Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/JXhDiZkHF-cKqo1nYwbTI2r5uiw.roa
File: JXhDiZkHF-cKqo1nYwbTI2r5uiw.roa (raw, json)
Hash identifier: k9BWzxqZSOIgxbZeEIl9ARiD47E46slQBu+UVN8NTx0=
Subject key identifier: 25:78:43:89:99:07:17:E7:0A:AA:8D:67:63:06:D3:23:6A:F9:BA:2C
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0181DD0F71D92E4751D48BC3B573EF08EEEE
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/JXhDiZkHF-cKqo1nYwbTI2r5uiw.roa
Signing time: Fri 08 Jul 2022 09:06:25 +0000
ROA not before: Fri 08 Jul 2022 09:06:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 212.40.181.0/24 maxlen: 24
194.64.88.0/24 maxlen: 24
195.180.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:0f:71:d9:2e:47:51:d4:8b:c3:b5:73:ef:08:ee:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 8 09:06:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25784389990717e70aaa8d676306d3236af9ba2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:d8:c4:39:dd:c9:eb:8a:02:b6:00:d7:98:
6e:4b:f2:8f:37:39:1d:1f:83:88:7d:64:2d:f0:b6:
51:e8:f0:4b:9e:4c:48:f4:9d:58:b9:3c:31:ca:64:
9e:4b:31:37:76:e5:90:25:5c:5a:34:11:d6:44:09:
87:3a:ef:46:2e:27:11:92:99:06:c8:14:81:34:1b:
0c:61:96:c1:7e:23:3c:0f:75:9a:17:68:4b:bb:dc:
bf:90:2f:a0:49:51:4d:19:23:02:53:94:de:f8:6e:
c4:a8:17:2d:ea:6e:57:22:1f:f3:19:f3:58:06:8c:
52:72:a9:8b:af:1f:1e:1e:b9:16:b4:2e:d5:9c:aa:
a0:24:a7:46:8f:fd:29:ab:a0:1e:46:ec:66:1e:44:
ae:f8:d7:93:3c:5e:02:d4:76:a9:99:72:44:17:39:
3c:a7:37:bc:6b:f5:41:81:0e:f4:82:35:88:7d:fc:
31:06:6f:a2:42:c1:29:a2:c0:8a:42:bf:c5:96:fc:
2a:04:5f:81:59:43:5d:3b:49:fa:fd:02:95:d6:57:
4f:b1:82:e7:95:b1:c8:25:e2:f1:d0:df:95:b7:84:
70:55:f2:eb:0c:2f:fa:0d:ca:e6:5c:7b:be:21:ee:
76:47:53:37:f1:97:07:f4:bd:e9:9d:94:fd:9a:7b:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:43:89:99:07:17:E7:0A:AA:8D:67:63:06:D3:23:6A:F9:BA:2C
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/JXhDiZkHF-cKqo1nYwbTI2r5uiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.88.0/24
195.180.177.0/24
212.40.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:00:61:a5:73:6e:b9:62:f4:7a:ec:76:5e:9c:76:c9:db:97:
5a:83:03:fc:38:d7:ac:89:b5:c6:dc:9e:3e:02:9d:0f:cb:61:
99:1f:f0:85:6a:6b:18:4f:d6:72:af:8c:40:a1:27:f0:e3:75:
d9:ff:50:79:28:6b:5b:e4:4c:16:73:26:e0:eb:a2:9e:a1:3f:
67:74:72:ee:92:06:d8:2b:d8:a4:f1:a2:81:36:1a:1d:e5:00:
c6:6d:d5:cf:4e:02:fd:fc:9f:94:64:12:94:43:7e:3d:0d:08:
3b:7d:70:88:61:14:dd:1f:9e:2b:d1:5a:40:99:3f:a1:df:28:
00:c1:f9:d4:e1:51:60:e2:d5:ab:fd:e1:28:55:31:f6:64:0d:
fa:1c:70:8f:be:b0:af:92:7d:8e:20:c2:1b:c0:3a:e2:8e:8b:
f7:9c:2a:50:da:34:4c:28:83:69:21:b0:74:f1:06:0b:d5:11:
e5:bc:f8:15:f5:13:cd:4b:bf:7c:f1:1b:8e:23:6a:a3:7b:40:
87:0e:08:03:e5:0c:9f:2e:64:58:27:1e:66:48:fa:90:70:f1:
45:e7:ee:be:84:7a:2d:eb:cf:55:f6:c2:9e:8d:35:f7:2e:32:
c4:48:d9:ba:fb:33:7e:e9:cb:cd:6b:90:bf:6c:de:4a:b6:db:
1b:5a:61:75
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYHdD3HZLkdR1IvDtXPvCO7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjIwNzA4MDkwNjI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTc4NDM4OTk5MDcxN2U3MGFhYThkNjc2MzA2ZDMyMzZhZjliYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmPYxDndyeuKArYA15huS/KPNzkd
H4OIfWQt8LZR6PBLnkxI9J1YuTwxymSeSzE3duWQJVxaNBHWRAmHOu9GLicRkpkG
yBSBNBsMYZbBfiM8D3WaF2hLu9y/kC+gSVFNGSMCU5Te+G7EqBct6m5XIh/zGfNY
BoxScqmLrx8eHrkWtC7VnKqgJKdGj/0pq6AeRuxmHkSu+NeTPF4C1HapmXJEFzk8
pze8a/VBgQ70gjWIffwxBm+iQsEposCKQr/FlvwqBF+BWUNdO0n6/QKV1ldPsYLn
lbHIJeLx0N+Vt4RwVfLrDC/6DcrmXHu+Ie52R1M38ZcH9L3pnZT9mns6pQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCV4Q4mZBxfnCqqNZ2MG0yNq+bosMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvSlhoRGlaa0hGLWNLcW8xbll3YlRJMnI1dWl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwkBYAwQA
w7SxAwQA1Ci1MA0GCSqGSIb3DQEBCwUAA4IBAQAKAGGlc265YvR67HZenHbJ25da
gwP8ONesibXG3J4+Ap0Py2GZH/CFamsYT9Zyr4xAoSfw43XZ/1B5KGtb5EwWcybg
66KeoT9ndHLukgbYK9ik8aKBNhod5QDGbdXPTgL9/J+UZBKUQ349DQg7fXCIYRTd
H54r0VpAmT+h3ygAwfnU4VFg4tWr/eEoVTH2ZA36HHCPvrCvkn2OIMIbwDrijov3
nCpQ2jRMKINpIbB08QYL1RHlvPgV9RPNS7988RuOI2qje0CHDggD5QyfLmRYJx5m
SPqQcPFF5+6+hHot689V9sKejTX3LjLESNm6+zN+6cvNa5C/bN5KttsbWmF1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org