Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/k2WKwqpXjS8hAekj6n9_p2lJtaY.roa
File: k2WKwqpXjS8hAekj6n9_p2lJtaY.roa (raw, json)
Hash identifier: mNBeqsBLCGQNsX1LyeucXZnxTdlUDTCwI7+Zdd+qZ9U=
Subject key identifier: 93:65:8A:C2:AA:57:8D:2F:21:01:E9:23:EA:7F:7F:A7:69:49:B5:A6
Certificate issuer: /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial: 1061A5EE
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/k2WKwqpXjS8hAekj6n9_p2lJtaY.roa
Signing time: Sat 01 Jan 2022 14:58:38 +0000
ROA not before: Sat 01 Jan 2022 14:58:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 194.76.232.0/22 maxlen: 22
194.76.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274834926 (0x1061a5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Validity
Not Before: Jan 1 14:58:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93658ac2aa578d2f2101e923ea7f7fa76949b5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:4f:e6:eb:d8:28:02:35:b8:d1:fa:96:d1:
89:24:96:0a:8f:68:f9:79:b5:40:5d:43:dd:2b:1d:
a7:b5:47:38:74:2f:0e:b2:14:d3:db:bb:32:ba:82:
ba:7f:de:d6:9a:f7:d8:5c:73:7a:28:f0:f0:bd:68:
f1:dd:8b:f8:35:5c:f5:8d:0c:a3:92:4c:91:75:9c:
48:6e:2f:84:c2:10:f7:f1:ff:d6:67:1c:79:40:75:
9a:5e:e5:0c:6a:66:66:b5:b4:c7:8e:6c:42:c7:2c:
ec:a9:10:7f:78:0c:51:0f:d4:c8:e7:f8:97:5c:39:
74:98:4a:bf:69:42:72:a1:05:21:b2:8b:8f:6d:bd:
6a:18:d1:aa:5f:fd:f6:70:c1:fc:dc:85:7a:29:4b:
58:17:76:17:7a:c7:33:8b:82:00:34:78:64:03:4d:
5d:54:d0:e8:90:83:0f:de:27:af:dd:13:7d:89:7e:
c8:c3:24:0d:07:07:e8:19:ed:6a:3c:93:8c:bf:14:
f1:ff:4a:f6:65:45:b9:de:ae:91:de:70:bc:96:37:
37:a1:26:ff:44:c8:b5:7b:fe:f3:63:4f:2b:25:65:
4e:6a:f9:59:05:63:96:bc:3e:2c:79:28:72:77:41:
19:f2:0e:d0:91:d7:44:7d:3d:97:8c:04:3d:50:19:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:8A:C2:AA:57:8D:2F:21:01:E9:23:EA:7F:7F:A7:69:49:B5:A6
X509v3 Authority Key Identifier:
keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/k2WKwqpXjS8hAekj6n9_p2lJtaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:2b:20:fa:1d:f4:a9:4d:f5:e0:f6:e9:0b:83:c4:bf:08:9d:
b0:ce:5b:cb:f4:34:7a:86:fa:dc:57:0c:d4:dd:4b:a0:eb:9d:
7a:e5:d0:05:1c:f8:21:4c:bf:9e:40:6d:69:7e:ed:f5:e0:24:
57:96:26:2d:b6:88:67:cb:38:1c:f5:5e:85:b5:26:db:f9:f4:
fe:1a:0d:9a:5b:14:27:e5:41:5d:46:7c:d5:f5:33:91:da:d4:
e2:e8:40:b4:2b:8b:e4:55:6d:b5:f1:4b:a2:d0:0c:4a:d0:25:
73:2f:c1:18:4a:85:ab:9e:3d:ee:27:70:88:34:c4:30:21:17:
7c:a4:54:02:75:2f:90:18:c5:2c:35:95:30:e3:3b:b9:d6:22:
df:70:36:77:1d:a6:25:89:f8:5d:97:e7:0f:1a:44:d1:90:7e:
52:0c:d7:a2:2d:5f:db:c9:3b:1c:b7:64:22:1e:5c:c7:7d:4a:
38:11:18:eb:f9:21:53:e1:af:bd:d6:8a:56:df:8c:7f:e7:b7:
92:6b:30:09:d9:95:a7:26:2a:40:2b:a2:5b:13:d9:61:07:24:
a6:88:26:76:7e:c6:41:6f:93:e9:44:bc:43:17:01:21:71:12:
79:54:b0:c5:f3:59:9d:06:c8:bb:54:0a:5f:86:8f:f0:19:54:
86:6e:42:3f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEGGl7jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NzQwMDQwZTFiN2E1MzJkZDJhZWMyMmU5M2E2MjJiMmUxYjNiZGVmMB4XDTIyMDEw
MTE0NTgzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTM2NThhYzJhYTU3
OGQyZjIxMDFlOTIzZWE3ZjdmYTc2OTQ5YjVhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjHT+br2CgCNbjR+pbRiSSWCo9o+Xm1QF1D3Ssdp7VHOHQv
DrIU09u7MrqCun/e1pr32Fxzeijw8L1o8d2L+DVc9Y0Mo5JMkXWcSG4vhMIQ9/H/
1mcceUB1ml7lDGpmZrW0x45sQscs7KkQf3gMUQ/UyOf4l1w5dJhKv2lCcqEFIbKL
j229ahjRql/99nDB/NyFeilLWBd2F3rHM4uCADR4ZANNXVTQ6JCDD94nr90TfYl+
yMMkDQcH6BntajyTjL8U8f9K9mVFud6ukd5wvJY3N6Em/0TItXv+82NPKyVlTmr5
WQVjlrw+LHkocndBGfIO0JHXRH09l4wEPVAZmqMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSTZYrCqleNLyEB6SPqf3+naUm1pjAfBgNVHSMEGDAWgBRXQAQOG3pTLdKu
wi6TpiKy4bO97zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1YwQUVEaHQ2VXkzU3JzSXVrNllpc3VHenZlOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvMWMwMjA1LTVjNjUtNDdjZC1iMWIzLTI3YzI2YjIzYjg0NS8x
L2syV0t3cXBYalM4aEFla2o2bjlfcDJsSnRhWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
MWMwMjA1LTVjNjUtNDdjZC1iMWIzLTI3YzI2YjIzYjg0NS8xL1YwQUVEaHQ2VXkz
U3JzSXVrNllpc3VHenZlOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsJM6DANBgkqhkiG9w0BAQsFAAOC
AQEAjysg+h30qU314PbpC4PEvwidsM5by/Q0eob63FcM1N1LoOudeuXQBRz4IUy/
nkBtaX7t9eAkV5YmLbaIZ8s4HPVehbUm2/n0/hoNmlsUJ+VBXUZ81fUzkdrU4uhA
tCuL5FVttfFLotAMStAlcy/BGEqFq5497idwiDTEMCEXfKRUAnUvkBjFLDWVMOM7
udYi33A2dx2mJYn4XZfnDxpE0ZB+UgzXoi1f28k7HLdkIh5cx31KOBEY6/khU+Gv
vdaKVt+Mf+e3kmswCdmVpyYqQCuiWxPZYQckpogmdn7GQW+T6US8QxcBIXESeVSw
xfNZnQbIu1QKX4aP8BlUhm5CPw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:14 2024 by rpki-client on console-ams.rpki-client.org