Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JpkaLGs6LtswCTQ-hPfiUtXY1w0.roa
File: JpkaLGs6LtswCTQ-hPfiUtXY1w0.roa (raw, json)
Hash identifier: U+BDQjGaRM86uxR/m6QTaXzC0T66zYIwtNsz+sFNY1M=
Subject key identifier: 26:99:1A:2C:6B:3A:2E:DB:30:09:34:3E:84:F7:E2:52:D5:D8:D7:0D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184F62355801B2C25ADFFE12A84C2BBEDE9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JpkaLGs6LtswCTQ-hPfiUtXY1w0.roa
Signing time: Fri 09 Dec 2022 09:07:01 +0000
ROA not before: Fri 09 Dec 2022 09:07:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211373
IP address blocks: 193.108.112.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:23:55:80:1b:2c:25:ad:ff:e1:2a:84:c2:bb:ed:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 9 09:07:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26991a2c6b3a2edb3009343e84f7e252d5d8d70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:34:ae:f2:9b:22:f2:3b:b7:b2:16:47:a1:
f7:2b:8f:0e:b9:0f:22:b7:08:1b:25:93:1e:d4:95:
13:dc:67:20:75:2f:9b:17:b1:be:85:60:78:8f:07:
ef:29:43:8d:f5:66:2e:cb:9e:2e:0d:c3:7e:49:d3:
cb:75:0d:60:99:17:5b:8a:cd:db:aa:59:f9:16:f2:
f7:e2:fa:eb:77:78:aa:c6:49:4f:e1:00:83:98:99:
4b:d0:64:dc:ff:ba:08:4c:1b:95:6a:80:45:d3:d9:
27:48:ec:1f:22:96:20:73:be:ce:11:f1:83:6f:2e:
4d:3c:eb:6b:e7:df:d6:94:09:da:db:6e:27:23:51:
42:4e:19:b2:98:60:cb:20:2e:3f:25:c6:12:7a:f4:
b2:c2:79:ff:8c:b3:58:d3:17:0e:24:eb:0e:84:28:
50:bf:d2:23:28:75:3f:96:6b:35:da:81:ba:7e:fa:
0f:d6:8a:eb:c8:f9:1f:31:d1:db:00:ae:a6:b2:14:
e1:58:8c:15:44:f8:b5:f1:4c:5f:0f:9b:35:81:f7:
3c:e2:b0:51:65:88:6a:09:7b:3e:76:a2:53:83:e1:
1f:1d:c0:b0:45:4b:8a:5e:11:b0:18:d7:15:f3:06:
a6:94:bc:2e:99:5f:c1:6d:91:d7:4b:19:da:a4:7d:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:1A:2C:6B:3A:2E:DB:30:09:34:3E:84:F7:E2:52:D5:D8:D7:0D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JpkaLGs6LtswCTQ-hPfiUtXY1w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.209.0/24
193.108.112.0/24
212.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e0:8d:4f:7b:14:5f:7d:df:34:cc:37:fd:fb:2a:38:f8:de:
27:ae:88:ac:33:c6:91:7f:8b:72:82:f5:bb:3d:ad:54:bf:ec:
2b:0d:d0:a3:1b:64:97:6f:0b:bb:0e:ee:fd:56:02:0c:b7:05:
94:bc:65:c6:fc:6e:ec:82:40:50:3c:86:a2:d2:fa:9e:c0:79:
1f:80:71:55:4e:73:e4:6d:f1:54:0e:c0:63:10:25:17:eb:dc:
25:45:3c:3b:cd:fe:62:39:94:cd:48:3c:a0:89:3c:f5:62:9a:
f4:01:e1:3f:ae:da:0f:bb:5d:91:ce:d5:36:51:30:8c:ec:25:
3d:f2:a4:a3:da:cf:19:0e:b1:3b:5e:e5:fd:06:a8:68:a6:a6:
38:a2:e0:ab:83:2b:87:a8:d5:70:c6:8c:27:12:61:32:87:b9:
89:69:ce:13:61:f1:f0:f9:ff:93:b6:81:7d:d3:c9:a4:32:4b:
22:ae:65:57:d3:30:e8:ef:2e:97:92:e5:04:8b:af:50:ec:e3:
78:73:64:6e:ab:01:c9:b7:ff:38:e2:b3:23:18:4f:86:68:df:
f5:92:f8:fb:da:d0:4f:39:fd:e6:d1:64:43:0c:1a:3a:99:69:
32:69:2c:e5:f0:00:3e:fb:57:68:16:45:aa:b4:11:a6:99:4d:
de:ea:75:39
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYT2I1WAGywlrf/hKoTCu+3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMjA5MDkwNzAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjk5MWEyYzZiM2EyZWRiMzAwOTM0M2U4NGY3ZTI1MmQ1ZDhkNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi540rvKbIvI7t7IWR6H3K48OuQ8i
twgbJZMe1JUT3GcgdS+bF7G+hWB4jwfvKUON9WYuy54uDcN+SdPLdQ1gmRdbis3b
qln5FvL34vrrd3iqxklP4QCDmJlL0GTc/7oITBuVaoBF09knSOwfIpYgc77OEfGD
by5NPOtr59/WlAna224nI1FCThmymGDLIC4/JcYSevSywnn/jLNY0xcOJOsOhChQ
v9IjKHU/lms12oG6fvoP1orryPkfMdHbAK6mshThWIwVRPi18UxfD5s1gfc84rBR
ZYhqCXs+dqJTg+EfHcCwRUuKXhGwGNcV8wamlLwumV/BbZHXSxnapH1y1QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCaZGixrOi7bMAk0PoT34lLV2NcNMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSnBrYUxHczZMdHN3Q1RRLWhQZmlVdFhZMXcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwHzRAwQA
wWxwAwQA1MAGMA0GCSqGSIb3DQEBCwUAA4IBAQBY4I1PexRffd80zDf9+yo4+N4n
roisM8aRf4tygvW7Pa1Uv+wrDdCjG2SXbwu7Du79VgIMtwWUvGXG/G7sgkBQPIai
0vqewHkfgHFVTnPkbfFUDsBjECUX69wlRTw7zf5iOZTNSDygiTz1Ypr0AeE/rtoP
u12RztU2UTCM7CU98qSj2s8ZDrE7XuX9BqhopqY4ouCrgyuHqNVwxownEmEyh7mJ
ac4TYfHw+f+TtoF908mkMksirmVX0zDo7y6XkuUEi69Q7ON4c2RuqwHJt/844rMj
GE+GaN/1kvj72tBPOf3m0WRDDBo6mWkyaSzl8AA++1doFkWqtBGmmU3e6nU5
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org