Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-jZ3uujGAgFc_-4fG7h9McgCQ6c.roa
File: 1-jZ3uujGAgFc_-4fG7h9McgCQ6c.roa (raw, json)
Hash identifier: lHqJMDJFshtqCtNXiXvBstvC+pmBb2u4BjHq/7x51sY=
Subject key identifier: FA:36:77:BA:E8:C6:02:01:5C:FF:EE:1F:1B:B8:7D:31:C8:02:43:A7
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0183FF5A4D60D4AE6C96C5808E6929CB6FCF
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-jZ3uujGAgFc_-4fG7h9McgCQ6c.roa
Signing time: Sat 22 Oct 2022 11:00:51 +0000
ROA not before: Sat 22 Oct 2022 11:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 81.22.136.0/22 maxlen: 24
89.185.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:5a:4d:60:d4:ae:6c:96:c5:80:8e:69:29:cb:6f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 22 11:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa3677bae8c602015cffee1f1bb87d31c80243a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:98:d5:96:f1:9d:3b:93:35:f5:ae:e1:df:
5c:45:6f:8d:3f:25:f3:99:b6:a9:0d:fc:00:26:6c:
4d:8f:04:07:8d:b8:38:fb:8c:1b:ea:0a:f8:a1:fc:
89:ee:2a:bb:29:d7:dc:5b:57:be:c7:36:7d:4a:0a:
f5:bf:ad:57:70:0a:39:06:9a:74:ba:c2:5d:14:78:
b4:cf:1e:97:39:fb:0f:da:10:ab:24:18:13:36:37:
ab:e3:97:af:c2:e1:1b:2a:0f:28:d4:28:46:75:b8:
48:85:5a:e7:60:f4:8b:8d:96:78:d4:39:c9:3b:ae:
81:f2:eb:f2:d1:c2:b9:86:61:83:b8:52:c5:dd:be:
ef:ca:1e:b0:82:8a:65:48:1c:44:5b:7f:b7:65:6f:
80:21:58:2d:e4:4a:c7:63:ff:79:b6:56:0c:ee:c2:
fc:24:9f:3d:e6:84:29:a5:41:59:97:e0:8e:ba:7d:
8f:e9:26:a5:ee:a7:59:27:7d:1e:1d:f1:45:83:c6:
71:18:53:6a:0a:03:5c:3c:55:b8:f9:12:76:22:ea:
a0:da:f7:93:48:29:5a:00:a3:06:b5:47:30:dd:43:
d8:4b:a3:ea:c7:38:76:af:41:fb:03:96:d1:fd:a2:
f8:d6:97:04:07:58:a2:26:d7:53:b1:03:13:c8:e7:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:77:BA:E8:C6:02:01:5C:FF:EE:1F:1B:B8:7D:31:C8:02:43:A7
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-jZ3uujGAgFc_-4fG7h9McgCQ6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/22
89.185.24.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:78:b4:44:fe:83:03:ff:1e:a8:41:6f:82:f2:62:6f:5f:38:
14:9b:bf:d9:6d:5e:30:97:6d:d6:e2:01:58:ac:11:45:70:7f:
ab:ef:06:2f:3c:b6:e0:78:60:97:85:20:cd:a5:19:12:17:7c:
0f:b8:af:6c:2e:39:06:63:29:83:a7:19:3b:c0:06:2f:e2:ee:
da:a2:cd:ad:ae:71:16:0e:e3:ef:a9:55:c1:6d:36:b2:12:30:
8a:75:e2:e9:16:3a:0b:b3:47:72:14:98:1e:38:76:ee:08:91:
af:25:e9:c9:67:44:65:cd:99:aa:39:50:ed:2b:f7:fd:c4:da:
a5:13:77:22:bb:06:23:1b:d7:a4:cd:b3:a2:2d:78:c3:2f:a5:
2a:7e:04:88:3c:0f:d8:e2:0d:a5:45:96:aa:f1:f9:9f:44:c4:
73:72:f7:38:b5:6c:57:8c:79:f1:83:64:64:d4:14:b2:ad:28:
a8:b3:93:8a:f8:c0:aa:6a:cf:4e:11:64:e1:cc:60:86:b4:7c:
2f:b4:c1:51:6b:92:a5:ad:63:12:9a:4f:d3:24:bf:75:ac:3b:
ec:05:43:36:1c:16:8d:e2:9b:2a:3d:5e:29:84:57:7d:52:de:
8d:a0:25:a9:64:36:1e:7c:43:cd:f3:6f:d6:5f:9e:7a:c7:d8:
de:56:04:88
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYP/Wk1g1K5slsWAjmkpy2/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjIxMDIyMTEwMDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTM2NzdiYWU4YzYwMjAxNWNmZmVlMWYxYmI4N2QzMWM4MDI0M2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPGY1ZbxnTuTNfWu4d9cRW+NPyXz
mbapDfwAJmxNjwQHjbg4+4wb6gr4ofyJ7iq7KdfcW1e+xzZ9Sgr1v61XcAo5Bpp0
usJdFHi0zx6XOfsP2hCrJBgTNjer45evwuEbKg8o1ChGdbhIhVrnYPSLjZZ41DnJ
O66B8uvy0cK5hmGDuFLF3b7vyh6wgoplSBxEW3+3ZW+AIVgt5ErHY/95tlYM7sL8
JJ895oQppUFZl+COun2P6Sal7qdZJ30eHfFFg8ZxGFNqCgNcPFW4+RJ2Iuqg2veT
SClaAKMGtUcw3UPYS6Pqxzh2r0H7A5bR/aL41pcEB1iiJtdTsQMTyOfu9QIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPo2d7roxgIBXP/uHxu4fTHIAkOnMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvMS1qWjN1dWpHQWdGY18tNGZHN2g5TWNnQ1E2Yy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvY2QvNjE2OGQ3LTk0NmMtNDU3NC05MWVhLTgyYWQxNDU1NWVh
YS8xL21DejRDY0RqNk9WVkw1ME4wdUotRGRMWTJyNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlEWiAME
A1m5GDANBgkqhkiG9w0BAQsFAAOCAQEAHni0RP6DA/8eqEFvgvJib184FJu/2W1e
MJdt1uIBWKwRRXB/q+8GLzy24Hhgl4UgzaUZEhd8D7ivbC45BmMpg6cZO8AGL+Lu
2qLNra5xFg7j76lVwW02shIwinXi6RY6C7NHchSYHjh27giRryXpyWdEZc2ZqjlQ
7Sv3/cTapRN3IrsGIxvXpM2zoi14wy+lKn4EiDwP2OINpUWWqvH5n0TEc3L3OLVs
V4x58YNkZNQUsq0oqLOTivjAqmrPThFk4cxghrR8L7TBUWuSpa1jEppP0yS/daw7
7AVDNhwWjeKbKj1eKYRXfVLejaAlqWQ2HnxDzfNv1l+eesfY3lYEiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org