Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JK6EHwpNxL7eK7pmtnGd1VhmD0E.roa
File: JK6EHwpNxL7eK7pmtnGd1VhmD0E.roa (raw, json)
Hash identifier: NDrn4d/1VuTbgoZynRh1Xnsu386Z5vf0wu3KzItgdoE=
Subject key identifier: 24:AE:84:1F:0A:4D:C4:BE:DE:2B:BA:66:B6:71:9D:D5:58:66:0F:41
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E94C399
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JK6EHwpNxL7eK7pmtnGd1VhmD0E.roa
Signing time: Wed 02 Feb 2022 11:31:36 +0000
ROA not before: Wed 02 Feb 2022 11:31:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210352
IP address blocks: 194.87.218.0/24 maxlen: 24
194.87.216.0/24 maxlen: 24
212.192.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244630425 (0xe94c399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 2 11:31:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24ae841f0a4dc4bede2bba66b6719dd558660f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:21:ef:4c:5f:db:d8:73:55:fb:c5:33:31:
be:41:5e:8d:c8:3b:4d:55:a3:cd:48:c5:6f:6b:0b:
86:31:dc:63:a3:50:6b:54:44:4c:49:50:8f:e6:ce:
93:37:2f:d3:7f:d9:b2:1d:be:f0:52:5e:cc:50:43:
21:e0:00:1d:01:f4:2b:bf:68:a7:67:f2:a9:7f:94:
01:d9:f6:b1:80:36:79:ef:94:bb:cb:67:2b:cf:f7:
c4:4a:69:7d:95:6d:27:22:c1:3b:5b:36:5f:dc:37:
09:f9:1f:13:5f:c5:c2:5a:ee:76:4f:ee:02:3b:c6:
6c:d3:f6:1e:6c:7d:19:38:1f:1b:db:1e:50:f2:7f:
ac:cd:38:10:7e:4a:fe:e6:60:ba:3a:a7:24:95:45:
44:4b:63:cb:f8:72:eb:3c:cb:2e:4c:18:28:e9:d2:
de:48:d9:bd:12:8d:9a:a4:75:be:6e:3f:44:d4:ec:
cb:cb:c6:ff:19:63:3e:76:fe:b9:70:98:41:2b:d1:
d3:45:86:90:bd:dc:dc:43:d5:5a:6b:b1:10:bf:27:
19:18:9b:9c:b3:f7:eb:4f:5a:d2:69:70:2d:9a:bf:
c4:12:45:2b:0b:1d:77:12:4f:0e:5a:7a:2a:c3:c8:
34:23:ab:15:78:a3:f7:9a:db:da:b2:07:75:c1:1b:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AE:84:1F:0A:4D:C4:BE:DE:2B:BA:66:B6:71:9D:D5:58:66:0F:41
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JK6EHwpNxL7eK7pmtnGd1VhmD0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.216.0/24
194.87.218.0/24
212.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:63:e8:2b:10:66:c2:d2:d7:78:13:16:53:ac:01:c7:40:41:
a2:fc:64:1d:04:13:a3:6e:24:d3:5d:d6:cc:a2:61:1e:77:a0:
f1:34:a3:67:2e:12:b7:e6:aa:8a:9f:ee:5e:46:b6:2f:e4:d3:
6e:e2:14:c5:be:40:fb:0e:ef:95:54:6b:97:59:76:09:03:bd:
57:31:5b:6b:43:a6:d1:fa:10:f7:0f:bc:0f:e1:83:6d:38:14:
51:fe:c0:8c:f7:0c:02:b8:41:a2:af:76:29:56:a2:e0:b8:3b:
8d:c3:e3:28:19:09:db:1c:eb:85:c1:92:c2:81:bd:3e:59:a4:
a3:f5:fb:9a:9b:41:53:38:b3:f9:b3:81:06:3e:de:c1:f3:86:
93:7c:53:4e:a6:30:fb:93:cb:bf:bc:b2:24:82:a0:52:99:f0:
4c:da:64:4d:44:f1:9d:98:d1:90:08:18:d6:db:f6:00:fb:98:
8a:ca:c4:83:4b:bf:ac:79:25:01:7f:05:41:81:90:8c:e6:26:
ca:15:82:d9:53:0a:dc:4e:21:f8:d4:42:8a:65:e6:0d:03:65:
64:97:ce:71:0a:db:9b:24:59:ed:bd:0c:6c:8e:4e:d4:24:2b:
b5:ec:c0:12:18:d0:a4:7c:72:71:c7:01:4e:22:85:81:aa:1d:
a4:8d:e2:37
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEDpTDmTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDIw
MjExMzEzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjRhZTg0MWYwYTRk
YzRiZWRlMmJiYTY2YjY3MTlkZDU1ODY2MGY0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMz/Ie9MX9vYc1X7xTMxvkFejcg7TVWjzUjFb2sLhjHcY6NQ
a1RETElQj+bOkzcv03/Zsh2+8FJezFBDIeAAHQH0K79op2fyqX+UAdn2sYA2ee+U
u8tnK8/3xEppfZVtJyLBO1s2X9w3CfkfE1/Fwlrudk/uAjvGbNP2Hmx9GTgfG9se
UPJ/rM04EH5K/uZgujqnJJVFREtjy/hy6zzLLkwYKOnS3kjZvRKNmqR1vm4/RNTs
y8vG/xljPnb+uXCYQSvR00WGkL3c3EPVWmuxEL8nGRibnLP3609a0mlwLZq/xBJF
KwsddxJPDlp6KsPINCOrFXij95rb2rIHdcEbPhkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQkroQfCk3Evt4ruma2cZ3VWGYPQTAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
L0pLNkVId3BOeEw3ZUs3cG10bkdkMVZobUQwRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMJX2AMEAMJX2gMEANTADjANBgkq
hkiG9w0BAQsFAAOCAQEAX2PoKxBmwtLXeBMWU6wBx0BBovxkHQQTo24k013WzKJh
Hneg8TSjZy4St+aqip/uXka2L+TTbuIUxb5A+w7vlVRrl1l2CQO9VzFba0Om0foQ
9w+8D+GDbTgUUf7AjPcMArhBoq92KVai4Lg7jcPjKBkJ2xzrhcGSwoG9Plmko/X7
mptBUziz+bOBBj7ewfOGk3xTTqYw+5PLv7yyJIKgUpnwTNpkTUTxnZjRkAgY1tv2
APuYisrEg0u/rHklAX8FQYGQjOYmyhWC2VMK3E4h+NRCimXmDQNlZJfOcQrbmyRZ
7b0MbI5O1CQrtezAEhjQpHxycccBTiKFgaodpI3iNw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org