Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/J8WPSWwgaQ7MocY65GljZLpX9ik.roa
File: J8WPSWwgaQ7MocY65GljZLpX9ik.roa (raw, json)
Hash identifier: tefi8T+xFj6fh+hc1AJNn3kXwBHrPaXnGPN2wf1K6XU=
Subject key identifier: 27:C5:8F:49:6C:20:69:0E:CC:A1:C6:3A:E4:69:63:64:BA:57:F6:29
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 0184427BA53576ED33DC0447737BAA8EA8A6
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/J8WPSWwgaQ7MocY65GljZLpX9ik.roa
Signing time: Fri 04 Nov 2022 11:51:50 +0000
ROA not before: Fri 04 Nov 2022 11:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50799
IP address blocks: 145.43.249.0/24 maxlen: 24
145.43.248.0/24 maxlen: 24
145.43.250.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:7b:a5:35:76:ed:33:dc:04:47:73:7b:aa:8e:a8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Nov 4 11:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27c58f496c20690ecca1c63ae4696364ba57f629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:38:a7:49:25:2a:dc:45:cb:ea:c6:a7:b2:
fb:d9:0c:19:88:ee:73:8b:70:4a:43:67:98:fb:71:
b0:b1:38:55:33:2c:e4:b9:ce:1a:5e:d9:b3:22:fd:
c1:c4:46:53:bd:24:c6:10:3f:69:84:71:85:f1:76:
dc:7a:ff:51:98:d2:dd:d7:16:9c:09:f0:02:ad:38:
84:0d:51:3f:e6:79:ec:bd:8a:96:98:23:55:bf:27:
f1:a4:4a:4a:e5:17:38:ec:2c:c6:94:b4:87:c9:45:
95:b4:d0:a3:1d:42:cd:52:ce:fe:5c:83:c6:cf:89:
25:0d:c6:3e:e7:4a:c7:b4:84:cf:6c:61:83:aa:3c:
99:42:0b:4a:88:d6:70:29:4e:0e:43:9f:73:2b:06:
84:10:50:db:16:39:09:4b:92:61:7a:05:05:e7:c9:
bc:45:f6:cc:fd:2d:88:c6:82:fa:6d:60:e2:44:bc:
9a:a4:e5:16:ae:75:4f:4f:a6:dd:74:69:0b:89:7b:
de:d1:19:01:f9:b5:8d:70:6e:00:50:11:3a:b7:57:
f5:ac:5d:3e:b7:9e:bc:a4:b6:98:4b:5c:20:2e:7e:
05:00:9d:46:c3:7d:7d:d1:4d:a8:ff:a7:cc:de:f2:
2e:16:1b:c4:53:2a:7c:7b:91:8f:5b:f0:68:e4:2b:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:8F:49:6C:20:69:0E:CC:A1:C6:3A:E4:69:63:64:BA:57:F6:29
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/J8WPSWwgaQ7MocY65GljZLpX9ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:3b:92:99:fe:36:65:96:62:31:66:b8:7f:3b:ec:df:24:53:
04:cb:49:b8:47:39:42:56:84:24:94:92:e0:40:88:40:0e:c5:
f1:9c:a4:41:c4:d9:a0:97:aa:db:6f:7d:84:54:4e:82:09:08:
d5:4b:26:ec:c1:fa:de:63:27:6d:08:ff:fc:0b:37:e5:5a:6a:
4c:e7:f0:d5:57:d3:88:6c:8c:83:9f:d8:44:c5:ce:55:fa:52:
37:64:c8:92:1a:8c:57:75:ea:9f:9e:74:e6:af:b1:a3:6d:5e:
56:fc:18:e7:9c:df:39:88:37:99:23:6c:4e:b4:b9:03:c8:2b:
cf:a4:9b:6a:da:4c:43:3f:64:7b:c3:cc:d4:d4:03:e9:77:27:
21:58:f6:68:99:07:01:06:b1:d5:d8:01:86:ba:c7:a5:44:f4:
5d:7f:73:84:37:96:dc:18:c5:f7:13:48:88:a8:b8:f8:93:0d:
e4:e2:b2:c5:f1:d3:93:87:0f:62:5a:75:e5:bc:af:84:77:98:
81:5e:28:87:f4:48:55:d9:50:35:f5:ec:e6:cc:10:56:0b:30:
c6:b6:e0:70:75:ca:eb:60:b7:1c:78:88:fb:4a:43:49:6e:43:
25:d6:ce:08:c5:f6:14:2c:e2:d7:51:91:a1:f1:eb:1d:73:ee:
87:dc:6e:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRCe6U1du0z3ARHc3uqjqimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZTI2ODFkZGEwMDcwMmE3NTk3YTcxMjU3ZTE0ZjdhNzI1
ZTg5MGUwHhcNMjIxMTA0MTE1MTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2M1OGY0OTZjMjA2OTBlY2NhMWM2M2FlNDY5NjM2NGJhNTdmNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgM4p0klKtxFy+rGp7L72QwZiO5z
i3BKQ2eY+3GwsThVMyzkuc4aXtmzIv3BxEZTvSTGED9phHGF8Xbcev9RmNLd1xac
CfACrTiEDVE/5nnsvYqWmCNVvyfxpEpK5Rc47CzGlLSHyUWVtNCjHULNUs7+XIPG
z4klDcY+50rHtITPbGGDqjyZQgtKiNZwKU4OQ59zKwaEEFDbFjkJS5JhegUF58m8
RfbM/S2IxoL6bWDiRLyapOUWrnVPT6bddGkLiXve0RkB+bWNcG4AUBE6t1f1rF0+
t568pLaYS1wgLn4FAJ1Gw3190U2o/6fM3vIuFhvEUyp8e5GPW/Bo5CtiYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCfFj0lsIGkOzKHGOuRpY2S6V/YpMB8GA1UdIwQY
MBaAFD3iaB3aAHAqdZenElfhT3pyXokOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYt
ZTBhYzcyNjNkYjEyLzEvSjhXUFNXd2dhUTdNb2NZNjVHbGpaTHBYOWlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYtZTBhYzcyNjNkYjEy
LzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkSv4MA0G
CSqGSIb3DQEBCwUAA4IBAQCkO5KZ/jZllmIxZrh/O+zfJFMEy0m4RzlCVoQklJLg
QIhADsXxnKRBxNmgl6rbb32EVE6CCQjVSybswfreYydtCP/8CzflWmpM5/DVV9OI
bIyDn9hExc5V+lI3ZMiSGoxXdeqfnnTmr7GjbV5W/BjnnN85iDeZI2xOtLkDyCvP
pJtq2kxDP2R7w8zU1APpdychWPZomQcBBrHV2AGGuselRPRdf3OEN5bcGMX3E0iI
qLj4kw3k4rLF8dOThw9iWnXlvK+Ed5iBXiiH9EhV2VA19ezmzBBWCzDGtuBwdcrr
YLcceIj7SkNJbkMl1s4IxfYULOLXUZGh8esdc+6H3G6N
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org