Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PP_je8X0Dd7xMmWtS-9wQkf97AM.roa
File: PP_je8X0Dd7xMmWtS-9wQkf97AM.roa (raw, json)
Hash identifier: wo6Sjuw4Cb+g5YK/zwGfAhJHRZSXZx6TLygJE0O3ie4=
Subject key identifier: 3C:FF:E3:7B:C5:F4:0D:DE:F1:32:65:AD:4B:EF:70:42:47:FD:EC:03
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38B49486
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PP_je8X0Dd7xMmWtS-9wQkf97AM.roa
Signing time: Tue 17 May 2022 05:30:24 +0000
ROA not before: Tue 17 May 2022 05:30:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197050
IP address blocks: 151.251.56.0/22 maxlen: 22
85.118.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951358598 (0x38b49486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:30:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cffe37bc5f40ddef13265ad4bef704247fdec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:5c:12:96:bf:ad:a5:5c:64:ef:68:bb:10:
58:77:02:33:33:0a:4f:bd:92:37:b7:8d:67:11:0a:
c2:34:a6:a3:52:d0:bd:57:ef:03:b3:c6:d7:f8:4d:
26:f5:0a:9b:c2:6b:19:ac:ec:e6:4e:ee:41:19:69:
4e:fe:ad:fd:c3:8a:6c:ab:ef:1f:16:21:66:aa:4d:
23:03:d1:99:01:21:97:02:5b:0f:69:82:13:83:f3:
93:7d:3e:5f:d6:e5:a3:75:26:bc:e7:40:8a:ea:34:
3a:de:e6:8b:6b:ed:98:5c:6e:fb:56:da:17:ce:08:
c0:e9:4e:a2:f4:62:3a:dd:6f:8a:81:3b:0a:ec:c0:
5a:6f:da:68:33:e9:14:ff:b4:72:9a:49:c3:7f:48:
ab:a7:07:74:e3:c3:12:42:7d:e3:14:d1:b0:3c:e4:
b4:1c:cf:0e:45:58:92:a5:f5:1a:c2:b1:79:9b:56:
73:27:3a:bf:e0:70:14:5c:e4:e3:33:80:20:c1:e1:
a6:d2:10:c9:e6:08:f7:76:c4:f4:51:03:1b:a5:69:
fe:99:ec:1e:12:2a:6c:c6:da:6f:64:e7:04:7d:8b:
76:4c:76:a1:f1:4d:be:d9:85:6f:c4:47:73:02:c9:
12:59:3a:31:5f:e3:d2:ee:c8:8f:31:52:4a:ea:cc:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FF:E3:7B:C5:F4:0D:DE:F1:32:65:AD:4B:EF:70:42:47:FD:EC:03
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PP_je8X0Dd7xMmWtS-9wQkf97AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.91.0/24
151.251.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:57:42:0b:62:65:75:32:0d:33:87:bb:5a:03:34:fa:87:ca:
94:17:72:1b:1e:8e:ff:2b:da:c7:2d:73:48:11:43:99:34:b1:
54:ff:2d:82:db:1d:a7:91:3f:ec:ed:f2:b7:c3:70:5b:87:e6:
a9:f0:6c:51:be:6b:e5:d7:32:86:ed:5c:f1:7b:ce:60:4d:f2:
3a:fd:3b:41:5e:e2:36:b0:b2:21:cf:42:c5:24:d7:e4:24:58:
5f:16:7b:1f:4e:97:e4:0e:ba:02:bf:04:4f:9b:b0:23:16:3b:
3a:30:8a:6c:9a:c4:6c:a8:51:a2:39:3a:59:c3:3e:b2:f7:75:
82:31:77:76:32:76:11:99:76:6a:d7:22:bf:7e:87:f7:e3:0c:
ab:43:f7:69:a5:18:37:65:93:b5:f6:a2:a5:94:f6:1b:4c:70:
6a:3c:87:6e:54:ae:62:c0:4f:20:cc:a9:de:1d:bb:f1:75:47:
34:dd:64:42:e3:c8:b3:d2:1a:02:ca:ba:44:56:45:59:8d:39:
0c:19:2c:85:f9:23:6d:b1:77:ae:28:20:f0:26:1c:75:51:44:
39:ce:6c:56:06:a0:21:20:bb:27:a4:0d:b3:3a:d9:09:c5:81:
d8:01:7e:d9:19:1d:51:2b:5f:4c:9e:ac:82:7a:c7:6d:82:91:
5d:fa:18:98
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEOLSUhjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMB4XDTIyMDUx
NzA1MzAyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2NmZmUzN2JjNWY0
MGRkZWYxMzI2NWFkNGJlZjcwNDI0N2ZkZWMwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKg/XBKWv62lXGTvaLsQWHcCMzMKT72SN7eNZxEKwjSmo1LQ
vVfvA7PG1/hNJvUKm8JrGazs5k7uQRlpTv6t/cOKbKvvHxYhZqpNIwPRmQEhlwJb
D2mCE4Pzk30+X9blo3UmvOdAiuo0Ot7mi2vtmFxu+1baF84IwOlOovRiOt1vioE7
CuzAWm/aaDPpFP+0cppJw39Iq6cHdOPDEkJ94xTRsDzktBzPDkVYkqX1GsKxeZtW
cyc6v+BwFFzk4zOAIMHhptIQyeYI93bE9FEDG6Vp/pnsHhIqbMbab2TnBH2Ldkx2
ofFNvtmFb8RHcwLJElk6MV/j0u7IjzFSSurMkpMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ8/+N7xfQN3vEyZa1L73BCR/3sAzAfBgNVHSMEGDAWgBQFSM7fFwKe2YoQ
gRPGwQnsrM2C7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JVak8zeGNDbnRtS0VJRVR4c0VKN0t6Tmd1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8x
L1BQX2plOFgwRGQ3eE1tV3RTLTl3UWtmOTdBTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRt
S0VJRVR4c0VKN0t6Tmd1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFV2WwMEApf7ODANBgkqhkiG9w0B
AQsFAAOCAQEAi1dCC2JldTINM4e7WgM0+ofKlBdyGx6O/yvaxy1zSBFDmTSxVP8t
gtsdp5E/7O3yt8NwW4fmqfBsUb5r5dcyhu1c8XvOYE3yOv07QV7iNrCyIc9CxSTX
5CRYXxZ7H06X5A66Ar8ET5uwIxY7OjCKbJrEbKhRojk6WcM+svd1gjF3djJ2EZl2
atciv36H9+MMq0P3aaUYN2WTtfaipZT2G0xwajyHblSuYsBPIMyp3h278XVHNN1k
QuPIs9IaAsq6RFZFWY05DBkshfkjbbF3rigg8CYcdVFEOc5sVgagISC7J6QNszrZ
CcWB2AF+2RkdUStfTJ6sgnrHbYKRXfoYmA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:19 2023 by rpki-client on console-fra.rpki-client.org