Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/jSiGXqu-wQH04fMQiI5l2dVxotE.roa
File: jSiGXqu-wQH04fMQiI5l2dVxotE.roa (raw, json)
Hash identifier: soodbqGQr0xQkqzVLTpUdtKTNpS096DYHfSVRDP6K1U=
Subject key identifier: 8D:28:86:5E:AB:BE:C1:01:F4:E1:F3:10:88:8E:65:D9:D5:71:A2:D1
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 19E9309A
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/jSiGXqu-wQH04fMQiI5l2dVxotE.roa
Signing time: Sat 01 Jan 2022 05:01:56 +0000
ROA not before: Sat 01 Jan 2022 05:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206991
IP address blocks: 85.95.240.0/24 maxlen: 24
85.95.239.0/24 maxlen: 24
85.95.238.0/24 maxlen: 24
85.95.237.0/24 maxlen: 24
85.95.244.0/24 maxlen: 24
85.95.243.0/24 maxlen: 24
85.95.242.0/24 maxlen: 24
85.95.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434712730 (0x19e9309a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Jan 1 05:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d28865eabbec101f4e1f310888e65d9d571a2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:c2:47:27:82:8a:21:5b:09:9f:55:74:f6:
6e:6b:6f:63:0f:23:3c:f8:03:73:1e:76:fc:bc:f0:
59:e0:eb:42:8b:2c:82:81:6d:50:13:55:a6:c0:4f:
6f:e9:e6:4c:a7:f6:ad:7f:46:93:a4:1e:fa:4a:5a:
df:7b:64:94:34:a0:a2:b2:12:d2:b2:13:ef:d7:7c:
55:87:7f:53:ab:ea:6e:6a:89:ce:05:6a:12:fc:61:
0c:c8:0d:db:5d:ef:74:87:96:f8:7d:9a:30:37:f0:
57:f2:c3:b3:c4:6c:34:e3:da:ae:b4:d2:84:c0:ba:
a1:e9:d7:44:79:da:39:ec:15:5e:98:d2:4e:f3:c1:
f3:5c:f5:29:f0:ca:f2:a8:91:f8:53:b3:90:b9:5c:
c9:26:27:1d:61:b7:c5:3f:67:7a:a4:a4:84:a9:1f:
63:41:98:d5:e2:2d:b8:cd:db:50:24:c0:ec:d4:52:
1a:69:20:bc:13:43:ea:6e:b2:03:f4:8f:e7:07:52:
58:5a:77:05:f7:85:0f:31:53:63:90:24:57:4c:87:
bc:85:98:43:8f:df:d8:c4:ae:8b:bf:5a:9f:84:c6:
b2:8d:5b:f3:2a:c5:b9:f9:05:5f:ce:47:94:e8:e5:
64:1c:e1:7d:cd:a2:fc:fd:a3:8e:cd:3d:72:4e:2d:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:28:86:5E:AB:BE:C1:01:F4:E1:F3:10:88:8E:65:D9:D5:71:A2:D1
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/jSiGXqu-wQH04fMQiI5l2dVxotE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.95.237.0-85.95.244.255
Signature Algorithm: sha256WithRSAEncryption
11:50:a1:c8:13:26:63:62:0f:2b:77:1f:bd:6a:fb:fc:67:13:
8f:d2:83:49:40:a0:72:a3:d7:f4:1e:1c:e9:d7:31:76:f2:fe:
4e:77:85:8a:95:82:e0:29:f0:9f:d2:65:59:86:95:94:6f:9f:
3f:ec:cd:f0:21:6d:81:2c:20:d3:8b:90:aa:c9:5b:8d:22:f5:
f3:32:47:59:b7:1f:30:88:fd:86:34:fa:5e:82:c0:c2:d8:d0:
fb:e2:52:3a:bd:9f:3b:78:fd:ec:b0:ec:13:9c:0c:70:12:9a:
3f:fe:83:59:18:e6:6a:27:8f:3d:5f:8a:c2:bd:ef:bc:b3:18:
bd:bd:d0:fa:02:66:53:d2:5e:5d:a4:a3:b9:97:61:6c:76:1f:
75:a9:e9:23:2e:59:90:eb:25:85:09:ce:f7:05:c7:18:0e:80:
57:73:5a:dd:4c:f1:3c:fc:40:06:75:af:22:7a:e2:8e:a1:04:
f6:18:33:0e:be:77:fb:4d:17:95:8c:61:e8:80:2a:2b:4f:1f:
0c:7f:e7:91:01:28:ef:56:0c:83:ec:d0:56:64:cc:83:fd:a8:
28:0c:d2:98:29:b0:27:9b:a9:cb:6b:11:fc:6a:06:a8:ed:73:
bd:c3:a4:ee:44:6b:14:6b:0a:42:e6:89:91:1d:8f:80:16:94:
b2:91:02:b5
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEGekwmjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OWYxYTlkZDEyNmYzNzIzN2NlMjAwZmI4NjE2ZmY5MzdiY2E5NjZjMB4XDTIyMDEw
MTA1MDE1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGQyODg2NWVhYmJl
YzEwMWY0ZTFmMzEwODg4ZTY1ZDlkNTcxYTJkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKgWwkcngoohWwmfVXT2bmtvYw8jPPgDcx52/LzwWeDrQoss
goFtUBNVpsBPb+nmTKf2rX9Gk6Qe+kpa33tklDSgorIS0rIT79d8VYd/U6vqbmqJ
zgVqEvxhDMgN213vdIeW+H2aMDfwV/LDs8RsNOParrTShMC6oenXRHnaOewVXpjS
TvPB81z1KfDK8qiR+FOzkLlcySYnHWG3xT9neqSkhKkfY0GY1eItuM3bUCTA7NRS
GmkgvBND6m6yA/SP5wdSWFp3BfeFDzFTY5AkV0yHvIWYQ4/f2MSui79an4TGso1b
8yrFufkFX85HlOjlZBzhfc2i/P2jjs09ck4tbj0CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBSNKIZeq77BAfTh8xCIjmXZ1XGi0TAfBgNVHSMEGDAWgBQZ8andEm83I3zi
APuGFv+Te8qWbDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dmR3AzUkp2TnlOODRnRDdoaGJfazN2S2xtdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvZjhhNjNkLTE3MzAtNGQ4OC1hYjM4LTNmZDMwOTg4ZjY3Ny8x
L2pTaUdYcXUtd1FIMDRmTVFpSTVsMmRWeG90RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
ZjhhNjNkLTE3MzAtNGQ4OC1hYjM4LTNmZDMwOTg4ZjY3Ny8xL0dmR3AzUkp2TnlO
ODRnRDdoaGJfazN2S2xtdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAVV/tAwQAVV/0MA0GCSqGSIb3
DQEBCwUAA4IBAQARUKHIEyZjYg8rdx+9avv8ZxOP0oNJQKByo9f0Hhzp1zF28v5O
d4WKlYLgKfCf0mVZhpWUb58/7M3wIW2BLCDTi5CqyVuNIvXzMkdZtx8wiP2GNPpe
gsDC2ND74lI6vZ87eP3ssOwTnAxwEpo//oNZGOZqJ489X4rCve+8sxi9vdD6AmZT
0l5dpKO5l2Fsdh91qekjLlmQ6yWFCc73BccYDoBXc1rdTPE8/EAGda8ieuKOoQT2
GDMOvnf7TReVjGHogCorTx8Mf+eRASjvVgyD7NBWZMyD/agoDNKYKbAnm6nLaxH8
agao7XO9w6TuRGsUawpC5omRHY+AFpSykQK1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:20 2024 by rpki-client on console-fra.rpki-client.org