Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/jdfUwXcKz-RjOTbvepCRFeAzMK0.roa
File: jdfUwXcKz-RjOTbvepCRFeAzMK0.roa (raw, json)
Hash identifier: e8ekltmjD0bnBlr3dfVkR5i1lo4rjeWzPOPuhgYKqIY=
Subject key identifier: 8D:D7:D4:C1:77:0A:CF:E4:63:39:36:EF:7A:90:91:15:E0:33:30:AD
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 0C666E94
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/jdfUwXcKz-RjOTbvepCRFeAzMK0.roa
Signing time: Sat 01 Jan 2022 07:57:54 +0000
ROA not before: Sat 01 Jan 2022 07:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204499
IP address blocks: 185.219.112.0/24 maxlen: 24
185.219.115.0/24 maxlen: 24
185.219.113.0/24 maxlen: 24
185.219.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208039572 (0xc666e94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Jan 1 07:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dd7d4c1770acfe4633936ef7a909115e03330ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b3:b0:99:93:41:6c:2a:af:bb:e2:91:91:d9:
23:1c:49:a1:2b:a4:37:01:c5:f0:ac:68:dd:12:76:
69:84:4b:67:53:06:05:69:90:56:25:c0:77:84:83:
5f:fd:0a:d8:3c:8c:be:51:56:f1:e4:91:03:bb:59:
94:27:41:fa:9b:fb:ec:0b:34:0c:98:6f:61:61:0e:
e1:bd:29:a6:65:94:b0:2f:43:2f:c1:7d:4a:ad:15:
ca:08:13:a8:6d:1f:ac:8a:0b:b5:32:a9:52:74:ac:
90:8f:3e:45:7b:6c:51:d3:33:3c:8e:76:1c:7d:a3:
78:23:3a:5c:1b:07:d3:f9:5c:b3:93:f6:5b:bd:99:
03:67:34:f3:7b:09:25:17:33:0b:00:35:4f:d1:da:
ca:d8:ed:5a:9b:01:d7:03:c2:18:e8:f4:90:67:80:
f6:39:c5:4f:5c:4d:19:3d:de:03:53:ed:73:33:35:
bd:fc:f8:8c:6f:0e:ed:93:03:ec:65:46:ca:68:d6:
80:f0:e1:1c:54:fe:3c:1a:13:ad:3d:98:75:c4:d8:
db:66:ec:6a:41:90:72:a6:9f:2c:ec:65:9f:13:b5:
42:c6:ec:81:4b:d7:25:a2:b0:f2:33:17:50:8c:5c:
e0:0e:67:63:c8:99:2d:c5:42:4b:4f:8d:38:5c:c8:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D7:D4:C1:77:0A:CF:E4:63:39:36:EF:7A:90:91:15:E0:33:30:AD
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/jdfUwXcKz-RjOTbvepCRFeAzMK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.112.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:4e:40:c0:20:80:32:f1:59:d1:5d:97:0d:c4:f1:ba:03:06:
38:48:94:ac:36:57:b2:80:66:a3:4c:4c:53:2d:25:a2:c0:df:
94:c4:0b:c9:3f:d6:cb:2b:15:31:66:e9:e4:6f:4f:4b:6e:62:
33:9d:2f:90:c6:c2:83:fc:ca:df:22:c6:04:33:18:98:72:ad:
dd:93:d7:ff:fc:15:c8:0b:d0:86:d4:1b:22:42:d5:98:5a:47:
69:d4:44:06:93:3e:4e:81:1b:0b:7e:d0:99:e1:31:e7:4f:e3:
8f:a7:ef:7e:91:53:26:02:13:71:45:48:b9:7f:c4:e2:dc:b6:
70:91:38:83:97:e6:22:7d:07:8b:5f:fe:50:c3:21:2c:49:8c:
f8:b0:8e:c1:7d:9c:82:7f:3a:4a:43:8d:b6:0b:54:86:d3:29:
d4:53:c1:26:bb:d3:6d:f1:67:cf:4d:8b:68:8a:25:4e:21:81:
5f:77:21:e0:f5:21:59:03:15:19:01:00:2e:23:2a:93:47:21:
07:a1:f9:a3:89:93:0c:19:cc:a7:c1:03:c3:75:08:ce:5a:6d:
14:37:10:b1:f4:09:5d:c3:c1:ef:18:59:fb:58:e1:b4:d0:f7:
e4:2f:bc:0c:68:d2:07:10:de:0a:a5:78:e8:bc:c7:94:43:fc:
85:1b:21:d4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDGZulDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Y2ViOTk3NDg5OTlhYjhlMDIxOGY3YzhkYmRjYzU2OThkNjY5ZDM5MB4XDTIyMDEw
MTA3NTc1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGRkN2Q0YzE3NzBh
Y2ZlNDYzMzkzNmVmN2E5MDkxMTVlMDMzMzBhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPKzsJmTQWwqr7vikZHZIxxJoSukNwHF8Kxo3RJ2aYRLZ1MG
BWmQViXAd4SDX/0K2DyMvlFW8eSRA7tZlCdB+pv77As0DJhvYWEO4b0ppmWUsC9D
L8F9Sq0VyggTqG0frIoLtTKpUnSskI8+RXtsUdMzPI52HH2jeCM6XBsH0/lcs5P2
W72ZA2c083sJJRczCwA1T9HaytjtWpsB1wPCGOj0kGeA9jnFT1xNGT3eA1PtczM1
vfz4jG8O7ZMD7GVGymjWgPDhHFT+PBoTrT2YdcTY22bsakGQcqafLOxlnxO1Qsbs
gUvXJaKw8jMXUIxc4A5nY8iZLcVCS0+NOFzIRacCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSN19TBdwrP5GM5Nu96kJEV4DMwrTAfBgNVHSMEGDAWgBSs65l0iZmrjgIY
98jb3MVpjWadOTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JPdVpkSW1acTQ0Q0dQZkkyOXpGYVkxbW5Uay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2MvZjYwMTM0LTZkNmQtNGRjMS05MmE5LTY1OWFlODIxOTkxYy8x
L2pkZlV3WGNLei1Sak9UYnZlcENSRmVBek1LMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Mv
ZjYwMTM0LTZkNmQtNGRjMS05MmE5LTY1OWFlODIxOTkxYy8xL3JPdVpkSW1acTQ0
Q0dQZkkyOXpGYVkxbW5Uay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnbcDANBgkqhkiG9w0BAQsFAAOC
AQEAe05AwCCAMvFZ0V2XDcTxugMGOEiUrDZXsoBmo0xMUy0losDflMQLyT/WyysV
MWbp5G9PS25iM50vkMbCg/zK3yLGBDMYmHKt3ZPX//wVyAvQhtQbIkLVmFpHadRE
BpM+ToEbC37QmeEx50/jj6fvfpFTJgITcUVIuX/E4ty2cJE4g5fmIn0Hi1/+UMMh
LEmM+LCOwX2cgn86SkONtgtUhtMp1FPBJrvTbfFnz02LaIolTiGBX3ch4PUhWQMV
GQEALiMqk0chB6H5o4mTDBnMp8EDw3UIzlptFDcQsfQJXcPB7xhZ+1jhtND35C+8
DGjSBxDeCqV46LzHlEP8hRsh1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:17 2024 by rpki-client on console-ams.rpki-client.org