Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/5F8bROiFMDvnz1qzt6YjgoSZIJg.roa
File: 5F8bROiFMDvnz1qzt6YjgoSZIJg.roa (raw, json)
Hash identifier: odRxmr9b522fa+kBLBxh2tKfzJKT6wEnEboIq3+KAsw=
Subject key identifier: E4:5F:1B:44:E8:85:30:3B:E7:CF:5A:B3:B7:A6:23:82:84:99:20:98
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 0182AFFAB4679A5931401382ED63F1F83AC6
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/5F8bROiFMDvnz1qzt6YjgoSZIJg.roa
Signing time: Thu 18 Aug 2022 08:03:39 +0000
ROA not before: Thu 18 Aug 2022 08:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204779
IP address blocks: 185.185.168.0/22 maxlen: 22
2a0b:5c80::/29 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:af:fa:b4:67:9a:59:31:40:13:82:ed:63:f1:f8:3a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Aug 18 08:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e45f1b44e885303be7cf5ab3b7a6238284992098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:5d:d8:f8:ef:e4:08:8c:ed:36:49:c4:7f:
7a:a4:e2:0b:67:b6:ba:fa:bc:17:19:a0:d0:5b:21:
fe:47:83:a7:fd:6a:45:9c:81:90:f3:68:4f:9b:bf:
28:1b:57:12:b2:55:69:4e:eb:a2:9c:24:a5:20:a1:
e2:46:84:e4:28:ff:73:b6:5b:74:a4:6f:f3:53:3a:
56:55:a3:26:2f:b2:d7:8f:c2:f7:de:69:d7:28:9b:
5a:81:6d:99:33:e9:b6:e0:ee:90:d4:2c:a6:d0:fe:
8c:2d:66:60:1d:c1:b2:62:5b:f3:f8:05:3a:0a:c3:
a8:bb:24:76:c7:ca:55:56:0f:5d:d9:c8:73:1c:c5:
70:69:98:88:65:a5:9e:88:37:6b:5e:9d:23:7a:bf:
ed:4c:dd:dd:10:fd:49:e9:8c:89:10:44:be:8c:38:
70:6b:9c:09:ef:e1:8c:06:38:f3:e3:98:56:92:f0:
f8:db:47:df:a4:f1:b5:39:ee:4f:5d:d8:e4:06:ca:
5a:33:9d:10:0b:22:7d:a7:eb:16:55:36:68:a0:4b:
7d:35:18:d8:45:95:ee:46:3a:67:c8:26:48:20:02:
28:37:0c:77:40:0a:dd:0f:a8:b1:a1:74:32:35:42:
cc:7f:2a:4d:e8:df:5a:d8:f4:67:3f:05:30:39:14:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:1B:44:E8:85:30:3B:E7:CF:5A:B3:B7:A6:23:82:84:99:20:98
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/5F8bROiFMDvnz1qzt6YjgoSZIJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.168.0/22
IPv6:
2a0b:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
25:a3:6c:f3:88:65:2e:41:74:47:04:71:d0:9e:36:8e:e7:14:
a2:48:b6:05:0f:fd:95:f1:ae:94:a5:91:06:0e:e5:a2:b7:9f:
65:01:40:bf:ae:98:b1:29:47:b3:2b:58:e7:6f:eb:44:5a:af:
19:7e:0d:61:4e:3e:e4:0c:ad:49:cb:f2:e3:39:c1:02:72:bb:
c6:c6:31:a1:19:2e:c3:94:15:f7:c5:eb:70:8e:ea:76:30:7e:
70:55:c8:cd:1e:d9:ef:8d:22:26:0c:74:77:bf:1d:41:36:a5:
4a:b9:f1:36:e8:00:93:7b:a5:c2:77:80:2b:6b:80:cf:4b:cb:
4d:61:7a:80:f3:1b:3d:d3:45:ef:d2:e9:48:32:0d:3f:01:e3:
01:04:ff:2c:fe:84:3f:35:d7:b8:7c:22:10:e6:b6:12:9d:06:
7e:6f:92:e5:5a:eb:70:07:09:f7:0e:bc:7b:47:cf:73:61:47:
dc:d8:4c:79:ed:7b:42:c9:13:fd:0b:90:fe:f7:82:27:1f:13:
9a:38:32:79:15:d5:9a:06:2c:80:85:b9:9a:57:3c:9f:27:a5:
f4:5e:50:48:ca:f0:31:ba:fe:27:c5:92:12:17:46:ac:70:d4:
c6:1e:88:7f:af:32:f9:e8:52:ec:d6:6f:b6:3e:f9:d8:b5:91:
4b:92:2e:cd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYKv+rRnmlkxQBOC7WPx+DrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MWY0MjI0ZmZlODkzZTliODM3ODM5YWEwYTY4YTAwMzgw
ZjU0YzYwHhcNMjIwODE4MDgwMzM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDVmMWI0NGU4ODUzMDNiZTdjZjVhYjNiN2E2MjM4Mjg0OTkyMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwVd2Pjv5AiM7TZJxH96pOILZ7a6
+rwXGaDQWyH+R4On/WpFnIGQ82hPm78oG1cSslVpTuuinCSlIKHiRoTkKP9ztlt0
pG/zUzpWVaMmL7LXj8L33mnXKJtagW2ZM+m24O6Q1Cym0P6MLWZgHcGyYlvz+AU6
CsOouyR2x8pVVg9d2chzHMVwaZiIZaWeiDdrXp0jer/tTN3dEP1J6YyJEES+jDhw
a5wJ7+GMBjjz45hWkvD420ffpPG1Oe5PXdjkBspaM50QCyJ9p+sWVTZooEt9NRjY
RZXuRjpnyCZIIAIoNwx3QArdD6ixoXQyNULMfypN6N9a2PRnPwUwORRDaQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFORfG0TohTA7589as7emI4KEmSCYMB8GA1UdIwQY
MBaAFCUfQiT/6JPpuDeDmqCmigA4D1TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzct
MTBjNzUwYzZlMzUxLzEvNUY4YlJPaUZNRHZuejFxenQ2WWpnb1NaSUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzctMTBjNzUwYzZlMzUx
LzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubmoMA0E
AgACMAcDBQMqC1yAMA0GCSqGSIb3DQEBCwUAA4IBAQAlo2zziGUuQXRHBHHQnjaO
5xSiSLYFD/2V8a6UpZEGDuWit59lAUC/rpixKUezK1jnb+tEWq8Zfg1hTj7kDK1J
y/LjOcECcrvGxjGhGS7DlBX3xetwjup2MH5wVcjNHtnvjSImDHR3vx1BNqVKufE2
6ACTe6XCd4Ara4DPS8tNYXqA8xs900Xv0ulIMg0/AeMBBP8s/oQ/Nde4fCIQ5rYS
nQZ+b5LlWutwBwn3Drx7R89zYUfc2Ex57XtCyRP9C5D+94InHxOaODJ5FdWaBiyA
hbmaVzyfJ6X0XlBIyvAxuv4nxZISF0ascNTGHoh/rzL56FLs1m+2PvnYtZFLki7N
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:49 2024 by rpki-client on console-ams.rpki-client.org