Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8jxfREgSSn_8GgzRvxbm3ZrRzto.roa
File: 8jxfREgSSn_8GgzRvxbm3ZrRzto.roa (raw, json)
Hash identifier: wihCbVklQwZ/UWvNoR29FsRXuBgSaM4CrBanaxAXV70=
Subject key identifier: F2:3C:5F:44:48:12:4A:7F:FC:1A:0C:D1:BF:16:E6:DD:9A:D1:CE:DA
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 486542E7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8jxfREgSSn_8GgzRvxbm3ZrRzto.roa
Signing time: Sat 01 Jan 2022 03:00:27 +0000
ROA not before: Sat 01 Jan 2022 03:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44812
IP address blocks: 5.8.64.0/24 maxlen: 24
31.184.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214595815 (0x486542e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f23c5f4448124a7ffc1a0cd1bf16e6dd9ad1ceda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:8f:94:a0:7f:02:7c:0a:0e:16:f6:e2:d1:
40:b6:05:16:c7:57:99:f4:30:2b:29:73:4c:e1:81:
03:5f:03:c9:d9:81:27:5d:df:e6:12:4c:96:38:e0:
00:8b:3a:5d:4d:ab:7c:fe:1c:9c:f7:cb:0b:38:5f:
a7:01:0c:a1:a3:12:ac:95:2d:67:1d:ed:89:b0:da:
0a:26:57:39:81:dc:68:68:55:9d:2d:04:b4:44:1a:
c5:d0:5a:63:bd:c8:ed:8b:18:52:e6:19:2d:93:b7:
08:42:9c:83:e2:5b:48:3b:94:1b:3c:81:8d:ea:91:
68:94:4c:96:bf:99:a9:55:23:4b:47:a7:d8:4b:da:
66:c1:73:0c:e4:32:e2:b2:e4:98:1a:ce:69:de:d1:
ab:5f:1b:bf:cb:1d:e8:15:07:4b:06:4a:fa:e4:11:
fe:cb:13:2e:96:ac:9f:32:32:a8:21:56:04:73:0e:
fc:3f:10:c5:a5:2f:1e:bd:1d:83:24:cb:6e:0a:3b:
ce:90:24:3d:c4:65:9a:e9:b3:cb:4b:d3:fb:2a:8d:
57:f9:e6:a9:f5:89:8e:c5:3d:c9:ab:79:b5:9f:58:
6a:80:0f:06:4d:70:5c:73:d4:c2:21:fb:1c:47:94:
99:b9:37:0a:a3:0d:3b:fe:ac:27:fe:48:86:a3:93:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:5F:44:48:12:4A:7F:FC:1A:0C:D1:BF:16:E6:DD:9A:D1:CE:DA
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8jxfREgSSn_8GgzRvxbm3ZrRzto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.64.0/24
31.184.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:01:fc:68:c4:21:9f:4e:2a:8a:73:b0:74:f8:9b:f0:ec:2d:
1b:e1:25:7e:c1:96:0d:22:13:aa:c2:80:1a:a4:8e:7b:89:99:
22:28:f8:bf:20:af:f6:3d:88:10:63:2c:7b:4a:ff:a7:ff:ba:
eb:95:dc:6e:a1:e0:21:88:a1:3b:36:38:9b:4b:d2:30:3a:e1:
d8:49:9e:65:70:18:60:a2:9b:63:9a:ee:38:4c:b8:8b:d6:5d:
27:20:15:fd:81:1d:b2:d6:b1:99:cb:8e:11:d8:e8:31:c1:6d:
13:43:1e:d7:d4:27:d5:55:a9:79:df:f8:11:a3:ff:6e:49:0d:
5b:43:4c:f8:09:e6:1e:54:c5:35:f4:c8:a1:76:be:9a:f1:87:
9a:25:ae:51:b8:13:98:b4:70:ab:fc:bb:c1:87:3e:d2:54:59:
ac:f3:45:45:fb:6d:0c:3a:3f:5c:25:6b:d0:46:20:96:09:63:
dc:68:63:9e:f5:be:6b:1a:83:d4:2d:eb:d7:55:d1:01:a5:e7:
21:66:43:ff:9d:2a:0a:47:2f:4d:8a:15:80:9b:0b:81:89:0f:
10:28:09:d9:ce:b1:1a:f2:87:a3:a1:3d:11:70:f6:47:06:d1:
c6:95:2c:37:da:6c:69:15:a1:5f:da:42:13:7b:c9:54:76:36:
8b:e2:d1:6c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIESGVC5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWFhOGEwYTVmZGZkNjk4ZTEwNGJlMzZhMmFlZWM4MTNhZWNhMDcxMB4XDTIyMDEw
MTAzMDAyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjIzYzVmNDQ0ODEy
NGE3ZmZjMWEwY2QxYmYxNmU2ZGQ5YWQxY2VkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYVj5SgfwJ8Cg4W9uLRQLYFFsdXmfQwKylzTOGBA18DydmB
J13f5hJMljjgAIs6XU2rfP4cnPfLCzhfpwEMoaMSrJUtZx3tibDaCiZXOYHcaGhV
nS0EtEQaxdBaY73I7YsYUuYZLZO3CEKcg+JbSDuUGzyBjeqRaJRMlr+ZqVUjS0en
2EvaZsFzDOQy4rLkmBrOad7Rq18bv8sd6BUHSwZK+uQR/ssTLpasnzIyqCFWBHMO
/D8QxaUvHr0dgyTLbgo7zpAkPcRlmumzy0vT+yqNV/nmqfWJjsU9yat5tZ9YaoAP
Bk1wXHPUwiH7HEeUmbk3CqMNO/6sJ/5IhqOTlKUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTyPF9ESBJKf/waDNG/FubdmtHO2jAfBgNVHSMEGDAWgBTqqooKX9/WmOEE
vjairuyBOuygcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZxcUtDbF9mMXBqaEJMNDJvcTdzZ1Ryc29IRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvMjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8x
LzhqeGZSRWdTU25fOEdnelJ2eGJtM1pyUnp0by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
MjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8xLzZxcUtDbF9mMXBq
aEJMNDJvcTdzZ1Ryc29IRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAUIQAMEAB+48jANBgkqhkiG9w0B
AQsFAAOCAQEAzgH8aMQhn04qinOwdPib8OwtG+ElfsGWDSITqsKAGqSOe4mZIij4
vyCv9j2IEGMse0r/p/+665XcbqHgIYihOzY4m0vSMDrh2EmeZXAYYKKbY5ruOEy4
i9ZdJyAV/YEdstaxmcuOEdjoMcFtE0Me19Qn1VWped/4EaP/bkkNW0NM+AnmHlTF
NfTIoXa+mvGHmiWuUbgTmLRwq/y7wYc+0lRZrPNFRfttDDo/XCVr0EYglglj3Ghj
nvW+axqD1C3r11XRAaXnIWZD/50qCkcvTYoVgJsLgYkPECgJ2c6xGvKHo6E9EXD2
RwbRxpUsN9psaRWhX9pCE3vJVHY2i+LRbA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org