Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/JAZyeZKvSA8iirir3EUFwnYlnfw.roa
File: JAZyeZKvSA8iirir3EUFwnYlnfw.roa (raw, json)
Hash identifier: 06v/nV2JdDqfWUN4HJRjhj7EJZ+24ZbFPhd1bkzRU78=
Subject key identifier: 24:06:72:79:92:AF:48:0F:22:8A:B8:AB:DC:45:05:C2:76:25:9D:FC
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: EDB1FA
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/JAZyeZKvSA8iirir3EUFwnYlnfw.roa
Signing time: Fri 04 Feb 2022 16:56:40 +0000
ROA not before: Fri 04 Feb 2022 16:56:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60398
IP address blocks: 45.142.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15577594 (0xedb1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Feb 4 16:56:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2406727992af480f228ab8abdc4505c276259dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:f3:40:ad:5d:dd:10:e0:4d:2f:e9:f3:68:
45:e5:89:cc:cf:19:bf:4f:bd:6f:3b:95:bf:d2:13:
20:00:2d:56:cb:33:16:b7:04:56:e1:88:09:88:49:
f3:1e:e3:4d:1c:10:da:ac:4e:89:65:37:1b:c7:f7:
83:b0:cd:a9:0e:a5:f1:39:71:8c:a6:c5:dd:9c:d0:
62:9f:c7:15:29:73:15:ba:b8:f9:28:4b:f8:60:03:
f6:91:aa:87:93:4f:ee:a5:a1:b2:86:2e:ca:b0:6b:
5d:a7:b5:e9:47:f8:0c:92:69:e5:32:78:ed:e6:57:
83:95:c5:91:da:ed:d6:94:4e:9d:ca:cc:88:18:ba:
6c:26:38:3a:e5:e7:75:2c:cc:94:6d:ae:b6:bd:ff:
67:73:90:9a:3e:3f:e8:a6:35:10:da:21:f3:eb:42:
72:d2:1b:c0:fd:e5:ef:39:e3:1f:c4:e0:7a:6e:e4:
52:09:db:3e:e2:a6:40:c2:ac:ab:4e:ca:88:64:40:
39:dd:50:7b:18:44:98:ba:63:5a:43:4d:80:c5:c2:
81:00:93:20:57:b9:f0:3f:d2:6e:4e:67:bc:c6:0e:
a3:3f:8e:62:58:0d:3f:72:75:94:aa:67:5e:86:5d:
53:b2:98:80:81:4d:72:95:63:63:33:91:e0:57:ef:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:06:72:79:92:AF:48:0F:22:8A:B8:AB:DC:45:05:C2:76:25:9D:FC
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/JAZyeZKvSA8iirir3EUFwnYlnfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.138.0/24
Signature Algorithm: sha256WithRSAEncryption
55:06:51:8a:b6:09:1c:c8:a8:3f:a6:30:3a:95:94:57:dc:23:
10:60:96:e3:7f:c8:6d:73:cd:f8:e2:6f:ca:6e:cf:94:8c:51:
ab:9d:52:3a:5c:d1:df:45:01:23:e8:b3:54:79:eb:44:8c:d5:
15:36:58:6f:91:51:18:af:89:4a:10:e9:e0:1e:37:b0:3e:50:
ff:44:1c:ed:d7:07:24:a8:b4:7b:e1:6a:f6:fc:9d:87:3f:c9:
06:18:09:38:c6:88:aa:81:f5:81:78:f0:7a:05:0a:f7:e7:bc:
81:5f:7a:d7:8f:ce:ef:08:04:cd:38:de:af:b2:30:73:8d:00:
40:59:b1:43:d8:eb:8d:51:8c:d5:1c:54:fa:57:5d:39:3e:bb:
4f:51:f4:1b:ca:a6:f6:02:cc:c7:9a:c5:be:a3:ea:12:8e:ef:
f7:de:2f:fd:86:49:89:9f:17:c9:e8:5c:3b:10:25:82:63:93:
f1:7a:71:ea:7f:fe:e1:27:29:8d:d3:21:7b:2f:21:ab:5c:b6:
e3:40:cb:45:f1:d7:12:48:75:12:68:52:64:ed:6c:d0:8d:d1:
c1:78:75:58:5f:97:73:56:00:ab:70:88:36:65:e1:56:02:db:
0c:66:f1:19:fe:11:ae:8a:bd:3d:ac:c1:20:1b:d8:d9:1f:23:
1b:e6:fd:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAO2x+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MTg5MDE2NjJhOGVjNWZmNGQzZjQ4ZDI5MDk5MjMwYTA1NzVlYzhhMB4XDTIyMDIw
NDE2NTY0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjQwNjcyNzk5MmFm
NDgwZjIyOGFiOGFiZGM0NTA1YzI3NjI1OWRmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJFb80CtXd0Q4E0v6fNoReWJzM8Zv0+9bzuVv9ITIAAtVssz
FrcEVuGICYhJ8x7jTRwQ2qxOiWU3G8f3g7DNqQ6l8TlxjKbF3ZzQYp/HFSlzFbq4
+ShL+GAD9pGqh5NP7qWhsoYuyrBrXae16Uf4DJJp5TJ47eZXg5XFkdrt1pROncrM
iBi6bCY4OuXndSzMlG2utr3/Z3OQmj4/6KY1ENoh8+tCctIbwP3l7znjH8Tgem7k
UgnbPuKmQMKsq07KiGRAOd1QexhEmLpjWkNNgMXCgQCTIFe58D/Sbk5nvMYOoz+O
YlgNP3J1lKpnXoZdU7KYgIFNcpVjYzOR4FfvixMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQkBnJ5kq9IDyKKuKvcRQXCdiWd/DAfBgNVHSMEGDAWgBSRiQFmKo7F/00/
SNKQmSMKBXXsijAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tZa0JaaXFPeGY5TlAwalNrSmtqQ2dWMTdJby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvNWI5MmE3LTI4MzctNDY5ZS04MjE0LWU4MTFlMjNjMTgwNC8x
L0pBWnllWkt2U0E4aWlyaXIzRVVGd25ZbG5mdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
NWI5MmE3LTI4MzctNDY5ZS04MjE0LWU4MTFlMjNjMTgwNC8xL2tZa0JaaXFPeGY5
TlAwalNrSmtqQ2dWMTdJby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2OijANBgkqhkiG9w0BAQsFAAOC
AQEAVQZRirYJHMioP6YwOpWUV9wjEGCW43/IbXPN+OJvym7PlIxRq51SOlzR30UB
I+izVHnrRIzVFTZYb5FRGK+JShDp4B43sD5Q/0Qc7dcHJKi0e+Fq9vydhz/JBhgJ
OMaIqoH1gXjwegUK9+e8gV9614/O7wgEzTjer7Iwc40AQFmxQ9jrjVGM1RxU+ldd
OT67T1H0G8qm9gLMx5rFvqPqEo7v994v/YZJiZ8XyehcOxAlgmOT8Xpx6n/+4Scp
jdMhey8hq1y240DLRfHXEkh1EmhSZO1s0I3RwXh1WF+Xc1YAq3CINmXhVgLbDGbx
Gf4Rroq9PazBIBvY2R8jG+b9qQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:41 2024 by rpki-client on console-ams.rpki-client.org