Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/5bU_EkyRGVLq808XXqWPnWtjbmM.roa
File: 5bU_EkyRGVLq808XXqWPnWtjbmM.roa (raw, json)
Hash identifier: V+ReFvazKRILDTITYvubMWZg8QWKluii6Zo4Mlff2aw=
Subject key identifier: E5:B5:3F:12:4C:91:19:52:EA:F3:4F:17:5E:A5:8F:9D:6B:63:6E:63
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0992B9A0
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/5bU_EkyRGVLq808XXqWPnWtjbmM.roa
Signing time: Sat 01 Jan 2022 05:04:05 +0000
ROA not before: Sat 01 Jan 2022 05:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60397
IP address blocks: 84.236.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160610720 (0x992b9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5b53f124c911952eaf34f175ea58f9d6b636e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:23:13:c9:9c:bc:af:23:37:d7:a3:ad:eb:
ca:6f:4e:66:1a:67:50:36:fd:6c:83:24:8a:99:15:
9f:d8:3d:c2:c3:88:52:ad:bd:ac:ed:f7:eb:f0:2e:
9f:4c:c7:43:7d:cd:7c:83:45:d3:29:58:d7:98:37:
a7:c8:7e:6f:31:6e:05:6d:46:a5:64:b5:e0:9a:6e:
f7:2e:de:20:9c:87:c5:ff:a2:a4:12:36:75:52:9f:
30:90:d2:3e:86:8d:00:7b:11:6e:d9:65:37:23:e5:
5f:6d:06:c7:d5:62:c1:bd:72:4e:4f:06:c1:b7:b1:
49:a3:47:99:c4:5d:32:60:5d:a3:9a:f2:60:95:df:
74:4d:a7:b7:0c:cd:a5:be:9b:0b:b5:9c:27:ad:80:
eb:15:81:25:78:81:37:ee:f1:8f:75:53:2a:07:b4:
1d:55:13:75:de:8d:53:b2:44:d0:ea:1e:c2:9d:34:
96:ae:60:66:c0:f0:e4:4c:02:ff:bb:2a:29:56:1d:
e2:77:37:85:4f:49:32:2a:93:8b:ed:d2:cb:59:0d:
df:70:c6:95:80:44:61:5a:63:ec:e7:6d:4f:5e:6c:
a8:68:e2:3e:72:29:43:30:f7:7e:a1:92:70:25:11:
7a:8e:de:11:c4:fc:6b:fa:fc:f2:51:77:19:81:a5:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B5:3F:12:4C:91:19:52:EA:F3:4F:17:5E:A5:8F:9D:6B:63:6E:63
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/5bU_EkyRGVLq808XXqWPnWtjbmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.152.0/24
Signature Algorithm: sha256WithRSAEncryption
50:51:bf:50:55:c1:f2:5f:86:ce:6c:8e:d4:44:db:2f:bd:94:
74:75:cf:9b:33:1a:fa:8d:ac:17:c6:4d:a3:0a:8d:d3:fe:e9:
95:dd:8e:db:80:a2:a8:b5:ae:30:d1:94:99:ad:8f:31:34:56:
4b:3e:c2:b6:c6:f2:4e:53:22:49:0d:d5:0d:1b:96:97:a0:3d:
91:97:8f:4d:28:e7:82:91:ee:4c:c9:6e:29:ea:44:94:e4:41:
ac:93:19:b9:e7:72:c3:b7:0c:17:a7:46:9e:99:f2:87:7d:42:
0a:82:b1:06:fa:81:a0:e0:7c:5d:1c:e4:16:45:45:68:fd:d0:
d7:a1:70:1c:97:60:90:31:30:e3:6d:ad:d7:ef:50:88:bb:fb:
49:94:79:b9:c1:df:b8:70:ab:0a:ae:cc:4c:de:1d:d8:9a:6a:
9a:1f:23:74:4c:e5:22:21:7b:91:b8:e4:c1:57:5a:3e:48:2f:
1e:f6:54:6b:18:84:9b:4a:0b:01:62:89:e6:3d:b8:f6:a7:73:
02:d4:f3:1a:d3:d3:11:3d:c7:34:2b:55:35:d3:3d:25:a1:8e:
bd:a8:fa:f8:81:5d:d0:22:a6:38:c2:05:1c:cf:6c:af:2c:07:
08:e1:06:f4:97:15:ef:4c:41:49:77:15:7d:7f:84:6d:9d:4e:
f0:cd:f7:6d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECZK5oDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YWFmMTdiMDAxNWRiYjdjZDk5MmYyNmNkZmYwMWM0ZTI2MjBiNzNlMB4XDTIyMDEw
MTA1MDQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTViNTNmMTI0Yzkx
MTk1MmVhZjM0ZjE3NWVhNThmOWQ2YjYzNmU2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANGUIxPJnLyvIzfXo63rym9OZhpnUDb9bIMkipkVn9g9wsOI
Uq29rO336/Aun0zHQ33NfINF0ylY15g3p8h+bzFuBW1GpWS14Jpu9y7eIJyHxf+i
pBI2dVKfMJDSPoaNAHsRbtllNyPlX20Gx9Viwb1yTk8GwbexSaNHmcRdMmBdo5ry
YJXfdE2ntwzNpb6bC7WcJ62A6xWBJXiBN+7xj3VTKge0HVUTdd6NU7JE0Ooewp00
lq5gZsDw5EwC/7sqKVYd4nc3hU9JMiqTi+3Sy1kN33DGlYBEYVpj7OdtT15sqGji
PnIpQzD3fqGScCUReo7eEcT8a/r88lF3GYGlWGUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTltT8STJEZUurzTxdepY+da2NuYzAfBgNVHSMEGDAWgBTarxewAV27fNmS
8mzf8BxOJiC3PjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJxOFhzQUZkdTN6Wmt2SnMzX0FjVGlZZ3R6NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDUvYzg5NzNjLTNjZmEtNDYwNC04MTEwLWNmMDZkMTk4M2JhMS8x
LzViVV9Fa3lSR1ZMcTgwOFhYcVdQbld0amJtTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUv
Yzg5NzNjLTNjZmEtNDYwNC04MTEwLWNmMDZkMTk4M2JhMS8xLzJxOFhzQUZkdTN6
Wmt2SnMzX0FjVGlZZ3R6NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFTsmDANBgkqhkiG9w0BAQsFAAOC
AQEAUFG/UFXB8l+GzmyO1ETbL72UdHXPmzMa+o2sF8ZNowqN0/7pld2O24CiqLWu
MNGUma2PMTRWSz7CtsbyTlMiSQ3VDRuWl6A9kZePTSjngpHuTMluKepElORBrJMZ
uedyw7cMF6dGnpnyh31CCoKxBvqBoOB8XRzkFkVFaP3Q16FwHJdgkDEw422t1+9Q
iLv7SZR5ucHfuHCrCq7MTN4d2Jpqmh8jdEzlIiF7kbjkwVdaPkgvHvZUaxiEm0oL
AWKJ5j249qdzAtTzGtPTET3HNCtVNdM9JaGOvaj6+IFd0CKmOMIFHM9srywHCOEG
9JcV70xBSXcVfX+EbZ1O8M33bQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:07 2023 by rpki-client on console.sobornost.net