Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/5d-fjfwCvwu6lC5RDEI47wxRUaw.roa
File: 5d-fjfwCvwu6lC5RDEI47wxRUaw.roa (raw, json)
Hash identifier: x4+8bQRLtIWVRbZwhyHD1RBBVbf6goznjCYzorfoJT0=
Subject key identifier: E5:DF:9F:8D:FC:02:BF:0B:BA:94:2E:51:0C:42:38:EF:0C:51:51:AC
Certificate issuer: /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Certificate serial: 0A49B191
Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/5d-fjfwCvwu6lC5RDEI47wxRUaw.roa
Signing time: Sat 01 Jan 2022 16:06:37 +0000
ROA not before: Sat 01 Jan 2022 16:06:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210125
IP address blocks: 79.174.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172601745 (0xa49b191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Validity
Not Before: Jan 1 16:06:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5df9f8dfc02bf0bba942e510c4238ef0c5151ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:7b:26:c8:07:23:5f:0c:6c:31:38:22:d1:
01:09:0b:5c:30:03:bd:8f:52:22:22:ce:76:cd:fa:
67:b6:18:8d:c0:c3:ff:36:36:95:01:37:7e:6a:34:
90:62:7d:a8:91:ca:19:ba:0d:d3:14:b3:59:76:54:
75:57:93:d2:40:1b:b6:f2:4e:8c:bc:3e:8c:3f:9f:
b4:f1:38:6b:2f:6f:a7:14:50:90:81:fd:7f:96:7d:
a0:3e:55:95:80:ec:c6:48:6a:f0:b7:95:e4:d5:a7:
4b:b6:f5:76:ab:89:40:5f:eb:d1:b1:53:af:24:51:
0b:8c:e8:0e:83:e7:d9:0f:67:a8:b0:66:a8:0f:16:
d3:25:73:9b:2e:78:c9:f6:1b:96:7a:49:c0:7f:cc:
4a:b1:e7:4b:ba:a7:2a:0f:3d:b9:b8:8b:e9:92:ca:
69:76:fa:7f:f5:e2:52:67:60:43:dc:57:21:17:91:
a2:64:8b:fb:3d:e4:60:7b:16:63:92:ac:e1:12:52:
b8:dc:75:f8:58:d5:d1:ba:d5:8c:b9:d6:6f:e7:40:
bc:f7:f0:3a:e1:bd:f4:dc:7a:84:0c:ac:f4:2b:9f:
59:ad:3c:fe:2d:7f:c3:bd:b2:a7:d0:6a:26:ce:a5:
e4:22:54:5a:a7:b9:d4:b1:c9:b3:06:13:7d:29:a0:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DF:9F:8D:FC:02:BF:0B:BA:94:2E:51:0C:42:38:EF:0C:51:51:AC
X509v3 Authority Key Identifier:
keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/5d-fjfwCvwu6lC5RDEI47wxRUaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:e0:35:cd:93:07:c4:02:76:4a:e9:b8:bf:1b:a0:ca:46:cc:
37:0a:eb:96:4b:7a:94:ec:51:12:e3:45:98:5f:3b:5b:bb:4f:
0c:8c:7d:f4:58:0c:af:44:5b:10:5e:9f:3a:7a:3d:c6:54:cf:
35:2c:7a:3c:5c:f7:06:b6:ac:57:0c:a5:8e:9c:b9:0e:1f:8e:
4f:22:7c:94:46:d9:3a:5f:3d:29:1c:0c:7b:b3:0d:45:75:d4:
0b:cc:47:f1:f3:17:b7:dc:f9:80:db:cd:dc:d8:67:8e:47:87:
aa:d9:70:be:64:10:83:ce:5b:0f:fb:eb:43:96:ae:0b:2d:28:
3f:e5:ca:a3:0e:ea:40:35:d8:d4:62:ab:7b:8c:a1:4a:64:d4:
c9:9d:36:85:a7:54:ad:bf:f1:2c:9b:2d:0b:68:2a:36:88:13:
09:16:53:c4:9c:3b:a1:60:95:42:7c:27:d4:fe:c6:07:7d:5d:
03:76:a9:e2:d6:33:de:0d:25:e1:96:2d:60:81:9b:2a:b5:23:
3c:04:29:09:e7:c0:5a:ad:42:d9:ac:11:84:9f:d6:ee:e3:16:
e6:71:ae:4b:6f:cd:ac:ef:73:24:4c:c3:2c:f9:ad:9a:85:b3:
4d:30:b2:14:e1:d2:90:85:cb:6e:9f:13:af:be:44:70:61:29:
e5:82:20:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECkmxkTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTQzNDM3ZWU5YzVhOGM4NGY4ZDM0ODNkYzVlMGZhNGJhODljYzNkMB4XDTIyMDEw
MTE2MDYzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTVkZjlmOGRmYzAy
YmYwYmJhOTQyZTUxMGM0MjM4ZWYwYzUxNTFhYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKcZeybIByNfDGwxOCLRAQkLXDADvY9SIiLOds36Z7YYjcDD
/zY2lQE3fmo0kGJ9qJHKGboN0xSzWXZUdVeT0kAbtvJOjLw+jD+ftPE4ay9vpxRQ
kIH9f5Z9oD5VlYDsxkhq8LeV5NWnS7b1dquJQF/r0bFTryRRC4zoDoPn2Q9nqLBm
qA8W0yVzmy54yfYblnpJwH/MSrHnS7qnKg89ubiL6ZLKaXb6f/XiUmdgQ9xXIReR
omSL+z3kYHsWY5Ks4RJSuNx1+FjV0brVjLnWb+dAvPfwOuG99Nx6hAys9CufWa08
/i1/w72yp9BqJs6l5CJUWqe51LHJswYTfSmgwnECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTl35+N/AK/C7qULlEMQjjvDFFRrDAfBgNVHSMEGDAWgBRVQ0N+6cWoyE+N
NIPcXg+kuonMPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZVTkRmdW5GcU1oUGpUU0QzRjRQcExxSnpEMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjEvMGIyNTI0LWZjN2ItNGVjZi1hODEzLTRhNWY5MmU1YmRlMi8x
LzVkLWZqZndDdnd1NmxDNVJERUk0N3d4UlVhdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEv
MGIyNTI0LWZjN2ItNGVjZi1hODEzLTRhNWY5MmU1YmRlMi8xL1ZVTkRmdW5GcU1o
UGpUU0QzRjRQcExxSnpEMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk+uGDANBgkqhkiG9w0BAQsFAAOC
AQEAHuA1zZMHxAJ2Sum4vxugykbMNwrrlkt6lOxREuNFmF87W7tPDIx99FgMr0Rb
EF6fOno9xlTPNSx6PFz3BrasVwyljpy5Dh+OTyJ8lEbZOl89KRwMe7MNRXXUC8xH
8fMXt9z5gNvN3NhnjkeHqtlwvmQQg85bD/vrQ5auCy0oP+XKow7qQDXY1GKre4yh
SmTUyZ02hadUrb/xLJstC2gqNogTCRZTxJw7oWCVQnwn1P7GB31dA3ap4tYz3g0l
4ZYtYIGbKrUjPAQpCefAWq1C2awRhJ/W7uMW5nGuS2/NrO9zJEzDLPmtmoWzTTCy
FOHSkIXLbp8Tr75EcGEp5YIgrQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:33 2023 by rpki-client on console.sobornost.net