Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/3nJM0_GKdwTmisU6kImcROPMpos.roa
File: 3nJM0_GKdwTmisU6kImcROPMpos.roa (raw, json)
Hash identifier: YJbi8JsPXGcUQxrcNUDUg386492JmHhH7518xRRmw6k=
Subject key identifier: DE:72:4C:D3:F1:8A:77:04:E6:8A:C5:3A:90:89:9C:44:E3:CC:A6:8B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018511A08F38F27AEF1F68FD2AD93A5E75D0
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/3nJM0_GKdwTmisU6kImcROPMpos.roa
Signing time: Wed 14 Dec 2022 17:13:33 +0000
ROA not before: Wed 14 Dec 2022 17:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 81.22.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:a0:8f:38:f2:7a:ef:1f:68:fd:2a:d9:3a:5e:75:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 14 17:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de724cd3f18a7704e68ac53a90899c44e3cca68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:fd:ec:29:89:d9:72:2f:16:58:94:12:ac:
6d:68:98:9e:a4:50:20:ad:91:e7:74:33:67:99:08:
e1:30:2a:d1:41:71:12:b8:fa:a1:ef:5c:e2:3b:24:
8f:7c:37:7a:5a:be:5c:d2:26:49:66:01:f5:fc:86:
77:e5:6e:35:2c:24:bb:b6:0f:fc:06:b3:ff:20:2b:
bf:fc:0b:f3:ec:b9:94:b1:c2:11:6e:23:4a:c3:2a:
1e:d1:cd:53:32:df:97:63:14:07:09:33:4f:b1:94:
90:55:7d:66:26:5f:bb:5b:60:58:dc:e3:eb:89:c6:
98:5d:35:b0:0f:1b:a5:09:cc:16:35:96:62:02:1b:
98:15:af:f3:64:d3:45:09:ab:82:4e:28:7f:df:8e:
41:3a:72:06:2b:41:dc:32:03:23:8e:9c:14:f0:64:
25:43:93:01:09:ab:a5:12:04:5e:2f:43:9e:02:fe:
2e:2d:40:3a:0a:ff:e0:10:c1:75:04:ad:95:03:b5:
32:ea:be:46:11:74:04:1c:4b:12:25:e5:ec:51:51:
81:7f:3d:77:d3:9a:22:32:97:ab:f6:25:26:d7:95:
fc:43:8f:f6:b5:a3:ee:eb:29:f7:f5:5a:d1:41:05:
ff:5a:27:86:c0:23:4c:90:af:a4:14:a3:7d:1d:34:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:4C:D3:F1:8A:77:04:E6:8A:C5:3A:90:89:9C:44:E3:CC:A6:8B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/3nJM0_GKdwTmisU6kImcROPMpos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.140.0/22
Signature Algorithm: sha256WithRSAEncryption
91:75:08:9d:84:d2:ca:59:2c:58:cf:69:cf:b5:f0:f4:e9:6b:
ec:8f:95:bf:18:7f:07:c3:ba:f5:0b:07:c3:7a:6e:0c:a2:27:
be:47:a9:bc:74:84:c6:3a:fe:b8:8c:9f:a0:31:03:cf:0c:99:
b0:ba:f3:20:f4:94:55:47:b4:c8:62:5f:00:fd:a4:fd:1f:83:
c0:49:85:e0:42:64:42:26:f8:a7:36:5b:ed:0f:75:c9:58:fc:
7e:db:2b:9a:99:3b:2c:c7:1f:c0:53:8f:be:f5:d2:74:e2:a0:
d6:7f:bb:ff:b5:0e:36:c6:d8:b5:e4:54:1e:98:7e:d5:7a:9d:
5b:f8:b9:50:c1:e2:cf:49:79:76:51:aa:55:83:60:de:f0:3d:
8f:6c:7a:5a:8e:bd:78:85:99:17:65:4f:9e:ec:01:43:32:97:
bb:0b:0a:37:5f:a2:69:8b:8a:fc:3b:34:55:6c:e9:53:3f:7c:
87:1a:d3:e8:02:92:9f:92:ff:ed:b7:98:a0:2c:c0:69:3d:da:
8b:be:76:ae:3a:35:6e:f4:c5:27:b3:f0:78:4f:1d:d3:88:83:
b2:3b:c7:4f:f2:aa:96:61:e2:7a:f4:34:ad:27:a0:83:f3:72:
cc:fc:5f:56:3d:d9:3d:43:d8:ab:c3:f0:16:9d:0e:76:3d:ee:
61:59:f5:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYURoI848nrvH2j9Ktk6XnXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjIxMjE0MTcxMzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTcyNGNkM2YxOGE3NzA0ZTY4YWM1M2E5MDg5OWM0NGUzY2NhNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlP97CmJ2XIvFliUEqxtaJiepFAg
rZHndDNnmQjhMCrRQXESuPqh71ziOySPfDd6Wr5c0iZJZgH1/IZ35W41LCS7tg/8
BrP/ICu//Avz7LmUscIRbiNKwyoe0c1TMt+XYxQHCTNPsZSQVX1mJl+7W2BY3OPr
icaYXTWwDxulCcwWNZZiAhuYFa/zZNNFCauCTih/345BOnIGK0HcMgMjjpwU8GQl
Q5MBCaulEgReL0OeAv4uLUA6Cv/gEMF1BK2VA7Uy6r5GEXQEHEsSJeXsUVGBfz13
05oiMper9iUm15X8Q4/2taPu6yn39VrRQQX/WieGwCNMkK+kFKN9HTQpKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN5yTNPxincE5orFOpCJnETjzKaLMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvM25KTTBfR0tkd1RtaXNVNmtJbWNST1BNcG9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCURaMMA0G
CSqGSIb3DQEBCwUAA4IBAQCRdQidhNLKWSxYz2nPtfD06Wvsj5W/GH8Hw7r1CwfD
em4Moie+R6m8dITGOv64jJ+gMQPPDJmwuvMg9JRVR7TIYl8A/aT9H4PASYXgQmRC
JvinNlvtD3XJWPx+2yuamTssxx/AU4++9dJ04qDWf7v/tQ42xti15FQemH7Vep1b
+LlQweLPSXl2UapVg2De8D2PbHpajr14hZkXZU+e7AFDMpe7Cwo3X6Jpi4r8OzRV
bOlTP3yHGtPoApKfkv/tt5igLMBpPdqLvnauOjVu9MUns/B4Tx3TiIOyO8dP8qqW
YeJ69DStJ6CD83LM/F9WPdk9Q9irw/AWnQ52Pe5hWfXM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org