Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/iy_XgDPSDR5luNLl8tBbaaHZOfA.roa
File: iy_XgDPSDR5luNLl8tBbaaHZOfA.roa (raw, json)
Hash identifier: wBi4sXP2+vDdgtU+fcj7uvu3RDZ4AoQU3n8NOk5ol3A=
Subject key identifier: 8B:2F:D7:80:33:D2:0D:1E:65:B8:D2:E5:F2:D0:5B:69:A1:D9:39:F0
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 0B1CF9A1
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/iy_XgDPSDR5luNLl8tBbaaHZOfA.roa
Signing time: Sat 01 Jan 2022 10:04:21 +0000
ROA not before: Sat 01 Jan 2022 10:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206356
IP address blocks: 194.48.228.0/22 maxlen: 24
2a0c:efc0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186448289 (0xb1cf9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Jan 1 10:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b2fd78033d20d1e65b8d2e5f2d05b69a1d939f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:9d:18:50:45:0f:fb:5d:7c:c6:df:fd:e7:
48:45:50:12:68:7a:5e:de:b5:66:60:dd:6f:0c:c1:
5b:e6:0e:b4:19:47:e5:c1:2a:8b:da:98:92:0e:60:
51:9d:5b:9e:f9:3c:6e:f7:89:3f:e1:c2:22:28:f1:
d3:e9:52:f2:bc:b3:de:84:11:d4:7c:ed:fc:90:e7:
09:e7:66:46:73:02:85:cb:64:6e:6d:78:74:73:a4:
b0:15:7d:6f:f5:ae:c2:46:e3:fa:30:e1:9b:ee:54:
7c:2d:52:2f:83:dc:e3:aa:f2:ab:24:4b:9f:7a:d3:
ba:4a:5c:07:bb:a8:d8:d1:f1:d7:60:6e:b4:8d:1f:
03:0f:c0:08:55:ab:81:09:1e:3a:9f:6e:f2:4f:98:
cb:c7:5a:a4:99:1d:88:fd:93:90:a3:8b:30:5b:66:
34:c6:86:aa:0d:47:4d:49:aa:6d:fd:b6:df:c7:38:
5d:51:11:9d:0e:10:5b:c0:8c:a2:69:87:47:f4:42:
64:d5:12:96:8e:ff:28:26:4e:f1:66:3f:df:04:5b:
6f:10:86:36:a8:7d:50:f0:f4:51:a6:a0:1e:45:d7:
75:c7:3a:5f:71:41:25:9e:a8:60:7b:d5:2a:12:35:
72:f4:bc:0f:17:84:82:20:62:f9:e7:f9:c5:72:cc:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2F:D7:80:33:D2:0D:1E:65:B8:D2:E5:F2:D0:5B:69:A1:D9:39:F0
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/iy_XgDPSDR5luNLl8tBbaaHZOfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.228.0/22
IPv6:
2a0c:efc0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:59:96:21:e8:b6:29:02:5e:b3:3b:d1:4d:88:e2:37:b9:61:
4a:9f:5b:a7:ad:bb:15:de:31:be:be:c2:bb:e3:55:70:2a:10:
6a:1c:2c:89:5e:12:a4:92:93:c0:e1:94:aa:b2:f9:0c:85:5c:
12:b5:f2:b1:7e:d8:70:8c:f6:0d:03:85:07:aa:76:14:3a:f4:
b8:ea:ea:73:9b:73:9f:df:e2:90:89:03:b1:ac:63:ca:e3:ee:
ed:00:23:ad:dc:ef:b1:e8:99:88:3f:bc:73:9c:0d:bf:90:fe:
7e:ea:67:9c:e8:cf:c9:6e:19:65:25:e7:8d:1f:21:c1:ed:ac:
57:2b:53:bc:34:27:a7:a6:ba:d1:97:3d:b2:61:0b:98:18:65:
e3:05:60:4f:86:f0:0c:a1:a5:3c:68:08:f7:cc:5f:12:bd:0f:
de:fb:65:29:5f:27:52:5c:d8:9d:ac:22:27:be:d0:84:14:74:
fd:b5:27:39:a2:ec:2c:68:26:8d:63:42:11:de:92:93:66:9d:
48:8a:38:20:9c:01:a6:8a:3f:80:15:a6:70:a3:24:0d:69:cb:
d9:b0:75:24:63:af:8f:70:f0:af:b5:83:75:a7:2c:26:a9:d9:
3a:de:2d:15:81:2a:37:47:bc:0e:4c:a8:e8:1f:ee:fc:31:eb:
f5:19:32:fc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECxz5oTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
Y2Q1MjQzOWNhYzI3MTliNjRlODViMjZmZjBlYTg0NjhkNTc5NjBlMB4XDTIyMDEw
MTEwMDQyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGIyZmQ3ODAzM2Qy
MGQxZTY1YjhkMmU1ZjJkMDViNjlhMWQ5MzlmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALV9nRhQRQ/7XXzG3/3nSEVQEmh6Xt61ZmDdbwzBW+YOtBlH
5cEqi9qYkg5gUZ1bnvk8bveJP+HCIijx0+lS8ryz3oQR1Hzt/JDnCedmRnMChctk
bm14dHOksBV9b/Wuwkbj+jDhm+5UfC1SL4Pc46ryqyRLn3rTukpcB7uo2NHx12Bu
tI0fAw/ACFWrgQkeOp9u8k+Yy8dapJkdiP2TkKOLMFtmNMaGqg1HTUmqbf2238c4
XVERnQ4QW8CMommHR/RCZNUSlo7/KCZO8WY/3wRbbxCGNqh9UPD0UaagHkXXdcc6
X3FBJZ6oYHvVKhI1cvS8DxeEgiBi+ef5xXLMPvcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSLL9eAM9INHmW40uXy0Ftpodk58DAfBgNVHSMEGDAWgBSM1SQ5ysJxm2To
Wyb/DqhGjVeWDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pOVWtPY3JDY1p0azZGc21fdzZvUm8xWGxnNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvY2QzNzExLTcwODQtNGIxNS1iYzI1LTNlNGEwMjZkZjAwMC8x
L2l5X1hnRFBTRFI1bHVOTGw4dEJiYWFIWk9mQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
Y2QzNzExLTcwODQtNGIxNS1iYzI1LTNlNGEwMjZkZjAwMC8xL2pOVWtPY3JDY1p0
azZGc21fdzZvUm8xWGxnNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsIw5DANBAIAAjAHAwUDKgzvwDAN
BgkqhkiG9w0BAQsFAAOCAQEAjlmWIei2KQJeszvRTYjiN7lhSp9bp627Fd4xvr7C
u+NVcCoQahwsiV4SpJKTwOGUqrL5DIVcErXysX7YcIz2DQOFB6p2FDr0uOrqc5tz
n9/ikIkDsaxjyuPu7QAjrdzvseiZiD+8c5wNv5D+fupnnOjPyW4ZZSXnjR8hwe2s
VytTvDQnp6a60Zc9smELmBhl4wVgT4bwDKGlPGgI98xfEr0P3vtlKV8nUlzYnawi
J77QhBR0/bUnOaLsLGgmjWNCEd6Sk2adSIo4IJwBpoo/gBWmcKMkDWnL2bB1JGOv
j3Dwr7WDdacsJqnZOt4tFYEqN0e8Dkyo6B/u/DHr9Rky/A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:01 2024 by rpki-client on console-fra.rpki-client.org