Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/G-4-8o5_Fau-FxdBcffKmDvXdkM.roa
File: G-4-8o5_Fau-FxdBcffKmDvXdkM.roa (raw, json)
Hash identifier: olNmVYTlUohctAUDI8rGiwvJGvudzeIiXdXkmbfD0gU=
Subject key identifier: 1B:EE:3E:F2:8E:7F:15:AB:BE:17:17:41:71:F7:CA:98:3B:D7:76:43
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 169E9230
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/G-4-8o5_Fau-FxdBcffKmDvXdkM.roa
Signing time: Sat 01 Jan 2022 09:06:37 +0000
ROA not before: Sat 01 Jan 2022 09:06:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200497
IP address blocks: 151.248.15.0/24 maxlen: 24
151.248.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379490864 (0x169e9230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jan 1 09:06:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bee3ef28e7f15abbe17174171f7ca983bd77643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:28:20:72:9c:2e:37:c0:10:1a:4e:18:2b:
79:8c:c9:36:e5:6a:2a:85:e6:e3:e7:bf:7d:20:bc:
70:30:73:ed:fd:e2:bf:81:b6:a0:52:e1:d0:c2:86:
30:46:50:f3:6e:92:75:3a:49:04:14:6e:73:3b:dc:
1a:3e:d0:7c:9f:c5:f2:ca:b2:0c:04:bb:43:a2:f2:
1b:29:06:e1:54:04:f5:07:a8:4f:ac:89:16:18:05:
98:61:3e:d5:29:0a:6f:bc:eb:5e:6c:c2:5f:15:64:
dc:a5:96:d1:a4:90:b4:d5:cd:53:61:48:a5:61:35:
1f:dd:49:8d:14:ce:ef:8c:a8:a9:bd:cf:f6:f9:8b:
80:0b:be:09:41:b8:d2:80:85:ae:6d:69:64:a9:f6:
32:8f:e4:5f:dc:f7:28:54:a6:e6:47:99:87:1d:a2:
d9:a5:fa:4f:6d:26:dd:98:13:c3:fc:72:1e:59:fa:
79:b1:03:a2:5d:98:0d:03:ce:20:97:f8:2c:f9:c4:
7b:bf:de:89:92:77:fc:3c:11:b0:64:3a:99:d4:22:
7f:10:ab:29:60:1b:f2:52:5c:3c:a5:41:83:20:a3:
3f:ad:78:9c:69:44:35:09:b4:c4:a8:4b:6a:e8:5c:
ae:80:8c:cd:68:ed:f7:c5:f0:cb:d5:5a:ce:e0:67:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:3E:F2:8E:7F:15:AB:BE:17:17:41:71:F7:CA:98:3B:D7:76:43
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/G-4-8o5_Fau-FxdBcffKmDvXdkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.12.0/24
151.248.15.0/24
Signature Algorithm: sha256WithRSAEncryption
30:04:5e:8f:e3:84:fd:b1:7b:b2:bc:b9:0e:f0:8c:1f:c3:3f:
9f:0f:39:6e:f3:ff:a3:1c:5e:09:84:2b:72:23:78:de:5c:02:
af:24:44:d1:c8:2e:82:5f:89:00:c5:82:ef:3d:ac:a5:82:b2:
74:92:af:83:1b:2a:ae:ec:e5:35:b7:8c:31:0e:61:6d:59:60:
11:c9:06:ef:d6:a9:80:0a:a0:a1:fa:45:80:8e:92:8c:aa:79:
6d:19:22:a4:c7:b5:8f:c6:e1:eb:0d:b0:10:ed:a4:d9:46:a8:
e2:e3:c4:a8:da:9c:08:c2:c6:af:9a:51:93:34:bd:5c:fb:5e:
eb:9e:45:0a:13:5f:3c:f0:7b:1a:96:33:1c:80:d9:4b:8c:85:
be:22:35:98:12:ab:9e:4c:d5:dc:78:a1:7d:60:9b:c3:04:36:
07:1b:c9:fe:13:90:2a:8b:4f:90:29:ce:ce:1c:4a:b1:e7:d7:
b3:0c:56:7e:e0:81:e5:88:4a:77:3f:f5:df:12:3d:9c:87:72:
3f:29:8d:90:28:fd:f6:f3:67:bc:86:4e:36:e9:e7:01:95:e5:
45:a1:81:5c:1c:ed:8c:d7:1f:e2:10:ce:06:2e:a9:c6:7b:d1:
cf:5f:66:cc:cd:e3:d2:ff:cd:51:f4:9f:c0:ac:a3:9b:09:cb:
7c:f9:57:e7
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEFp6SMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjVjMGM3MTExZTJmNTdmY2FmODExM2E0MmU1NTZlODgyZGQ1YzRiMB4XDTIyMDEw
MTA5MDYzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWJlZTNlZjI4ZTdm
MTVhYmJlMTcxNzQxNzFmN2NhOTgzYmQ3NzY0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK04KCBynC43wBAaThgreYzJNuVqKoXm4+e/fSC8cDBz7f3i
v4G2oFLh0MKGMEZQ826SdTpJBBRuczvcGj7QfJ/F8sqyDAS7Q6LyGykG4VQE9Qeo
T6yJFhgFmGE+1SkKb7zrXmzCXxVk3KWW0aSQtNXNU2FIpWE1H91JjRTO74yoqb3P
9vmLgAu+CUG40oCFrm1pZKn2Mo/kX9z3KFSm5keZhx2i2aX6T20m3ZgTw/xyHln6
ebEDol2YDQPOIJf4LPnEe7/eiZJ3/DwRsGQ6mdQifxCrKWAb8lJcPKVBgyCjP614
nGlENQm0xKhLauhcroCMzWjt98Xwy9VazuBnpxkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQb7j7yjn8Vq74XF0Fx98qYO9d2QzAfBgNVHSMEGDAWgBRyXAxxEeL1f8r4
ETpC5Vbogt1cSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Nsd01jUkhpOVhfSy1CRTZRdVZXNklMZFhFcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvMGM5YjU0LTEzMGEtNDk5YS1iZjlmLTc2MTBhYWJhYTI3NC8x
L0ctNC04bzVfRmF1LUZ4ZEJjZmZLbUR2WGRrTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
MGM5YjU0LTEzMGEtNDk5YS1iZjlmLTc2MTBhYWJhYTI3NC8xL2Nsd01jUkhpOVhf
Sy1CRTZRdVZXNklMZFhFcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAJf4DAMEAJf4DzANBgkqhkiG9w0B
AQsFAAOCAQEAMARej+OE/bF7sry5DvCMH8M/nw85bvP/oxxeCYQrciN43lwCryRE
0cgugl+JAMWC7z2spYKydJKvgxsqruzlNbeMMQ5hbVlgEckG79apgAqgofpFgI6S
jKp5bRkipMe1j8bh6w2wEO2k2Uao4uPEqNqcCMLGr5pRkzS9XPte655FChNfPPB7
GpYzHIDZS4yFviI1mBKrnkzV3HihfWCbwwQ2BxvJ/hOQKotPkCnOzhxKsefXswxW
fuCB5YhKdz/13xI9nIdyPymNkCj99vNnvIZONunnAZXlRaGBXBztjNcf4hDOBi6p
xnvRz19mzM3j0v/NUfSfwKyjmwnLfPlX5w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:37 2023 by rpki-client on console.sobornost.net