Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/5rmCtKqa25K1U_gClCQ31FwTBAg.roa
File: 5rmCtKqa25K1U_gClCQ31FwTBAg.roa (raw, json)
Hash identifier: +LLzkoOFO3sfTcYJPiNVMUxRsVarhCJX4QDukxITCAc=
Subject key identifier: E6:B9:82:B4:AA:9A:DB:92:B5:53:F8:02:94:24:37:D4:5C:13:04:08
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 39F7B4BD
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/5rmCtKqa25K1U_gClCQ31FwTBAg.roa
Signing time: Sat 01 Jan 2022 14:00:33 +0000
ROA not before: Sat 01 Jan 2022 14:00:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43153
IP address blocks: 85.219.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972534973 (0x39f7b4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6b982b4aa9adb92b553f802942437d45c130408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:56:22:2b:ae:65:50:06:f3:70:29:f8:99:
f5:07:cf:d8:a2:d6:3c:39:c0:36:a7:9a:a0:ab:11:
99:fe:7f:1c:91:76:15:4e:84:ee:28:0e:23:d3:85:
e7:ed:60:cc:52:2a:17:38:d4:84:27:2d:bf:51:79:
f9:e1:1a:76:6e:69:b8:42:16:b2:14:9d:b3:aa:54:
80:6f:49:95:06:f4:35:e5:81:6f:14:2b:81:58:ec:
4f:b8:a4:43:14:92:cb:45:85:47:3a:4b:dd:44:5e:
5d:25:e6:2b:28:5d:b0:f4:95:c5:12:5e:9a:cc:32:
3f:8c:ca:2d:0a:1e:d2:45:a8:0a:cc:e6:8e:31:bc:
5f:4b:31:da:c2:96:0e:88:78:24:7f:ed:5f:5f:eb:
96:fd:3d:b3:24:e9:01:8f:3e:ed:40:48:f2:ca:3c:
74:cf:66:4a:0f:92:08:01:ea:f3:6c:b9:65:14:4a:
28:51:73:f2:09:f2:e0:7e:79:2a:3e:54:01:e0:14:
fb:11:c8:f7:b3:fe:a1:a9:84:19:d4:76:11:33:0a:
ce:85:7f:1e:4f:56:56:d6:d0:72:3d:1e:7e:c4:c9:
95:db:2a:dc:ba:b7:96:ec:ec:8e:ee:9e:c9:e8:e1:
d2:dc:e8:5e:ba:3b:68:64:a3:4e:b8:85:c4:d1:d8:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B9:82:B4:AA:9A:DB:92:B5:53:F8:02:94:24:37:D4:5C:13:04:08
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/5rmCtKqa25K1U_gClCQ31FwTBAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.208.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:20:86:7a:75:80:94:09:1e:ba:59:ed:5f:90:b3:d1:e5:7a:
96:74:f4:54:2f:3a:87:a7:a8:12:91:e5:1c:aa:23:fb:29:76:
ac:17:17:04:2e:07:66:b4:a0:d8:16:c1:de:8d:32:2f:c7:5e:
8c:ed:04:9c:70:26:e9:c2:91:b5:3d:fe:07:e7:9e:97:41:cc:
3f:b7:07:0d:bd:2a:c8:4c:a7:7f:2c:a1:fa:b4:69:11:38:b0:
6d:90:0d:5f:49:45:8e:87:7a:bc:ba:d9:2e:c8:43:09:71:ec:
93:b8:55:c1:0a:dd:dc:12:04:a6:93:23:09:7b:2e:25:59:d2:
37:d8:9d:9a:7b:c5:2a:46:f0:7d:48:9b:69:18:45:2f:88:eb:
8c:da:f7:71:28:21:19:84:0e:ae:28:12:02:07:d4:da:0e:bc:
02:61:79:f9:53:8e:f9:d0:23:78:4e:0e:bc:ca:b3:21:8c:59:
e9:1a:61:00:75:e7:68:be:a5:11:8d:6c:71:a7:96:7c:82:36:
a7:e3:71:b6:8a:0c:c2:39:99:e4:cc:82:83:2e:8a:44:88:3e:
3d:99:ec:e1:31:2d:6f:da:90:9a:31:d9:56:47:da:88:da:9a:
cc:26:c9:08:42:23:9d:ca:e9:83:49:3a:46:53:f8:2b:e4:16:
28:93:a2:99
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOfe0vTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YWNhNjNkZjI0OGI3YWRmM2RkZDA3ZThjMmQzZWVkZDAyY2VmOTMzMB4XDTIyMDEw
MTE0MDAzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTZiOTgyYjRhYTlh
ZGI5MmI1NTNmODAyOTQyNDM3ZDQ1YzEzMDQwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKspViIrrmVQBvNwKfiZ9QfP2KLWPDnANqeaoKsRmf5/HJF2
FU6E7igOI9OF5+1gzFIqFzjUhCctv1F5+eEadm5puEIWshSds6pUgG9JlQb0NeWB
bxQrgVjsT7ikQxSSy0WFRzpL3UReXSXmKyhdsPSVxRJemswyP4zKLQoe0kWoCszm
jjG8X0sx2sKWDoh4JH/tX1/rlv09syTpAY8+7UBI8so8dM9mSg+SCAHq82y5ZRRK
KFFz8gny4H55Kj5UAeAU+xHI97P+oamEGdR2ETMKzoV/Hk9WVtbQcj0efsTJldsq
3Lq3luzsju6eyejh0tzoXro7aGSjTriFxNHYjZcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTmuYK0qprbkrVT+AKUJDfUXBMECDAfBgNVHSMEGDAWgBQaymPfJIt63z3d
B+jC0+7dAs75MzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dzcGozeVNMZXQ4OTNRZm93dFB1M1FMTy1UTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvMWY2NDU4LWRjNzUtNGFkZC1hZTcyLTkxZTMxODRiYjBhYi8x
LzVybUN0S3FhMjVLMVVfZ0NsQ1EzMUZ3VEJBZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
MWY2NDU4LWRjNzUtNGFkZC1hZTcyLTkxZTMxODRiYjBhYi8xL0dzcGozeVNMZXQ4
OTNRZm93dFB1M1FMTy1UTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVXb0DANBgkqhkiG9w0BAQsFAAOC
AQEAWyCGenWAlAkeulntX5Cz0eV6lnT0VC86h6eoEpHlHKoj+yl2rBcXBC4HZrSg
2BbB3o0yL8dejO0EnHAm6cKRtT3+B+eel0HMP7cHDb0qyEynfyyh+rRpETiwbZAN
X0lFjod6vLrZLshDCXHsk7hVwQrd3BIEppMjCXsuJVnSN9idmnvFKkbwfUibaRhF
L4jrjNr3cSghGYQOrigSAgfU2g68AmF5+VOO+dAjeE4OvMqzIYxZ6RphAHXnaL6l
EY1scaeWfII2p+NxtooMwjmZ5MyCgy6KRIg+PZns4TEtb9qQmjHZVkfaiNqazCbJ
CEIjncrpg0k6RlP4K+QWKJOimQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net