Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/JEOkByasFwddOWBeo9gmX5aejLU.roa
File: JEOkByasFwddOWBeo9gmX5aejLU.roa (raw, json)
Hash identifier: ff1RLLknB1ujjmFOT/ndA5NvJu+LL75+sqCy558F32M=
Subject key identifier: 24:43:A4:07:26:AC:17:07:5D:39:60:5E:A3:D8:26:5F:96:9E:8C:B5
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 09180EA0
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/JEOkByasFwddOWBeo9gmX5aejLU.roa
Signing time: Sat 01 Jan 2022 09:01:36 +0000
ROA not before: Sat 01 Jan 2022 09:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25248
IP address blocks: 85.207.0.0/16 maxlen: 16
84.244.64.0/18 maxlen: 18
82.99.128.0/18 maxlen: 18
212.158.128.0/19 maxlen: 19
2a02:a40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152571552 (0x9180ea0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Jan 1 09:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2443a40726ac17075d39605ea3d8265f969e8cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:d7:2c:7a:b7:5d:df:09:26:1d:f1:ba:4d:
4f:d5:3c:b1:7c:42:59:ab:f5:58:3f:4e:74:1d:a8:
a6:60:36:36:6b:cb:d4:62:0b:b4:45:f3:67:7f:aa:
c3:b7:6a:bf:18:05:54:df:f9:18:4b:e1:6d:ee:e1:
41:81:3a:6e:d1:2e:95:26:24:0d:40:81:68:6b:e6:
31:b8:2b:55:1f:25:20:71:83:4e:72:c4:cc:a3:90:
e4:c5:fb:18:87:34:65:5c:d5:d4:23:11:84:99:3e:
78:90:1a:71:29:c5:40:12:30:af:9b:7f:36:01:3f:
13:0a:92:7e:e5:d6:8c:49:eb:00:88:53:39:4d:ac:
cd:63:5b:69:3b:57:4e:90:c8:18:64:3e:68:77:17:
53:2f:06:5a:73:98:f3:a5:51:d6:3f:ea:ff:d8:20:
49:db:32:52:a4:a4:e3:73:a3:51:ad:1c:77:bc:15:
3d:a2:1a:83:17:e9:41:7a:f9:bd:10:96:a4:83:a8:
a9:b1:3d:59:f8:6b:2b:ea:fe:cd:cf:23:b9:a8:ce:
92:88:3c:9b:f5:ce:ca:2e:9d:66:f2:39:53:0e:04:
0b:99:72:f4:82:e7:d9:8e:ab:56:98:b4:02:95:a9:
b5:28:03:14:a1:2a:56:f7:8c:e6:64:25:a1:d9:2e:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:43:A4:07:26:AC:17:07:5D:39:60:5E:A3:D8:26:5F:96:9E:8C:B5
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/JEOkByasFwddOWBeo9gmX5aejLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.99.128.0/18
84.244.64.0/18
85.207.0.0/16
212.158.128.0/19
IPv6:
2a02:a40::/32
Signature Algorithm: sha256WithRSAEncryption
8f:e5:5f:ea:6f:6e:c0:1a:90:9d:16:6a:5c:b6:ca:f6:7e:1f:
7c:3d:71:78:20:93:0f:c5:1e:28:61:ac:a3:81:0e:5e:38:5a:
fe:70:bf:a6:0d:74:40:da:ca:77:ab:e1:1a:0d:db:09:ed:60:
52:0a:05:f4:94:10:69:fb:e4:ab:de:89:cd:39:01:87:ed:09:
66:47:92:40:bb:1b:bc:f9:8b:4a:e1:7f:ca:ed:51:1f:df:f6:
11:23:c2:8c:e2:5d:7a:4c:09:90:ab:f5:85:5a:0d:3a:bb:62:
78:25:19:97:d4:39:14:11:23:f7:fc:e1:da:21:a0:b9:f1:37:
12:a8:8b:9b:8c:57:ad:75:88:75:12:53:ca:e1:cf:f7:83:c6:
13:c7:a6:c6:76:57:38:b5:4d:20:ff:3b:45:4b:cd:76:32:8e:
52:45:fb:86:2b:72:4e:a4:99:39:b4:8b:11:43:65:de:37:49:
f1:89:c5:20:8b:57:fc:82:16:0d:9d:6a:dd:4e:7f:6e:33:b4:
50:e4:f1:d6:5f:20:b9:52:ee:f5:86:f9:c1:78:88:81:96:89:
70:be:d4:aa:75:9c:7a:15:ff:ef:d7:a9:91:1c:08:49:9a:0a:
c5:15:82:50:d5:23:c1:28:54:b8:78:09:fe:70:2e:98:5b:c4:
45:66:43:ff
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIECRgOoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZWY1MjUyY2NhYzNmNmRjMTQyNmI1NTNmMmMxYzcyMzNhY2M4OTRiMB4XDTIyMDEw
MTA5MDEzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjQ0M2E0MDcyNmFj
MTcwNzVkMzk2MDVlYTNkODI2NWY5NjllOGNiNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANmF1yx6t13fCSYd8bpNT9U8sXxCWav1WD9OdB2opmA2NmvL
1GILtEXzZ3+qw7dqvxgFVN/5GEvhbe7hQYE6btEulSYkDUCBaGvmMbgrVR8lIHGD
TnLEzKOQ5MX7GIc0ZVzV1CMRhJk+eJAacSnFQBIwr5t/NgE/EwqSfuXWjEnrAIhT
OU2szWNbaTtXTpDIGGQ+aHcXUy8GWnOY86VR1j/q/9ggSdsyUqSk43OjUa0cd7wV
PaIagxfpQXr5vRCWpIOoqbE9WfhrK+r+zc8juajOkog8m/XOyi6dZvI5Uw4EC5ly
9ILn2Y6rVpi0ApWptSgDFKEqVveM5mQlodkui/kCAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBQkQ6QHJqwXB105YF6j2CZflp6MtTAfBgNVHSMEGDAWgBS+9SUsysP23BQm
tVPywccjOsyJSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Z2VWxMTXJEOXR3VUpyVlQ4c0hISXpyTWlVcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWUvZTdmYzk4LTEyOGEtNDUzZC1iZGZiLTExZTVmNmQxMmVmMS8x
L0pFT2tCeWFzRndkZE9XQmVvOWdtWDVhZWpMVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUv
ZTdmYzk4LTEyOGEtNDUzZC1iZGZiLTExZTVmNmQxMmVmMS8xL3Z2VWxMTXJEOXR3
VUpyVlQ4c0hISXpyTWlVcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wHQQCAAEwFwMEBlJjgAMEBlT0QAMDAFXPAwQF1J6A
MA0EAgACMAcDBQAqAgpAMA0GCSqGSIb3DQEBCwUAA4IBAQCP5V/qb27AGpCdFmpc
tsr2fh98PXF4IJMPxR4oYayjgQ5eOFr+cL+mDXRA2sp3q+EaDdsJ7WBSCgX0lBBp
++Sr3onNOQGH7QlmR5JAuxu8+YtK4X/K7VEf3/YRI8KM4l16TAmQq/WFWg06u2J4
JRmX1DkUESP3/OHaIaC58TcSqIubjFetdYh1ElPK4c/3g8YTx6bGdlc4tU0g/ztF
S812Mo5SRfuGK3JOpJk5tIsRQ2XeN0nxicUgi1f8ghYNnWrdTn9uM7RQ5PHWXyC5
Uu71hvnBeIiBlolwvtSqdZx6Ff/v16mRHAhJmgrFFYJQ1SPBKFS4eAn+cC6YW8RF
ZkP/
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:23 2024 by rpki-client on console-ams.rpki-client.org