Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/EFnG_S91kVnbN_LPyDOu4uu0tbQ.roa
File: EFnG_S91kVnbN_LPyDOu4uu0tbQ.roa (raw, json)
Hash identifier: NAcynQ4f0fiQ0cuhkkfzRHYs+WzlIvDtiEzzvkpryoc=
Subject key identifier: 10:59:C6:FD:2F:75:91:59:DB:37:F2:CF:C8:33:AE:E2:EB:B4:B5:B4
Certificate issuer: /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial: 0181F29A2439402BA2E529F19A112BCF588F
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/EFnG_S91kVnbN_LPyDOu4uu0tbQ.roa
Signing time: Tue 12 Jul 2022 13:29:57 +0000
ROA not before: Tue 12 Jul 2022 13:29:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197883
IP address blocks: 5.42.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:9a:24:39:40:2b:a2:e5:29:f1:9a:11:2b:cf:58:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
Validity
Not Before: Jul 12 13:29:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1059c6fd2f759159db37f2cfc833aee2ebb4b5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:2b:e9:85:c4:54:b4:7b:d1:ff:08:f3:4a:
5a:c4:41:f2:b1:5f:96:31:97:db:78:ed:1c:64:23:
a9:f4:6d:54:08:78:9a:5d:5f:bf:02:c5:55:2f:a2:
5c:68:97:98:b1:00:ec:83:04:6a:79:0f:51:a1:01:
ff:f1:d2:ac:23:22:33:80:6e:b4:b7:95:a2:01:d1:
f0:bf:4c:ab:e1:57:b1:38:3f:e4:26:83:7c:0f:a3:
d5:85:43:86:4b:f7:f5:2c:1d:bf:0f:fc:d4:48:9d:
cc:3d:2b:17:59:50:7c:e4:02:b5:fd:0f:dc:4e:4b:
ff:df:27:53:97:0a:99:0d:59:ee:ce:f9:13:ba:26:
4d:61:44:10:89:a1:e0:89:27:07:dc:f3:d2:8b:60:
89:3e:98:96:d9:cb:b4:ca:fe:71:d4:82:1e:f2:81:
8f:26:31:e6:81:e6:09:05:86:b9:22:fd:78:d1:b0:
a3:1b:80:0d:a7:b2:92:f6:68:50:d3:31:58:41:8d:
fb:58:a4:12:cd:e9:75:82:2f:0b:1c:05:3e:b6:88:
e0:df:00:2c:ba:6c:11:aa:af:ac:f2:a0:56:a5:b9:
bd:93:bb:a8:72:b8:8a:0a:bf:b8:ef:67:02:9f:ef:
18:88:9e:20:68:c2:1f:9a:4b:1f:aa:59:89:96:76:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:59:C6:FD:2F:75:91:59:DB:37:F2:CF:C8:33:AE:E2:EB:B4:B5:B4
X509v3 Authority Key Identifier:
keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/EFnG_S91kVnbN_LPyDOu4uu0tbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:38:36:1c:32:af:34:f6:f9:48:d1:25:c9:09:c2:c5:c2:66:
8f:db:0d:22:df:19:5a:75:bf:d6:00:eb:4f:eb:16:58:c6:b5:
5c:68:21:1e:16:2e:67:57:36:11:cb:a5:2c:c6:0d:ca:16:07:
64:d6:55:46:1b:05:1d:51:fa:3f:1a:99:1f:56:7e:8a:63:17:
c5:59:6a:24:dc:48:58:1e:b1:52:b3:4f:b2:d7:32:9a:4d:ce:
56:f3:78:1d:e5:d6:6d:10:88:45:fc:b9:02:97:66:ab:2d:9f:
f1:eb:6b:6a:21:a2:c0:92:0e:dc:c8:81:63:c3:78:fb:34:9f:
a9:9d:21:a2:54:40:6a:53:4d:50:91:e0:0a:64:68:13:67:5c:
ca:2f:32:ec:13:e9:b1:fa:30:de:35:24:c4:88:4c:f6:2e:84:
56:96:4a:d3:fb:25:ae:32:a6:40:37:1d:47:30:38:52:48:49:
02:3d:1c:ec:72:da:4b:fa:81:e7:21:f2:19:5a:d7:64:03:d3:
b7:a2:39:4a:d4:43:42:5f:e8:bc:88:7b:f0:9a:cf:1b:44:e5:
35:46:95:3e:cb:e8:40:35:de:a1:53:7a:8c:fd:af:18:c2:90:
b7:d1:40:e0:97:ab:20:ea:17:d3:68:6f:ce:b2:80:c1:b8:8c:
4e:80:b2:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHymiQ5QCui5SnxmhErz1iPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNTA5NmZlMzM5MDQ0OWM5MzZlODU3MDYxZDRhNjk2NWQ0
MDhhMzEwHhcNMjIwNzEyMTMyOTU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDU5YzZmZDJmNzU5MTU5ZGIzN2YyY2ZjODMzYWVlMmViYjRiNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1Qr6YXEVLR70f8I80paxEHysV+W
MZfbeO0cZCOp9G1UCHiaXV+/AsVVL6JcaJeYsQDsgwRqeQ9RoQH/8dKsIyIzgG60
t5WiAdHwv0yr4VexOD/kJoN8D6PVhUOGS/f1LB2/D/zUSJ3MPSsXWVB85AK1/Q/c
Tkv/3ydTlwqZDVnuzvkTuiZNYUQQiaHgiScH3PPSi2CJPpiW2cu0yv5x1IIe8oGP
JjHmgeYJBYa5Iv140bCjG4ANp7KS9mhQ0zFYQY37WKQSzel1gi8LHAU+tojg3wAs
umwRqq+s8qBWpbm9k7uocriKCr+472cCn+8YiJ4gaMIfmksfqlmJlnZc6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBBZxv0vdZFZ2zfyz8gzruLrtLW0MB8GA1UdIwQY
MBaAFPFQlv4zkESck26FcGHUppZdQIoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81ZDZkNjktODg4MC00YTkyLTg3NTYt
NTgxNWZkM2RhMjk3LzEvRUZuR19TOTFrVm5iTl9MUHlET3U0dXUwdGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81ZDZkNjktODg4MC00YTkyLTg3NTYtNTgxNWZkM2RhMjk3
LzEvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSrBMA0G
CSqGSIb3DQEBCwUAA4IBAQAeODYcMq809vlI0SXJCcLFwmaP2w0i3xladb/WAOtP
6xZYxrVcaCEeFi5nVzYRy6Usxg3KFgdk1lVGGwUdUfo/GpkfVn6KYxfFWWok3EhY
HrFSs0+y1zKaTc5W83gd5dZtEIhF/LkCl2arLZ/x62tqIaLAkg7cyIFjw3j7NJ+p
nSGiVEBqU01QkeAKZGgTZ1zKLzLsE+mx+jDeNSTEiEz2LoRWlkrT+yWuMqZANx1H
MDhSSEkCPRzsctpL+oHnIfIZWtdkA9O3ojlK1ENCX+i8iHvwms8bROU1RpU+y+hA
Nd6hU3qM/a8YwpC30UDgl6sg6hfTaG/OsoDBuIxOgLKe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:26 2024 by rpki-client on console-ams.rpki-client.org