Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/tI6Fm8IM5s3hqZdKlG-lmjW83VA.roa
File: tI6Fm8IM5s3hqZdKlG-lmjW83VA.roa (raw, json)
Hash identifier: i5H8/+gX3NNH2H/wyRh8PMsrB+1iSS2f0cFDZX0WOUQ=
Subject key identifier: B4:8E:85:9B:C2:0C:E6:CD:E1:A9:97:4A:94:6F:A5:9A:35:BC:DD:50
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 09835C6C
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/tI6Fm8IM5s3hqZdKlG-lmjW83VA.roa
Signing time: Sat 01 Jan 2022 16:05:39 +0000
ROA not before: Sat 01 Jan 2022 16:05:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51540
IP address blocks: 5.252.96.0/24 maxlen: 24
5.252.97.0/24 maxlen: 24
5.252.98.0/24 maxlen: 24
5.252.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159603820 (0x9835c6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Jan 1 16:05:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b48e859bc20ce6cde1a9974a946fa59a35bcdd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:61:c1:eb:5a:d1:5e:66:74:14:f6:49:0f:
46:a0:84:cc:1e:6c:db:a7:f7:5d:4c:17:ba:27:61:
2e:c7:dd:6b:fb:97:01:ee:07:55:64:f9:93:1e:21:
2b:d6:ba:ac:20:ec:51:ac:8f:b7:e2:37:e5:dc:01:
09:56:b8:eb:e5:27:12:a7:33:ac:36:64:28:ac:84:
d0:f3:2d:cf:64:dd:26:c5:29:78:be:72:8d:91:72:
30:89:75:34:21:0f:83:77:6c:f7:05:e1:e8:d6:cd:
60:c2:5a:63:74:5d:b8:17:37:16:2c:b9:35:77:29:
29:5b:08:cc:d4:5e:89:a1:77:3c:6b:43:0b:f1:f8:
51:4a:f7:be:0a:97:74:48:26:54:52:37:f6:68:f0:
af:de:fa:73:41:a5:7a:9a:6d:43:87:4a:37:66:6e:
c3:46:8a:66:30:b6:35:74:98:ee:c0:20:dc:f2:00:
f8:da:8e:2d:45:81:05:a1:24:3b:02:4c:1b:d8:0c:
46:8d:6a:4c:c3:23:06:6c:ec:8c:92:9b:da:3e:22:
74:bf:9e:58:29:0e:55:a2:91:6c:0f:40:24:90:9d:
15:b1:4e:cc:ad:c5:32:b1:22:b6:5a:c7:7e:4d:38:
d1:be:18:67:63:00:73:b0:3e:39:b2:52:aa:38:76:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8E:85:9B:C2:0C:E6:CD:E1:A9:97:4A:94:6F:A5:9A:35:BC:DD:50
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/tI6Fm8IM5s3hqZdKlG-lmjW83VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:e9:ce:43:23:3a:f7:b5:38:38:94:91:32:b3:33:1a:31:31:
29:89:56:8b:16:d0:ca:96:f7:c4:6e:df:94:14:49:91:61:fd:
7b:42:e0:1b:53:ca:a9:fd:80:aa:78:6f:d5:48:99:f6:31:68:
98:15:14:53:f1:98:cf:47:05:b3:b5:8e:da:41:f0:fe:c0:c7:
e9:9e:6f:7a:5d:fd:6d:20:10:de:aa:10:52:75:f6:2f:f3:c6:
d2:0e:6b:d5:df:29:f0:f0:8c:23:d6:46:30:16:84:1e:a9:b7:
d7:e3:a2:6d:57:fd:3c:c0:9f:9d:6c:8b:d5:6f:8b:da:9c:5f:
bc:e2:b6:a0:27:d7:cb:a8:85:47:3c:14:5d:ec:1b:53:78:cc:
db:5f:0e:b3:ed:d5:3f:65:3e:8a:14:8d:3f:fb:27:9b:fc:ae:
27:9b:1f:38:a8:fc:fe:32:ca:46:a0:78:03:60:10:02:b6:ee:
59:ea:0d:0b:84:71:61:ce:4b:e9:c5:d2:17:c5:7f:b2:f7:ad:
dc:44:34:f3:a6:5b:fd:8d:05:b2:82:c2:9c:cf:c5:f1:73:6e:
74:c3:67:cf:e4:b7:25:3d:eb:97:e9:dc:d1:fd:ed:0f:04:a0:
e6:83:e0:90:f5:42:86:fa:e6:23:d1:b0:8c:b4:f3:1e:ef:9f:
98:4a:12:75
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECYNcbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
N2QyN2ZjMjQ0NDNmY2RkNGIxYjY1Y2ZjODA3OGM0YTE0Mjg5ZjllMB4XDTIyMDEw
MTE2MDUzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjQ4ZTg1OWJjMjBj
ZTZjZGUxYTk5NzRhOTQ2ZmE1OWEzNWJjZGQ1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKeiYcHrWtFeZnQU9kkPRqCEzB5s26f3XUwXuidhLsfda/uX
Ae4HVWT5kx4hK9a6rCDsUayPt+I35dwBCVa46+UnEqczrDZkKKyE0PMtz2TdJsUp
eL5yjZFyMIl1NCEPg3ds9wXh6NbNYMJaY3RduBc3Fiy5NXcpKVsIzNReiaF3PGtD
C/H4UUr3vgqXdEgmVFI39mjwr976c0GlepptQ4dKN2Zuw0aKZjC2NXSY7sAg3PIA
+NqOLUWBBaEkOwJMG9gMRo1qTMMjBmzsjJKb2j4idL+eWCkOVaKRbA9AJJCdFbFO
zK3FMrEitlrHfk040b4YZ2MAc7A+ObJSqjh2/xcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS0joWbwgzmzeGpl0qUb6WaNbzdUDAfBgNVHSMEGDAWgBQ30n/CREP83Usb
Zc/IB4xKFCifnjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L045Sl93a1JEX04xTEcyWFB5QWVNU2hRb241NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmYvZDhjNThkLThkMjQtNDI4MC05MWZkLTQ4YjE2NjRkNDBkNS8x
L3RJNkZtOElNNXMzaHFaZEtsRy1sbWpXODNWQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYv
ZDhjNThkLThkMjQtNDI4MC05MWZkLTQ4YjE2NjRkNDBkNS8xL045Sl93a1JEX04x
TEcyWFB5QWVNU2hRb241NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgX8YDANBgkqhkiG9w0BAQsFAAOC
AQEATenOQyM697U4OJSRMrMzGjExKYlWixbQypb3xG7flBRJkWH9e0LgG1PKqf2A
qnhv1UiZ9jFomBUUU/GYz0cFs7WO2kHw/sDH6Z5vel39bSAQ3qoQUnX2L/PG0g5r
1d8p8PCMI9ZGMBaEHqm31+OibVf9PMCfnWyL1W+L2pxfvOK2oCfXy6iFRzwUXewb
U3jM218Os+3VP2U+ihSNP/snm/yuJ5sfOKj8/jLKRqB4A2AQArbuWeoNC4RxYc5L
6cXSF8V/svet3EQ086Zb/Y0FsoLCnM/F8XNudMNnz+S3JT3rl+nc0f3tDwSg5oPg
kPVChvrmI9GwjLTzHu+fmEoSdQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:06 2023 by rpki-client on console-fra.rpki-client.org