Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/CJZIGUecOg153kjNH8mNOiOYtcg.roa
File: CJZIGUecOg153kjNH8mNOiOYtcg.roa (raw, json)
Hash identifier: ldBtJN/0EWrFdcFYN3ikF1tyj5RxiaMGUmeEWf4CNnI=
Subject key identifier: 08:96:48:19:47:9C:3A:0D:79:DE:48:CD:1F:C9:8D:3A:23:98:B5:C8
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 1559A1E9
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/CJZIGUecOg153kjNH8mNOiOYtcg.roa
Signing time: Sat 01 Jan 2022 08:04:47 +0000
ROA not before: Sat 01 Jan 2022 08:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.89.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358195689 (0x1559a1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 08:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08964819479c3a0d79de48cd1fc98d3a2398b5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:ad:d9:52:90:0d:d8:8d:a1:74:15:64:c9:
2e:8d:63:23:4b:7c:26:27:15:c9:60:f8:02:b8:ef:
d1:36:30:60:74:f3:c4:1a:af:0a:5f:9c:7a:92:7e:
0e:b9:7f:85:8c:91:3f:e2:b6:b3:1a:20:f5:3d:ea:
ad:0a:40:d0:72:00:6c:01:06:2c:58:b4:70:f2:f1:
31:6b:f9:17:bc:dc:71:a2:d3:2e:06:f8:65:a1:9d:
c7:92:4f:0f:fb:9a:a9:78:a7:51:cc:cf:39:3f:0c:
06:d1:f0:b4:52:0f:4c:76:c0:20:e1:52:62:36:0d:
07:41:06:42:ea:02:f6:e4:ee:54:22:35:c9:e2:87:
2b:91:10:60:4a:19:06:14:2d:8f:a6:13:98:8d:72:
0d:a9:b7:2f:5f:84:36:5e:57:00:6c:2c:36:16:0b:
71:26:6f:4a:73:7b:46:80:5f:be:c4:a2:66:a8:ef:
ce:5b:ff:c1:ba:3a:1f:bd:b8:79:0c:3b:78:8a:81:
9f:8d:2a:83:f0:d5:66:20:10:66:c4:3f:69:2d:8c:
26:54:36:94:99:b5:a9:89:3c:b7:45:a7:f9:de:22:
d0:35:3a:b6:55:6d:b0:71:b0:17:2f:93:8a:23:2a:
a1:1a:36:10:22:52:0e:c5:a8:a8:52:80:97:20:33:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:48:19:47:9C:3A:0D:79:DE:48:CD:1F:C9:8D:3A:23:98:B5:C8
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/CJZIGUecOg153kjNH8mNOiOYtcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.249.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ba:07:f9:59:40:9a:bb:d6:ea:9f:e9:80:31:f0:0a:bf:4a:
9d:d7:49:13:6a:f1:72:93:89:c7:93:12:b7:bf:9a:f5:03:a7:
80:67:de:3b:62:70:e9:7f:c1:0b:5d:43:9f:e4:c1:3c:a5:3b:
1f:47:5b:87:61:27:c1:16:38:d1:46:32:31:98:91:78:92:13:
2a:0e:24:04:78:95:69:c4:c5:21:0f:61:40:17:3d:92:92:cc:
fa:3a:d7:41:60:3a:8a:d8:be:72:50:85:58:28:9c:76:fe:26:
1e:5f:c6:ef:1f:6a:72:17:e5:7e:d8:2e:c6:7e:a0:61:e0:f3:
b9:65:98:30:d8:9b:da:d7:71:c9:ab:2a:3a:e9:37:80:4d:1d:
64:88:7c:68:73:fd:73:5f:b4:13:56:f1:ff:8e:8a:36:fb:5e:
e2:48:41:04:ec:a3:55:21:ac:2e:ed:55:c0:0f:58:40:26:b6:
cd:f6:15:48:08:a2:d7:80:9f:10:e5:1d:46:c9:64:7d:b0:9b:
4f:fc:c3:43:53:2d:43:8f:0b:13:80:f1:b0:66:1c:b8:ba:e5:
ad:37:2b:9a:0f:e4:c2:44:ea:7d:06:f8:66:82:b0:11:6f:6f:
56:d1:49:cf:33:73:26:65:ff:f4:4c:2c:e9:31:be:be:ec:ac:
7f:e7:ef:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFVmh6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZjA3NDM0OTZjN2ZmM2VmZmI4NzA2MDExMzljYWQ5ZDJmMjcxZTEwMB4XDTIyMDEw
MTA4MDQ0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDg5NjQ4MTk0Nzlj
M2EwZDc5ZGU0OGNkMWZjOThkM2EyMzk4YjVjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOE3rdlSkA3YjaF0FWTJLo1jI0t8JicVyWD4Arjv0TYwYHTz
xBqvCl+cepJ+Drl/hYyRP+K2sxog9T3qrQpA0HIAbAEGLFi0cPLxMWv5F7zccaLT
Lgb4ZaGdx5JPD/uaqXinUczPOT8MBtHwtFIPTHbAIOFSYjYNB0EGQuoC9uTuVCI1
yeKHK5EQYEoZBhQtj6YTmI1yDam3L1+ENl5XAGwsNhYLcSZvSnN7RoBfvsSiZqjv
zlv/wbo6H724eQw7eIqBn40qg/DVZiAQZsQ/aS2MJlQ2lJm1qYk8t0Wn+d4i0DU6
tlVtsHGwFy+TiiMqoRo2ECJSDsWoqFKAlyAz5hkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQIlkgZR5w6DXneSM0fyY06I5i1yDAfBgNVHSMEGDAWgBSfB0NJbH/z7/uH
BgETnK2dLyceEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L253ZERTV3hfOC1fN2h3WUJFNXl0blM4bkhoQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvMjJiN2FiLWZjMTEtNDA3YS1iZDNjLTYzNDExMzY3ZDkwYS8x
L0NKWklHVWVjT2cxNTNrak5IOG1OT2lPWXRjZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
MjJiN2FiLWZjMTEtNDA3YS1iZDNjLTYzNDExMzY3ZDkwYS8xL253ZERTV3hfOC1f
N2h3WUJFNXl0blM4bkhoQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlZ+TANBgkqhkiG9w0BAQsFAAOC
AQEAZLoH+VlAmrvW6p/pgDHwCr9KnddJE2rxcpOJx5MSt7+a9QOngGfeO2Jw6X/B
C11Dn+TBPKU7H0dbh2EnwRY40UYyMZiReJITKg4kBHiVacTFIQ9hQBc9kpLM+jrX
QWA6iti+clCFWCicdv4mHl/G7x9qchflftguxn6gYeDzuWWYMNib2tdxyasqOuk3
gE0dZIh8aHP9c1+0E1bx/46KNvte4khBBOyjVSGsLu1VwA9YQCa2zfYVSAii14Cf
EOUdRslkfbCbT/zDQ1MtQ48LE4DxsGYcuLrlrTcrmg/kwkTqfQb4ZoKwEW9vVtFJ
zzNzJmX/9Ews6TG+vuysf+fv5A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:26 2023 by rpki-client on console-fra.rpki-client.org