Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/zjcaqandCQQXGet6kgP-Ujq-8N4.roa
File: zjcaqandCQQXGet6kgP-Ujq-8N4.roa (raw, json)
Hash identifier: 16cJCiT9ZYIcwJmBepo0QLv1hiGynXZujYV52zi8fuE=
Subject key identifier: CE:37:1A:A9:A9:DD:09:04:17:19:EB:7A:92:03:FE:52:3A:BE:F0:DE
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 06DEE53D
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/zjcaqandCQQXGet6kgP-Ujq-8N4.roa
Signing time: Mon 16 May 2022 12:13:29 +0000
ROA not before: Mon 16 May 2022 12:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44437
IP address blocks: 185.244.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115270973 (0x6dee53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: May 16 12:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce371aa9a9dd09041719eb7a9203fe523abef0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:dc:fb:b8:a6:0a:01:31:ad:92:6c:ca:b9:
af:f4:11:7c:0e:43:bf:e1:5b:2b:b6:67:40:6e:34:
b1:2e:47:fd:d2:58:3b:57:75:aa:b8:45:f4:77:07:
32:5f:ca:a0:b3:1b:d3:15:1e:f9:5d:70:e5:8c:de:
ff:34:36:dd:d7:bd:6c:37:eb:62:97:55:5c:46:6d:
93:2c:20:6e:ef:73:64:8d:19:2e:02:f7:e7:4e:40:
e8:b3:87:0d:c8:2a:b5:db:98:d7:c4:74:d0:b2:c1:
4d:c1:ff:0c:db:30:1a:f0:69:e7:58:8a:9e:e5:63:
05:ba:b6:a3:5f:af:72:e5:07:52:55:e8:35:8d:2b:
e2:8d:32:ff:3d:9e:6c:f0:ae:b7:17:70:c1:57:0d:
3c:b2:65:fd:b2:3d:ee:38:6a:e5:53:4c:3e:81:20:
87:6d:26:20:7c:3b:c1:45:91:7a:0c:ff:c8:e2:86:
e3:1d:cd:3c:64:02:a4:49:19:f1:45:7a:98:55:b9:
c7:32:b5:d7:2a:c5:09:38:f4:68:e9:97:a2:5d:9c:
06:f9:2b:17:17:37:44:04:8d:bb:07:ae:b4:f0:98:
d9:05:e7:99:b0:0e:37:f1:d0:f2:aa:a9:dc:1b:a0:
59:18:05:f4:e0:f6:df:0e:2b:48:18:61:65:bd:05:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:37:1A:A9:A9:DD:09:04:17:19:EB:7A:92:03:FE:52:3A:BE:F0:DE
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/zjcaqandCQQXGet6kgP-Ujq-8N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.24.0/24
Signature Algorithm: sha256WithRSAEncryption
12:77:6e:85:63:61:a3:dd:88:53:f0:73:b8:73:c1:c7:6b:66:
d4:1e:62:02:b5:ac:9d:5c:77:45:96:22:e0:22:b4:76:f8:74:
1b:67:8c:56:ac:00:e5:df:44:41:56:06:09:a0:f5:a5:7c:8b:
f1:b6:8c:ce:85:e8:e2:ca:3f:bf:6e:8c:aa:8e:12:ed:2e:41:
47:2f:78:76:44:7e:c3:7a:55:2f:6a:da:bf:13:70:30:2c:7a:
20:02:c7:30:d9:4d:c6:d5:48:b9:00:6c:12:a8:6b:13:ae:2e:
1c:1e:d1:56:d3:84:e7:bf:17:26:b0:5f:d5:83:a5:8f:a0:20:
a7:ce:68:dd:7d:b2:9d:28:b3:7c:b6:4c:a8:07:0d:ad:6f:fa:
06:95:a5:e3:48:43:61:14:9a:5c:9a:d0:5c:57:81:95:a7:38:
6b:51:4d:18:f7:4a:3c:7c:04:c2:18:b7:6d:26:f7:ce:bb:99:
40:d1:47:94:62:b3:43:2d:a1:c9:4c:78:df:76:5e:f1:70:1a:
8e:72:f8:1c:58:58:9d:66:63:7d:43:d1:8d:03:29:c0:46:78:
6c:de:1e:0b:11:f2:76:43:94:0b:86:c7:9b:c5:97:e0:94:80:
71:f8:d0:fc:5d:8a:97:ad:e9:63:7e:d0:ca:38:75:f8:f6:77:
67:e7:4a:bc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBt7lPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2M2OWQwNDU4MzUwMGM1ZWY4MTEzNjgzMTIzNzU5M2UwYmI4NmNlMB4XDTIyMDUx
NjEyMTMyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2UzNzFhYTlhOWRk
MDkwNDE3MTllYjdhOTIwM2ZlNTIzYWJlZjBkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4A3Pu4pgoBMa2SbMq5r/QRfA5Dv+FbK7ZnQG40sS5H/dJY
O1d1qrhF9HcHMl/KoLMb0xUe+V1w5Yze/zQ23de9bDfrYpdVXEZtkywgbu9zZI0Z
LgL3505A6LOHDcgqtduY18R00LLBTcH/DNswGvBp51iKnuVjBbq2o1+vcuUHUlXo
NY0r4o0y/z2ebPCutxdwwVcNPLJl/bI97jhq5VNMPoEgh20mIHw7wUWRegz/yOKG
4x3NPGQCpEkZ8UV6mFW5xzK11yrFCTj0aOmXol2cBvkrFxc3RASNuweutPCY2QXn
mbAON/HQ8qqp3BugWRgF9OD23w4rSBhhZb0FrLkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTONxqpqd0JBBcZ63qSA/5SOr7w3jAfBgNVHSMEGDAWgBRzxp0EWDUAxe+B
E2gxI3WT4LuGzjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M4YWRCRmcxQU1YdmdSTm9NU04xay1DN2hzNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8x
L3pqY2FxYW5kQ1FRWEdldDZrZ1AtVWpxLThONC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8xL2M4YWRCRmcxQU1Y
dmdSTm9NU04xay1DN2hzNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn0GDANBgkqhkiG9w0BAQsFAAOC
AQEAEnduhWNho92IU/BzuHPBx2tm1B5iArWsnVx3RZYi4CK0dvh0G2eMVqwA5d9E
QVYGCaD1pXyL8baMzoXo4so/v26Mqo4S7S5BRy94dkR+w3pVL2ravxNwMCx6IALH
MNlNxtVIuQBsEqhrE64uHB7RVtOE578XJrBf1YOlj6Agp85o3X2ynSizfLZMqAcN
rW/6BpWl40hDYRSaXJrQXFeBlac4a1FNGPdKPHwEwhi3bSb3zruZQNFHlGKzQy2h
yUx433Ze8XAajnL4HFhYnWZjfUPRjQMpwEZ4bN4eCxHydkOUC4bHm8WX4JSAcfjQ
/F2Kl63pY37Qyjh1+PZ3Z+dKvA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:48 2023 by rpki-client on console-ams.rpki-client.org