3ZWU1MGE4ZDZiMjkyMzY1YjYwMB4XDTIyMDYy
MjE2NDEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzhhOTRkMWVmNDYz
Y2UwNWE0NDY0YTkzOTI5MDlmNDUzODRlYjE2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIhYtAZf3rVixUl018VMPUv/BX8v2A9Ai+k0XlJvv7BTfSx5
KrcoOZ61fSjzeNhxULhukjBFrsh7Oq1ejRz/SCcS0SWQyonpotsJZTWTEOHDLdcG
l//jbsXZ5i5e/G641N0RKVYloJLzrq+L96diEuqpavZLvUgypVNB2n2fipOtpcO9
htKS991cE8HfiqfZecKKYrSxyS4jOpEl7sbVaTk1vAcnQ4z5kDeS+WR/jpT/BpfL
pNSvRvALJWjTIKLwAby2L2dbfqNEUZ5O/DjuOcWA3/i0OV+ip5QEMyHUZEEnc+wq
XsSdTg0AeYq9k6Z/8vF3IB2gVKtLS8BoUl+Ds7sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ4qU0e9GPOBaRGSpOSkJ9FOE6xYzAfBgNVHSMEGDAWgBQS/VWKZOl1hqQ9
x+5QqNaykjZbYDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0V2MVZpbVRwZFlha1BjZnVVS2pXc3BJMlcyQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjUvYWY5NmRmLWE0ZDUtNDhmOS1hYzBjLTI0ZDhlNzQ3YzM4Zi8x
L09LbE5IdlJqemdXa1JrcVRrcENmUlRoT3NXTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUv
YWY5NmRmLWE0ZDUtNDhmOS1hYzBjLTI0ZDhlNzQ3YzM4Zi8xL0V2MVZpbVRwZFlh
a1BjZnVVS2pXc3BJMlcyQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgW3xDANBgkqhkiG9w0BAQsFAAOC
AQEAEUlm6XvqctXBUaiAwanc4DYcX+g4sr66/LAykBgOWrTaoLr3fSfN5Qzbmp/u
x/c/sigCFWG73Xp9EsZWPInC7fuAhHTYcrMqSv+aimJBlB5uqt0c0/7RMp+8ReEZ
moe0hjDp1Zk2VG26PKAqdOr1Tg3VVPSYl2e2LGLiEF4vlT+uI0kAfdcF8MGssZtN
UNK17kvffo+P+dcqg3PgjQkgz8cu0St7+Wt6Qh9r/ehTezLmxkGkAPsv9G43u1JO
EG/CP7VxrvDPTwhCcQHwkcu2c/Q6yuEoSV/sbC91f2l0HxasABOEcxLlmsKlqPem
Je7jTiqhHXbV3XOJ6FfJ7rGaRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:50 2024 by rpki-client on console-ams.rpki-client.org