Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/KJZCqd_VQMX70vxUBoTljQIVPPY.roa
File: KJZCqd_VQMX70vxUBoTljQIVPPY.roa (raw, json)
Hash identifier: wBlzjqIQokuJd/xu6MbYdk1H9nzpMY0przUFYSua2oI=
Subject key identifier: 28:96:42:A9:DF:D5:40:C5:FB:D2:FC:54:06:84:E5:8D:02:15:3C:F6
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 03BA4977
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/KJZCqd_VQMX70vxUBoTljQIVPPY.roa
Signing time: Sat 01 Jan 2022 06:57:34 +0000
ROA not before: Sat 01 Jan 2022 06:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212370
IP address blocks: 37.49.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62540151 (0x3ba4977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jan 1 06:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=289642a9dfd540c5fbd2fc540684e58d02153cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:81:1f:ee:2b:34:78:ab:89:be:6e:26:02:
61:f1:90:71:c5:1d:11:0a:34:3f:10:3b:e2:e5:60:
91:30:a0:57:5e:c9:89:bb:35:f1:03:a9:96:37:14:
e4:6b:c4:50:a4:89:e0:a6:41:d3:0f:f8:93:f9:59:
42:5b:e8:15:1e:5e:21:a2:8e:1a:4c:a9:62:5b:dc:
12:8d:c3:90:52:54:c5:08:35:12:2b:91:3d:fe:13:
fe:75:55:b9:e7:29:1d:f4:29:88:46:09:95:62:d3:
10:90:8a:52:f4:5b:ff:78:7f:e3:9e:98:8d:b2:b8:
3b:7b:6d:1e:fd:97:74:35:f4:ac:d3:9b:47:49:27:
75:28:24:e7:e7:1f:53:31:ea:8b:99:5d:68:8b:e2:
7c:74:32:b5:e5:7a:32:99:ea:e2:78:0b:d1:83:cd:
1c:9d:82:1b:72:4b:ac:d9:49:1a:b8:87:3f:34:bb:
48:1d:c5:e6:70:9c:a5:f1:04:0a:0f:ed:35:88:93:
b2:3d:f7:10:39:80:50:3a:2d:67:31:cd:57:e5:22:
ac:0a:82:a9:a7:b5:04:e6:d8:e5:f4:3e:4f:69:4a:
cf:4e:07:98:59:fd:cd:ad:b8:19:cc:98:b0:fe:a9:
f5:88:2d:6e:3b:6a:66:8f:d1:53:a1:e3:44:f5:74:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:42:A9:DF:D5:40:C5:FB:D2:FC:54:06:84:E5:8D:02:15:3C:F6
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/KJZCqd_VQMX70vxUBoTljQIVPPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.225.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d9:6c:f4:eb:39:30:05:34:66:b1:1d:d1:57:43:13:6c:12:
7f:b0:5b:fa:88:d7:ac:1e:43:35:26:3c:65:8b:d5:67:32:19:
e6:1a:2f:c5:05:e2:85:ba:ef:31:7b:2d:ba:e8:24:28:0b:e9:
eb:2b:3c:f5:d2:03:8e:e7:f0:e5:b7:7d:ea:1e:71:2b:12:48:
e5:bd:88:3d:3b:0a:65:d7:8f:41:7f:59:1f:a4:4c:7b:8f:ad:
3c:99:b4:41:a4:00:01:f5:a1:9c:9c:fb:a7:4a:0b:e4:e9:29:
f4:7a:d0:3a:9d:03:19:52:fc:c2:8e:03:2f:b6:1f:b4:f8:e9:
da:c7:f3:56:a8:f3:06:9d:53:bd:da:5a:cf:e3:bc:54:27:f6:
b7:bc:c0:4a:c3:65:82:13:af:36:c8:07:f6:51:25:c4:0b:76:
e8:0d:2e:90:71:cb:b9:03:55:10:a9:66:40:b8:8e:3f:b4:9a:
25:a9:86:21:fa:2b:6f:54:e6:2d:76:df:83:40:04:7b:57:9f:
30:b1:d0:2f:c3:9c:90:f7:86:c9:2d:ee:03:ad:39:9a:e9:c2:
07:dd:b2:93:46:7f:5e:28:cf:47:9a:06:4a:34:e3:82:41:ae:
1e:0f:9c:31:54:7e:1b:b5:5f:7e:03:81:fb:34:b7:bb:53:06:
38:57:29:66
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA7pJdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjdlMmE0NmUzNGY0OTE0MzNjOGI2MmYzMTliOTAyYmRkZmRlODMxMB4XDTIyMDEw
MTA2NTczNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjg5NjQyYTlkZmQ1
NDBjNWZiZDJmYzU0MDY4NGU1OGQwMjE1M2NmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALyVgR/uKzR4q4m+biYCYfGQccUdEQo0PxA74uVgkTCgV17J
ibs18QOpljcU5GvEUKSJ4KZB0w/4k/lZQlvoFR5eIaKOGkypYlvcEo3DkFJUxQg1
EiuRPf4T/nVVuecpHfQpiEYJlWLTEJCKUvRb/3h/456YjbK4O3ttHv2XdDX0rNOb
R0kndSgk5+cfUzHqi5ldaIvifHQyteV6Mpnq4ngL0YPNHJ2CG3JLrNlJGriHPzS7
SB3F5nCcpfEECg/tNYiTsj33EDmAUDotZzHNV+UirAqCqae1BObY5fQ+T2lKz04H
mFn9za24GcyYsP6p9YgtbjtqZo/RU6HjRPV0ndcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQolkKp39VAxfvS/FQGhOWNAhU89jAfBgNVHSMEGDAWgBTGfipG409JFDPI
ti8xm5Ar3f3oMTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3huNHFSdU5QU1JRenlMWXZNWnVRSzkzOTZERS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDcvODBjNTY4LWJkMTUtNGYzMi04ZGQ0LTA2Njg2NmYyZGVkMC8x
L0tKWkNxZF9WUU1YNzB2eFVCb1RsalFJVlBQWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcv
ODBjNTY4LWJkMTUtNGYzMi04ZGQ0LTA2Njg2NmYyZGVkMC8xL3huNHFSdU5QU1JR
enlMWXZNWnVRSzkzOTZERS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACUx4TANBgkqhkiG9w0BAQsFAAOC
AQEAgNls9Os5MAU0ZrEd0VdDE2wSf7Bb+ojXrB5DNSY8ZYvVZzIZ5hovxQXihbrv
MXstuugkKAvp6ys89dIDjufw5bd96h5xKxJI5b2IPTsKZdePQX9ZH6RMe4+tPJm0
QaQAAfWhnJz7p0oL5Okp9HrQOp0DGVL8wo4DL7YftPjp2sfzVqjzBp1Tvdpaz+O8
VCf2t7zASsNlghOvNsgH9lElxAt26A0ukHHLuQNVEKlmQLiOP7SaJamGIforb1Tm
LXbfg0AEe1efMLHQL8OckPeGyS3uA605munCB92yk0Z/XijPR5oGSjTjgkGuHg+c
MVR+G7VffgOB+zS3u1MGOFcpZg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:39 2024 by rpki-client on console-fra.rpki-client.org