Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/JBKqrxAWHE1xHiJXQmcESjvfs8I.roa
File: JBKqrxAWHE1xHiJXQmcESjvfs8I.roa (raw, json)
Hash identifier: CkF/qKb4ZjXSbcWIh5ULNXXlUV/6BIc6SBu33yMMA3g=
Subject key identifier: 24:12:AA:AF:10:16:1C:4D:71:1E:22:57:42:67:04:4A:3B:DF:B3:C2
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 09A36B90
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/JBKqrxAWHE1xHiJXQmcESjvfs8I.roa
Signing time: Sat 01 Jan 2022 05:04:15 +0000
ROA not before: Sat 01 Jan 2022 05:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206430
IP address blocks: 89.45.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161704848 (0x9a36b90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2412aaaf10161c4d711e22574267044a3bdfb3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:55:cb:b6:15:de:e4:df:3a:05:49:e9:e5:9e:
b2:a3:25:e9:4d:fb:db:1b:fd:32:a4:06:8b:b1:3a:
da:db:cd:70:8e:30:f2:39:7a:6e:70:2f:fd:36:f7:
c3:6b:7a:8f:e4:12:97:cd:57:3b:ef:c0:59:76:45:
80:cc:0d:8d:6a:64:27:0c:c1:53:0d:c4:17:a5:74:
db:b2:98:55:d7:6b:a8:da:03:d3:7e:a7:97:c1:59:
89:6d:9b:df:31:c8:bf:f5:f0:60:4e:5a:fc:c0:95:
78:7e:53:59:32:b1:f8:d9:6b:45:6f:66:da:35:41:
3c:da:3b:b4:7d:dc:be:09:52:12:57:69:ba:08:03:
25:fc:95:3f:c3:cb:b4:5c:75:e0:98:e9:3b:81:2d:
67:7c:dc:94:58:30:a1:a3:00:f0:0d:55:73:73:ac:
4f:df:79:68:b9:ed:57:24:0a:b1:6b:ae:8e:f7:4a:
bd:ee:fb:39:10:6a:89:a4:59:56:09:c4:4d:d2:4f:
46:c5:f6:79:04:61:c6:6b:44:ee:30:c5:23:1b:c2:
e6:5f:25:36:cd:e4:f3:a4:ff:c2:f9:0b:e0:ef:bc:
3f:20:db:18:18:24:37:cf:d2:98:b5:f9:15:ab:0f:
1a:31:10:72:a7:66:3f:a9:65:ba:d9:d0:c6:37:f7:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:12:AA:AF:10:16:1C:4D:71:1E:22:57:42:67:04:4A:3B:DF:B3:C2
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/JBKqrxAWHE1xHiJXQmcESjvfs8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.244.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6a:19:75:57:63:0e:a2:74:cc:08:c9:d4:d5:bf:fd:8a:b2:
89:20:b4:6e:88:dc:de:7a:7e:de:34:62:ee:64:d6:3d:c2:73:
e3:34:de:fe:9c:e3:08:73:92:4c:82:69:a9:7e:dc:83:3e:f8:
51:0f:3a:87:b9:ef:80:ff:d3:99:c2:96:32:71:a4:9d:97:b4:
91:7f:23:a1:f5:d5:63:57:27:1d:45:ac:db:42:6c:10:bf:bb:
2e:b5:e9:d9:35:d5:65:60:48:a0:e7:bf:9e:d6:52:c8:c1:13:
b1:83:1c:7c:64:30:53:5e:9f:3b:09:a6:d0:84:14:b5:93:a5:
41:67:16:23:5f:d2:72:25:ef:6a:9d:8e:19:ab:f8:f3:61:82:
f3:8d:a7:90:89:ef:44:9b:5e:ab:11:f1:a7:8c:3d:26:75:29:
a9:27:e7:50:be:fd:e2:17:9a:18:e4:b2:5c:60:6b:4b:92:fd:
00:57:a1:7d:5a:04:66:69:db:c4:45:7d:72:a3:7d:3c:76:28:
83:5d:51:f5:5a:fe:20:5f:54:03:27:84:6a:94:22:d2:d9:0d:
9d:08:3b:f7:84:b0:3f:bf:8b:c8:ea:d9:d7:95:cf:4d:d4:54:
06:a0:f1:0e:a6:71:65:f0:d3:55:be:af:d5:e7:b6:6c:6c:0e:
9a:0e:f8:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECaNrkDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YWFmMTdiMDAxNWRiYjdjZDk5MmYyNmNkZmYwMWM0ZTI2MjBiNzNlMB4XDTIyMDEw
MTA1MDQxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjQxMmFhYWYxMDE2
MWM0ZDcxMWUyMjU3NDI2NzA0NGEzYmRmYjNjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANpVy7YV3uTfOgVJ6eWesqMl6U372xv9MqQGi7E62tvNcI4w
8jl6bnAv/Tb3w2t6j+QSl81XO+/AWXZFgMwNjWpkJwzBUw3EF6V027KYVddrqNoD
036nl8FZiW2b3zHIv/XwYE5a/MCVeH5TWTKx+NlrRW9m2jVBPNo7tH3cvglSEldp
uggDJfyVP8PLtFx14JjpO4EtZ3zclFgwoaMA8A1Vc3OsT995aLntVyQKsWuujvdK
ve77ORBqiaRZVgnETdJPRsX2eQRhxmtE7jDFIxvC5l8lNs3k86T/wvkL4O+8PyDb
GBgkN8/SmLX5FasPGjEQcqdmP6llutnQxjf3UVECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQkEqqvEBYcTXEeIldCZwRKO9+zwjAfBgNVHSMEGDAWgBTarxewAV27fNmS
8mzf8BxOJiC3PjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJxOFhzQUZkdTN6Wmt2SnMzX0FjVGlZZ3R6NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDUvYzg5NzNjLTNjZmEtNDYwNC04MTEwLWNmMDZkMTk4M2JhMS8x
L0pCS3FyeEFXSEUxeEhpSlhRbWNFU2p2ZnM4SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUv
Yzg5NzNjLTNjZmEtNDYwNC04MTEwLWNmMDZkMTk4M2JhMS8xLzJxOFhzQUZkdTN6
Wmt2SnMzX0FjVGlZZ3R6NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFkt9DANBgkqhkiG9w0BAQsFAAOC
AQEAa2oZdVdjDqJ0zAjJ1NW//YqyiSC0bojc3np+3jRi7mTWPcJz4zTe/pzjCHOS
TIJpqX7cgz74UQ86h7nvgP/TmcKWMnGknZe0kX8jofXVY1cnHUWs20JsEL+7LrXp
2TXVZWBIoOe/ntZSyMETsYMcfGQwU16fOwmm0IQUtZOlQWcWI1/SciXvap2OGav4
82GC842nkInvRJteqxHxp4w9JnUpqSfnUL794heaGOSyXGBrS5L9AFehfVoEZmnb
xEV9cqN9PHYog11R9Vr+IF9UAyeEapQi0tkNnQg794SwP7+LyOrZ15XPTdRUBqDx
DqZxZfDTVb6v1ee2bGwOmg74OQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org