Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/5NlIOx7Y6ZIEdJiOXp-atkVEmFA.roa
File: 5NlIOx7Y6ZIEdJiOXp-atkVEmFA.roa (raw, json)
Hash identifier: cJ2BC/8aiZadEsbPBlrQcJbbnrdITomxOPnjJ0znfAE=
Subject key identifier: E4:D9:48:3B:1E:D8:E9:92:04:74:98:8E:5E:9F:9A:B6:45:44:98:50
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0181F2F41015F0792630E6FACF2DDAE88BEA
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/5NlIOx7Y6ZIEdJiOXp-atkVEmFA.roa
Signing time: Tue 12 Jul 2022 15:08:09 +0000
ROA not before: Tue 12 Jul 2022 15:08:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 146.19.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:f4:10:15:f0:79:26:30:e6:fa:cf:2d:da:e8:8b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jul 12 15:08:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4d9483b1ed8e9920474988e5e9f9ab645449850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:60:0c:5a:07:33:75:1f:06:b0:d7:cf:21:
db:ed:e4:f6:3c:5c:50:22:a6:a2:d5:4c:0d:1d:19:
e4:1d:e9:93:7a:33:c9:f3:7a:aa:fd:1f:1f:d2:b2:
97:c8:8f:41:b5:bb:d6:97:16:97:3f:52:b7:5d:ed:
cb:bb:07:ab:7e:6c:fe:5c:c8:31:80:8d:ce:43:73:
14:10:69:e2:85:66:b5:7f:0d:93:09:95:19:8a:16:
09:77:8f:ff:44:ea:1b:f4:8c:3a:55:6f:60:52:ad:
52:9b:48:15:10:d1:a5:0a:0c:f6:ae:3d:b0:04:5a:
d4:a1:11:f8:bc:27:96:0d:5a:e8:52:2a:69:93:a6:
b2:13:cc:08:a4:35:ed:48:d9:e6:c8:e8:86:bb:a2:
e9:d9:96:b8:89:cd:15:68:cf:0f:8e:b2:f6:c4:8c:
b5:6e:1c:b6:e5:f9:a1:f5:52:4b:61:92:98:10:36:
df:94:7b:bd:fd:d6:ce:a0:be:4b:c9:6b:14:fd:4d:
9c:d5:e3:e4:e0:22:b6:cc:28:ed:e7:2c:de:c8:04:
c1:d5:68:c1:5d:6d:cc:47:b3:16:fc:06:ac:b6:af:
73:a5:08:c5:32:e4:d8:a8:cc:fc:2a:b4:be:b2:65:
25:59:09:8a:bb:39:5c:87:ca:1c:49:a8:c6:16:77:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:48:3B:1E:D8:E9:92:04:74:98:8E:5E:9F:9A:B6:45:44:98:50
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/5NlIOx7Y6ZIEdJiOXp-atkVEmFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c6:5a:3b:1b:f3:ca:04:fc:f5:3b:ba:95:f0:9f:03:53:42:
1f:ed:a2:b5:5e:ea:ac:40:bc:f1:f4:82:65:1f:c2:91:51:93:
cc:ee:6f:21:26:01:c8:7c:62:3d:68:90:ba:98:fd:01:e2:18:
83:e6:64:5a:5a:f3:84:7a:e5:2d:fd:4f:a2:fb:fd:70:48:83:
14:b5:67:79:93:5a:58:1d:97:51:c1:02:dc:c3:a9:16:5b:86:
cd:98:e7:a0:fa:08:5b:87:b2:90:2c:e8:63:e5:19:4a:c6:8f:
a3:f1:6b:0d:7f:95:f4:11:06:54:09:ca:f3:ca:4d:e2:d8:99:
ee:db:7a:3f:c0:53:b6:82:a3:4a:f2:fd:fe:3a:93:a7:ec:5e:
51:25:93:1b:06:75:6f:0c:be:ae:e2:ec:8a:b8:e5:0b:ec:81:
0f:b8:95:15:25:6f:93:f3:75:79:6c:fe:c0:92:df:b2:c2:85:
ba:b2:09:57:73:15:6f:b8:8f:fa:be:69:c3:d9:7b:ab:87:1b:
f1:24:7a:a3:4a:e0:80:df:b7:04:97:3a:cc:c2:1b:de:05:39:
ac:37:81:84:2c:44:bf:30:22:43:48:3c:a6:85:f0:2f:a3:91:
5f:0a:6d:24:6b:cc:5f:70:aa:36:2e:95:bf:85:60:ee:10:a0:
24:a2:6b:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHy9BAV8HkmMOb6zy3a6IvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3
MDM4MTUwHhcNMjIwNzEyMTUwODA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGQ5NDgzYjFlZDhlOTkyMDQ3NDk4OGU1ZTlmOWFiNjQ1NDQ5ODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaZgDFoHM3UfBrDXzyHb7eT2PFxQ
Iqai1UwNHRnkHemTejPJ83qq/R8f0rKXyI9BtbvWlxaXP1K3Xe3Luwerfmz+XMgx
gI3OQ3MUEGnihWa1fw2TCZUZihYJd4//ROob9Iw6VW9gUq1Sm0gVENGlCgz2rj2w
BFrUoRH4vCeWDVroUippk6ayE8wIpDXtSNnmyOiGu6Lp2Za4ic0VaM8PjrL2xIy1
bhy25fmh9VJLYZKYEDbflHu9/dbOoL5LyWsU/U2c1ePk4CK2zCjt5yzeyATB1WjB
XW3MR7MW/Aastq9zpQjFMuTYqMz8KrS+smUlWQmKuzlch8ocSajGFnd9XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOTZSDse2OmSBHSYjl6fmrZFRJhQMB8GA1UdIwQY
MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt
MzAxODlhNWE0ZWJhLzEvNU5sSU94N1k2WklFZEppT1hwLWF0a1ZFbUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh
LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNVMA0G
CSqGSIb3DQEBCwUAA4IBAQBuxlo7G/PKBPz1O7qV8J8DU0If7aK1XuqsQLzx9IJl
H8KRUZPM7m8hJgHIfGI9aJC6mP0B4hiD5mRaWvOEeuUt/U+i+/1wSIMUtWd5k1pY
HZdRwQLcw6kWW4bNmOeg+ghbh7KQLOhj5RlKxo+j8WsNf5X0EQZUCcrzyk3i2Jnu
23o/wFO2gqNK8v3+OpOn7F5RJZMbBnVvDL6u4uyKuOUL7IEPuJUVJW+T83V5bP7A
kt+ywoW6sglXcxVvuI/6vmnD2XurhxvxJHqjSuCA37cElzrMwhveBTmsN4GELES/
MCJDSDymhfAvo5FfCm0ka8xfcKo2LpW/hWDuEKAkomuD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org