Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jk6ZWWQhDIB5xC4GLTtESd1Efew.roa
File: jk6ZWWQhDIB5xC4GLTtESd1Efew.roa (raw, json)
Hash identifier: a4SBijOvMGk4X6t96SO/f0P9svMPyvgEhh9NVjE3Rxo=
Subject key identifier: 8E:4E:99:59:64:21:0C:80:79:C4:2E:06:2D:3B:44:49:DD:44:7D:EC
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 0AABD2F3
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jk6ZWWQhDIB5xC4GLTtESd1Efew.roa
Signing time: Thu 17 Mar 2022 20:36:03 +0000
ROA not before: Thu 17 Mar 2022 20:36:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61135
IP address blocks: 213.226.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179032819 (0xaabd2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Mar 17 20:36:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e4e995964210c8079c42e062d3b4449dd447dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:5f:5c:87:1b:c7:47:c3:92:12:5c:bf:c6:
92:8a:81:59:da:70:4c:7d:d3:68:50:87:da:96:77:
94:b4:54:f3:36:fc:81:6e:de:bd:15:66:9e:34:f6:
0a:a1:60:52:88:49:ae:69:91:f0:04:1a:a0:f5:32:
c5:b1:63:8b:ed:1e:65:5f:a1:ac:3d:29:64:3d:fe:
72:be:1c:7d:a7:10:99:a9:e7:4d:8c:c1:8c:a4:25:
e0:76:fe:4f:4e:e5:5d:0c:2d:6b:be:11:e8:38:1f:
d5:60:ed:54:8c:0c:f8:80:e0:25:aa:c2:88:3a:26:
f0:e9:a6:7f:0c:bf:4b:d9:5c:a2:60:a3:c5:e9:d8:
f2:f5:ea:bc:12:a8:69:8f:74:98:23:28:26:71:1f:
57:31:40:6a:1d:41:19:75:17:56:d1:0a:40:ff:86:
ac:ef:10:30:bd:77:06:0c:30:01:dc:f8:d5:16:f3:
41:70:0b:65:a3:8a:83:47:1e:39:f3:59:28:3d:9d:
51:89:69:77:88:f9:46:16:21:1a:cb:92:f5:f5:e3:
1f:f6:41:d5:fe:56:65:31:78:8b:01:9a:1c:77:de:
3c:01:22:26:35:9b:36:3c:77:4f:08:42:d8:3c:44:
9c:aa:bc:c0:fe:5c:80:ea:73:9e:03:68:a5:56:b5:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4E:99:59:64:21:0C:80:79:C4:2E:06:2D:3B:44:49:DD:44:7D:EC
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jk6ZWWQhDIB5xC4GLTtESd1Efew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.118.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f3:a9:eb:4a:dc:4c:c7:7b:1c:0a:77:fe:3a:82:ba:78:78:
b2:33:6b:eb:5c:e7:8d:d6:6b:7c:64:f4:cd:87:7e:1c:36:80:
d6:6b:36:74:18:1b:3c:ae:a5:d2:9d:50:23:55:72:41:ec:76:
07:89:35:e5:23:7b:0f:a9:72:35:ce:ac:7b:8d:32:b1:74:33:
11:b5:54:ad:76:4c:75:82:82:ec:19:fc:4c:7d:72:2a:c9:ec:
03:35:83:08:78:ea:c2:dc:ac:8f:91:fb:56:46:76:44:bf:e0:
e5:a8:1e:2b:5d:a4:0a:aa:89:79:b9:78:44:e2:07:4a:94:08:
35:17:4b:49:da:87:89:ad:1a:84:bd:54:1d:e0:b6:26:e7:f1:
33:ef:1f:d9:7d:74:9b:34:fb:58:be:e9:80:d5:71:d3:ff:c0:
87:07:1b:bf:0f:78:31:02:7b:d7:60:d3:6f:e3:57:14:ef:5b:
ce:bc:79:83:b0:02:d6:09:5e:36:0c:57:70:58:65:22:12:24:
42:a4:3f:d9:38:ce:63:5d:42:e1:fb:2a:fa:aa:7a:5e:9a:5b:
10:6f:c9:20:68:43:be:2f:6d:6a:e3:8f:df:da:16:91:09:ea:
f4:c3:d6:9e:00:ca:b2:e1:be:5d:99:c1:68:ce:f7:51:2e:f9:
bb:3d:d3:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECqvS8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZGIzNDc3NGIwMTk3OTI4NGZkOWU3NTRmZWE2OGZhM2M2MTc4M2QwMB4XDTIyMDMx
NzIwMzYwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGU0ZTk5NTk2NDIx
MGM4MDc5YzQyZTA2MmQzYjQ0NDlkZDQ0N2RlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL7aX1yHG8dHw5ISXL/GkoqBWdpwTH3TaFCH2pZ3lLRU8zb8
gW7evRVmnjT2CqFgUohJrmmR8AQaoPUyxbFji+0eZV+hrD0pZD3+cr4cfacQmann
TYzBjKQl4Hb+T07lXQwta74R6Dgf1WDtVIwM+IDgJarCiDom8Ommfwy/S9lcomCj
xenY8vXqvBKoaY90mCMoJnEfVzFAah1BGXUXVtEKQP+GrO8QML13BgwwAdz41Rbz
QXALZaOKg0ceOfNZKD2dUYlpd4j5RhYhGsuS9fXjH/ZB1f5WZTF4iwGaHHfePAEi
JjWbNjx3TwhC2DxEnKq8wP5cgOpzngNopVa1N68CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSOTplZZCEMgHnELgYtO0RJ3UR97DAfBgNVHSMEGDAWgBSNs0d0sBl5KE/Z
51T+po+jxheD0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2piTkhkTEFaZVNoUDJlZFVfcWFQbzhZWGc5QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzcvNzBhOGYxLWQ4ZWItNDJiNS1iZGRiLTYyNjU1MjFmNmRmNy8x
L2prNlpXV1FoRElCNXhDNEdMVHRFU2QxRWZldy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcv
NzBhOGYxLWQ4ZWItNDJiNS1iZGRiLTYyNjU1MjFmNmRmNy8xL2piTkhkTEFaZVNo
UDJlZFVfcWFQbzhZWGc5QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXidjANBgkqhkiG9w0BAQsFAAOC
AQEAYvOp60rcTMd7HAp3/jqCunh4sjNr61znjdZrfGT0zYd+HDaA1ms2dBgbPK6l
0p1QI1VyQex2B4k15SN7D6lyNc6se40ysXQzEbVUrXZMdYKC7Bn8TH1yKsnsAzWD
CHjqwtysj5H7VkZ2RL/g5ageK12kCqqJebl4ROIHSpQINRdLSdqHia0ahL1UHeC2
JufxM+8f2X10mzT7WL7pgNVx0//Ahwcbvw94MQJ712DTb+NXFO9bzrx5g7AC1gle
NgxXcFhlIhIkQqQ/2TjOY11C4fsq+qp6XppbEG/JIGhDvi9tauOP39oWkQnq9MPW
ngDKsuG+XZnBaM73US75uz3TJQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-fra.rpki-client.org