Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/RilBy_3jk3AR9ito0HytLxix3-c.roa
File: RilBy_3jk3AR9ito0HytLxix3-c.roa (raw, json)
Hash identifier: 2b5zNSrU4OFt2gjiPpxgx/h9h78Kk1RQ2DMWhscHQLM=
Subject key identifier: 46:29:41:CB:FD:E3:93:70:11:F6:2B:68:D0:7C:AD:2F:18:B1:DF:E7
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F884689
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/RilBy_3jk3AR9ito0HytLxix3-c.roa
Signing time: Sat 01 Jan 2022 08:05:07 +0000
ROA not before: Sat 01 Jan 2022 08:05:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 212.193.136.0/21 maxlen: 24
194.226.142.0/24 maxlen: 24
194.226.160.0/24 maxlen: 24
212.192.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260589193 (0xf884689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=462941cbfde3937011f62b68d07cad2f18b1dfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:42:a0:ea:85:8f:60:18:a9:21:63:9d:e1:
28:ac:c3:7e:12:46:80:7e:42:49:44:4d:c5:a5:24:
33:be:51:12:47:74:92:10:35:f3:ff:9e:a6:9d:06:
09:c0:a1:de:80:12:da:67:02:f0:10:7d:9c:29:72:
73:e7:d0:86:1a:86:9f:fe:6f:c0:c3:f8:72:1b:39:
ed:37:82:39:11:ea:6a:e7:fa:37:8a:05:27:6f:54:
23:ad:8f:9f:10:e8:61:e7:e4:ab:9d:11:ec:b9:87:
31:73:8b:0b:a6:b4:36:e7:20:66:e3:fe:7e:3a:80:
39:7f:e8:99:14:b3:c2:0a:82:e2:c1:2b:d9:03:32:
a5:a8:e8:f2:be:ed:7f:ab:4f:3d:f5:90:86:ba:37:
8a:53:96:07:77:ae:81:c1:16:dc:ae:84:c0:64:0f:
da:fd:52:d7:78:11:6c:0b:d0:c3:c3:47:40:1c:ff:
66:52:b1:df:ba:49:da:a3:54:f2:c0:24:7f:3c:aa:
8b:8e:96:a8:f0:95:3e:9d:7e:60:50:ae:b2:f5:ed:
a2:f0:5e:92:7a:74:d8:6c:87:33:2f:5e:c7:a2:c3:
97:d5:94:d6:7c:d2:b8:8f:32:4c:54:6c:80:6d:da:
3f:e0:88:af:44:3f:47:d0:97:5d:14:5b:95:04:d5:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:29:41:CB:FD:E3:93:70:11:F6:2B:68:D0:7C:AD:2F:18:B1:DF:E7
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/RilBy_3jk3AR9ito0HytLxix3-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.142.0/24
194.226.160.0/24
212.192.36.0/22
212.193.136.0/21
Signature Algorithm: sha256WithRSAEncryption
71:38:79:93:a9:18:68:32:d5:16:0b:42:7e:17:23:73:66:76:
c7:76:38:ee:2f:04:85:82:c0:15:c0:9c:85:c2:05:ae:5e:44:
75:43:4f:5d:ce:ed:a5:43:d0:32:60:8b:bc:50:30:83:e4:47:
e3:5d:22:cc:83:2c:cb:6c:a6:f3:7d:e8:38:da:45:f8:9f:27:
d4:65:d0:07:11:a2:e1:ab:db:2b:73:7a:ee:05:3b:3c:20:56:
bd:19:d2:9b:55:8d:97:f7:81:fa:27:19:b7:7c:71:6f:da:bb:
03:e7:51:e0:50:b0:26:a5:b2:4a:f2:df:20:49:3f:38:4a:10:
96:f9:98:69:64:b3:1f:6b:d8:fd:53:01:41:d9:23:bb:cf:73:
84:3e:fc:dc:0e:c1:16:01:4b:7a:e9:29:14:75:6b:5e:f5:5e:
2b:d6:d8:c0:ca:e0:47:e8:93:f3:3c:2f:d9:24:8a:27:df:85:
46:af:3b:df:d0:19:16:31:ed:89:e3:ba:e5:07:cd:e8:c3:e7:
c0:a9:2a:2e:fc:e5:e4:79:7a:e9:46:39:c7:e4:f1:59:69:c7:
3c:f0:ee:92:40:2f:26:41:c0:92:90:3d:d6:2c:3f:e4:5b:3b:
91:e9:d8:f9:ad:9c:e6:65:8f:75:0d:21:0e:21:6e:7c:07:43:
42:62:bd:62
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIED4hGiTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NTNhM2I1ZjUxODA4MTY4YzIxMmMwOTRhMmJhYWZmMzhlMTY0NjRhMB4XDTIyMDEw
MTA4MDUwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDYyOTQxY2JmZGUz
OTM3MDExZjYyYjY4ZDA3Y2FkMmYxOGIxZGZlNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJKQqDqhY9gGKkhY53hKKzDfhJGgH5CSURNxaUkM75REkd0
khA18/+epp0GCcCh3oAS2mcC8BB9nClyc+fQhhqGn/5vwMP4chs57TeCORHqauf6
N4oFJ29UI62PnxDoYefkq50R7LmHMXOLC6a0NucgZuP+fjqAOX/omRSzwgqC4sEr
2QMypajo8r7tf6tPPfWQhro3ilOWB3eugcEW3K6EwGQP2v1S13gRbAvQw8NHQBz/
ZlKx37pJ2qNU8sAkfzyqi46WqPCVPp1+YFCusvXtovBeknp02GyHMy9ex6LDl9WU
1nzSuI8yTFRsgG3aP+CIr0Q/R9CXXRRblQTVsYUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRGKUHL/eOTcBH2K2jQfK0vGLHf5zAfBgNVHSMEGDAWgBQlOjtfUYCBaMIS
wJSiuq/zjhZGSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pUbzdYMUdBZ1dqQ0VzQ1VvcnF2ODQ0V1Jrby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvOTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8x
L1JpbEJ5XzNqazNBUjlpdG8wSHl0THhpeDMtYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
OTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8xL0pUbzdYMUdBZ1dq
Q0VzQ1VvcnF2ODQ0V1Jrby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAMLijgMEAMLioAMEAtTAJAMEA9TB
iDANBgkqhkiG9w0BAQsFAAOCAQEAcTh5k6kYaDLVFgtCfhcjc2Z2x3Y47i8EhYLA
FcCchcIFrl5EdUNPXc7tpUPQMmCLvFAwg+RH410izIMsy2ym833oONpF+J8n1GXQ
BxGi4avbK3N67gU7PCBWvRnSm1WNl/eB+icZt3xxb9q7A+dR4FCwJqWySvLfIEk/
OEoQlvmYaWSzH2vY/VMBQdkju89zhD783A7BFgFLeukpFHVrXvVeK9bYwMrgR+iT
8zwv2SSKJ9+FRq8739AZFjHtieO65QfN6MPnwKkqLvzl5Hl66UY5x+TxWWnHPPDu
kkAvJkHAkpA91iw/5Fs7kenY+a2c5mWPdQ0hDiFufAdDQmK9Yg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org