Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/jnEOdI62DiNaNAcUrQNpJhXEnLM.roa
File: jnEOdI62DiNaNAcUrQNpJhXEnLM.roa (raw, json)
Hash identifier: ssF0RTCIltxLaKCxy8LZETvEvvSgIf6ZYZOlGm96kls=
Subject key identifier: 8E:71:0E:74:8E:B6:0E:23:5A:34:07:14:AD:03:69:26:15:C4:9C:B3
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 0BC111BB
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/jnEOdI62DiNaNAcUrQNpJhXEnLM.roa
Signing time: Sat 01 Jan 2022 13:06:06 +0000
ROA not before: Sat 01 Jan 2022 13:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56818
IP address blocks: 91.227.254.0/24 maxlen: 24
192.162.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197202363 (0xbc111bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Jan 1 13:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e710e748eb60e235a340714ad03692615c49cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:9a:0d:36:c1:17:a5:3b:9f:19:b4:9f:68:
5f:c8:85:d5:8c:30:ad:ec:77:61:6f:dc:a8:38:85:
3a:6e:0a:ae:af:4c:b7:24:2c:b6:f8:94:f5:fe:34:
7a:05:41:af:94:c0:6b:0c:34:19:e2:d9:94:67:1e:
c6:f5:42:4e:32:cd:6c:1c:8c:14:50:ab:10:01:7d:
55:18:c3:22:6b:72:90:87:59:a9:69:5c:98:d8:f5:
cc:ea:bb:51:9d:97:26:19:eb:99:0f:a7:68:9e:ba:
38:7b:7c:49:60:36:15:db:8b:24:e4:1e:c6:c3:01:
06:f1:ec:58:9a:ea:c5:f6:96:f5:6a:14:3d:8e:d0:
2f:87:c0:bc:62:f2:bb:fe:80:a2:98:f7:4e:b1:c0:
21:15:36:cd:2f:66:45:13:49:ad:9e:2b:b2:58:b2:
80:af:47:f1:cf:5e:82:67:61:24:dc:eb:25:35:eb:
a4:ab:07:c4:0f:db:4f:21:04:fe:ee:87:bd:ad:f1:
a1:14:73:fb:77:8e:7c:76:39:b9:93:3e:65:20:7b:
c7:02:db:01:07:e8:16:42:bb:f9:ff:f8:a7:f4:8d:
c2:83:56:8e:43:9e:79:3c:f4:0b:96:a9:25:c0:22:
51:94:5d:46:0b:a2:da:ed:10:81:41:54:5f:03:c2:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:71:0E:74:8E:B6:0E:23:5A:34:07:14:AD:03:69:26:15:C4:9C:B3
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/jnEOdI62DiNaNAcUrQNpJhXEnLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.254.0/24
192.162.200.0/22
Signature Algorithm: sha256WithRSAEncryption
33:b1:e8:c7:59:00:8b:88:6e:b0:71:ea:fd:a3:da:da:76:55:
4f:61:7e:00:be:af:57:bf:2c:76:3f:16:dd:a8:cd:51:50:45:
91:12:96:2a:30:cd:6a:3a:aa:35:8a:9f:02:c4:ca:93:f9:43:
da:bb:ad:f6:7b:a2:3d:e1:5f:56:58:a9:21:5c:0c:0f:08:05:
4a:e4:1a:0e:35:56:c1:0a:7c:6e:3a:3b:be:3e:a0:1f:06:83:
72:ce:dd:35:74:0d:4f:9d:66:a9:02:c4:1b:77:ab:a7:69:77:
db:74:36:6d:12:5e:b3:e6:e5:23:4a:6a:19:ce:9e:03:30:c0:
56:8f:0d:7d:20:bb:d1:22:8f:a4:f8:7c:37:68:aa:88:d8:ce:
ae:c5:57:c7:e4:4d:0d:5c:14:39:ea:b6:47:9e:b3:93:a5:d4:
8f:a7:9b:22:d3:8e:fa:da:3b:ca:23:ec:19:45:08:21:2d:a7:
81:08:0d:9a:de:fd:0c:34:a2:27:18:cd:63:00:85:c9:75:35:
b4:52:b6:5e:7c:ad:af:de:25:9d:14:1b:7a:a2:b3:7a:94:f8:
e7:97:88:d0:54:e7:db:c2:b8:84:f1:17:30:d7:43:ef:11:c0:
14:bc:0a:1b:69:18:70:8f:c8:43:7b:37:50:da:dc:3b:5a:92:
6e:cb:20:fb
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEC8ERuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YmU3MTlmOTg1ZGYzOTRhNDJhYzExZTVjYmM4ZjgyYjRiN2FlYzVkMB4XDTIyMDEw
MTEzMDYwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGU3MTBlNzQ4ZWI2
MGUyMzVhMzQwNzE0YWQwMzY5MjYxNWM0OWNiMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALGXmg02wRelO58ZtJ9oX8iF1Ywwrex3YW/cqDiFOm4Krq9M
tyQstviU9f40egVBr5TAaww0GeLZlGcexvVCTjLNbByMFFCrEAF9VRjDImtykIdZ
qWlcmNj1zOq7UZ2XJhnrmQ+naJ66OHt8SWA2FduLJOQexsMBBvHsWJrqxfaW9WoU
PY7QL4fAvGLyu/6Aopj3TrHAIRU2zS9mRRNJrZ4rsliygK9H8c9egmdhJNzrJTXr
pKsHxA/bTyEE/u6Hva3xoRRz+3eOfHY5uZM+ZSB7xwLbAQfoFkK7+f/4p/SNwoNW
jkOeeTz0C5apJcAiUZRdRgui2u0QgUFUXwPCtQkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSOcQ50jrYOI1o0BxStA2kmFcScszAfBgNVHSMEGDAWgBRb5xn5hd85SkKs
EeXLyPgrS3rsXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ctY1otWVhmT1VwQ3JCSGx5OGo0SzB0NjdGMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvOWMwMjc4LTU0MmMtNDQ2Ny1hYzdjLTI0YWVlMmIwZTgyYi8x
L2puRU9kSTYyRGlOYU5BY1VyUU5wSmhYRW5MTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
OWMwMjc4LTU0MmMtNDQ2Ny1hYzdjLTI0YWVlMmIwZTgyYi8xL1ctY1otWVhmT1Vw
Q3JCSGx5OGo0SzB0NjdGMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvj/gMEAsCiyDANBgkqhkiG9w0B
AQsFAAOCAQEAM7Hox1kAi4husHHq/aPa2nZVT2F+AL6vV78sdj8W3ajNUVBFkRKW
KjDNajqqNYqfAsTKk/lD2rut9nuiPeFfVlipIVwMDwgFSuQaDjVWwQp8bjo7vj6g
HwaDcs7dNXQNT51mqQLEG3erp2l323Q2bRJes+blI0pqGc6eAzDAVo8NfSC70SKP
pPh8N2iqiNjOrsVXx+RNDVwUOeq2R56zk6XUj6ebItOO+to7yiPsGUUIIS2ngQgN
mt79DDSiJxjNYwCFyXU1tFK2Xnytr94lnRQbeqKzepT455eI0FTn28K4hPEXMNdD
7xHAFLwKG2kYcI/IQ3s3UNrcO1qSbssg+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:12 2024 by rpki-client on console-fra.rpki-client.org