Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/J-6IW-WA_oiVGvTh5nByosnXMv0.roa
File: J-6IW-WA_oiVGvTh5nByosnXMv0.roa (raw, json)
Hash identifier: 3/2GtuHHWo42oc5vbHtU4L1gE2poOPMwB9h4RdE8rSg=
Subject key identifier: 27:EE:88:5B:E5:80:FE:88:95:1A:F4:E1:E6:70:72:A2:C9:D7:32:FD
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 0F2F74B8
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/J-6IW-WA_oiVGvTh5nByosnXMv0.roa
Signing time: Sat 01 Jan 2022 15:56:04 +0000
ROA not before: Sat 01 Jan 2022 15:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21183
IP address blocks: 193.254.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254768312 (0xf2f74b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Jan 1 15:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27ee885be580fe88951af4e1e67072a2c9d732fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:78:93:89:8e:84:d2:d3:61:61:4e:91:cc:
ba:25:1c:f4:c7:62:36:21:02:2a:65:61:9c:e0:61:
1d:05:69:43:3c:b1:b0:3a:9b:d6:ca:85:64:72:d5:
f0:64:06:9f:26:b0:45:04:28:a6:58:57:fc:c4:7b:
e2:0f:fd:fa:13:42:bd:40:de:c8:fb:13:b0:96:cc:
ba:2f:bd:0b:ea:9f:aa:c5:0a:94:39:93:10:45:48:
b5:57:5d:5f:04:76:5a:ab:40:f7:cb:25:fe:83:d6:
80:99:5f:6a:c2:29:4c:7a:9e:d1:1d:d8:2e:29:4f:
b0:1c:ce:19:34:23:6a:68:69:a4:06:13:4a:b4:d4:
87:1a:51:a7:f0:b4:51:6a:79:de:08:f5:2e:c4:7b:
7a:e4:05:19:71:5c:da:a5:5a:89:1c:c2:ef:f1:4c:
50:c1:d9:6c:e4:1b:1a:43:2d:dd:bf:0f:5c:75:f4:
18:16:cf:c8:2c:85:98:04:36:01:bb:63:80:ea:e0:
f1:0a:58:da:9b:76:5e:dc:df:85:76:ae:49:95:bb:
8b:48:3a:db:46:75:f1:3b:a5:75:fe:b4:a2:d6:9b:
3f:f2:08:3a:4c:a2:f7:f5:7c:87:a8:65:3a:67:e2:
97:e5:b3:24:48:a5:ea:17:62:21:de:8b:8f:a4:11:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:88:5B:E5:80:FE:88:95:1A:F4:E1:E6:70:72:A2:C9:D7:32:FD
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/J-6IW-WA_oiVGvTh5nByosnXMv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.1.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c4:06:88:b9:82:df:4c:8b:ad:e1:02:b8:db:8a:a3:53:52:
fe:bb:4f:b6:66:c9:c1:fa:24:ed:fe:68:ba:0e:3b:3a:0f:72:
17:cd:23:07:ba:9a:a8:ec:be:e6:62:01:29:6e:23:76:31:8a:
1d:d1:bd:9c:1b:be:78:2e:c0:19:53:d6:bc:c5:cc:1d:58:44:
d1:17:0b:25:87:41:a8:c4:30:db:71:04:8f:40:f0:de:5c:3f:
6a:15:ae:62:1f:e6:48:ce:2e:96:72:1f:3e:f0:be:d0:66:b8:
3d:50:56:64:f0:3e:0c:ca:b0:23:1b:4c:03:0f:78:6f:59:f8:
8e:03:9f:9a:ea:20:c0:0b:0e:a7:9a:fe:60:30:b8:5c:3b:1b:
f4:09:62:a6:38:59:ff:56:d7:13:09:61:0d:5d:bf:a8:f6:06:
70:24:03:bc:5f:44:fe:8d:57:b6:fb:4c:14:75:bd:e9:43:0e:
a7:6f:1f:c1:9d:45:1c:ea:75:7a:c0:21:5d:48:aa:44:09:3f:
98:6e:19:2b:a1:2b:b4:ab:6e:42:6b:c9:97:7a:4f:ae:9e:3f:
e3:0f:b9:f2:38:d3:f6:5d:ad:fc:d6:77:c0:16:32:d0:73:bc:
2c:1d:4d:bd:be:cb:93:23:2f:e3:1c:b7:c1:79:71:14:ea:04:
71:03:98:5a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDy90uDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGM3ZTU2ZjQ2ODdlYTFiMmQ3NzYzZDA4ODhkMTA1MDIzNWI1NzRiMB4XDTIyMDEw
MTE1NTYwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjdlZTg4NWJlNTgw
ZmU4ODk1MWFmNGUxZTY3MDcyYTJjOWQ3MzJmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMWIeJOJjoTS02FhTpHMuiUc9MdiNiECKmVhnOBhHQVpQzyx
sDqb1sqFZHLV8GQGnyawRQQoplhX/MR74g/9+hNCvUDeyPsTsJbMui+9C+qfqsUK
lDmTEEVItVddXwR2WqtA98sl/oPWgJlfasIpTHqe0R3YLilPsBzOGTQjamhppAYT
SrTUhxpRp/C0UWp53gj1LsR7euQFGXFc2qVaiRzC7/FMUMHZbOQbGkMt3b8PXHX0
GBbPyCyFmAQ2AbtjgOrg8QpY2pt2XtzfhXauSZW7i0g620Z18Tuldf60otabP/II
Okyi9/V8h6hlOmfil+WzJEil6hdiId6Lj6QRDwcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQn7ohb5YD+iJUa9OHmcHKiydcy/TAfBgNVHSMEGDAWgBS0x+VvRofqGy13
Y9CIjRBQI1tXSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RNZmxiMGFINmhzdGQyUFFpSTBRVUNOYlYwcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvODUxOTAyLTUwNTAtNDZiMi1iNDUyLTA1OTlmMGIyYjA5YS8x
L0otNklXLVdBX29pVkd2VGg1bkJ5b3NuWE12MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQv
ODUxOTAyLTUwNTAtNDZiMi1iNDUyLTA1OTlmMGIyYjA5YS8xL3RNZmxiMGFINmhz
dGQyUFFpSTBRVUNOYlYwcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMH+ATANBgkqhkiG9w0BAQsFAAOC
AQEAr8QGiLmC30yLreECuNuKo1NS/rtPtmbJwfok7f5oug47Og9yF80jB7qaqOy+
5mIBKW4jdjGKHdG9nBu+eC7AGVPWvMXMHVhE0RcLJYdBqMQw23EEj0Dw3lw/ahWu
Yh/mSM4ulnIfPvC+0Ga4PVBWZPA+DMqwIxtMAw94b1n4jgOfmuogwAsOp5r+YDC4
XDsb9AlipjhZ/1bXEwlhDV2/qPYGcCQDvF9E/o1XtvtMFHW96UMOp28fwZ1FHOp1
esAhXUiqRAk/mG4ZK6ErtKtuQmvJl3pPrp4/4w+58jjT9l2t/NZ3wBYy0HO8LB1N
vb7LkyMv4xy3wXlxFOoEcQOYWg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:24 2024 by rpki-client on console-fra.rpki-client.org