Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/1-JAGG150u7zw1I7kuGQE8fDi2uQ.roa
File: 1-JAGG150u7zw1I7kuGQE8fDi2uQ.roa (raw, json)
Hash identifier: Ajy5d7efjniG660rJio94B2LEpeQoE6Ory9mfeB6rhc=
Subject key identifier: F8:90:06:1B:5E:74:BB:BC:F0:D4:8E:E4:B8:64:04:F1:F0:E2:DA:E4
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: F60612
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/1-JAGG150u7zw1I7kuGQE8fDi2uQ.roa
Signing time: Fri 01 Jul 2022 11:36:26 +0000
ROA not before: Fri 01 Jul 2022 11:36:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 66.22.245.0/24 maxlen: 24
66.22.244.0/24 maxlen: 24
66.22.246.0/24 maxlen: 24
66.22.242.0/24 maxlen: 24
66.22.241.0/24 maxlen: 24
66.22.243.0/24 maxlen: 24
66.22.248.0/24 maxlen: 24
66.22.247.0/24 maxlen: 24
66.22.196.0/22 maxlen: 22
66.22.204.0/22 maxlen: 22
66.22.200.0/22 maxlen: 22
66.22.208.0/22 maxlen: 22
66.22.212.0/22 maxlen: 22
66.22.216.0/23 maxlen: 23
66.22.218.0/23 maxlen: 23
66.22.220.0/23 maxlen: 23
66.22.222.0/23 maxlen: 23
66.22.224.0/23 maxlen: 23
66.22.226.0/23 maxlen: 23
66.22.231.0/24 maxlen: 24
66.22.230.0/24 maxlen: 24
66.22.233.0/24 maxlen: 24
66.22.232.0/24 maxlen: 24
66.22.235.0/24 maxlen: 24
66.22.234.0/24 maxlen: 24
66.22.236.0/24 maxlen: 24
66.22.238.0/24 maxlen: 24
66.22.237.0/24 maxlen: 24
66.22.240.0/24 maxlen: 24
66.22.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16123410 (0xf60612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Jul 1 11:36:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f890061b5e74bbbcf0d48ee4b86404f1f0e2dae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:cb:72:48:f3:39:c6:be:24:8b:68:d2:4f:
3c:21:e1:94:bd:99:c9:27:6e:db:25:ce:38:87:f7:
cf:a1:8c:89:e9:02:cc:da:e6:f7:76:3b:28:62:df:
b8:ec:7c:56:1c:cf:1f:06:40:89:7c:c1:9e:23:fb:
b4:69:37:de:d5:38:95:c6:e8:f7:f8:f0:c7:f8:93:
49:90:fa:3a:ac:98:68:73:81:d9:d4:f1:09:65:7e:
a2:41:a4:ab:1c:7a:eb:9a:a8:7d:1d:ba:7d:4b:1e:
7a:16:2b:7d:70:a3:c7:66:0e:8f:9e:83:95:5a:0d:
0d:f4:79:f9:5b:18:83:e9:eb:53:29:6b:1b:bb:6b:
8f:0b:8a:20:ed:4e:d1:4e:b9:87:55:d4:2f:fe:5e:
cc:ed:5d:18:1b:f1:d1:7e:17:98:2f:c2:72:05:36:
25:84:55:5d:29:31:2f:5a:76:84:ba:44:56:b7:7d:
e6:72:f9:14:15:42:c7:7e:85:71:ea:da:a0:86:36:
6b:15:65:af:08:d7:0b:24:0c:8b:e9:ae:bc:45:91:
3a:48:58:f0:b1:92:8f:e0:cd:88:6d:06:38:63:42:
9a:87:07:21:b5:9a:6e:bd:82:a0:67:fa:1b:40:11:
34:d4:7b:8c:06:ad:3e:e9:35:c1:7b:33:f6:76:42:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:90:06:1B:5E:74:BB:BC:F0:D4:8E:E4:B8:64:04:F1:F0:E2:DA:E4
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/1-JAGG150u7zw1I7kuGQE8fDi2uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.196.0-66.22.227.255
66.22.230.0-66.22.248.255
Signature Algorithm: sha256WithRSAEncryption
24:65:0f:a4:2c:b1:0f:6b:96:6e:d6:29:11:44:5d:41:ea:78:
b3:1e:4e:60:4a:58:15:bb:50:47:f8:d6:c5:25:20:e2:b6:ca:
77:40:71:11:47:5a:e0:37:4b:f8:b7:46:e1:7e:b6:65:d6:f2:
d1:cd:f5:e6:72:4c:b2:5c:c8:51:63:c1:69:e9:79:ca:94:2a:
f7:32:31:f5:81:da:ff:cb:fd:11:45:52:f0:fb:59:79:c3:5b:
ee:7b:9e:36:94:67:5f:82:d2:76:89:f2:38:68:81:5f:89:2f:
c4:1a:6f:17:11:ee:da:72:e9:27:87:d9:2a:3c:3f:26:6a:ac:
57:c7:52:73:81:14:1f:46:14:8f:64:09:83:e5:43:31:f9:d2:
60:33:72:43:a3:b7:3e:57:be:6b:f6:dd:22:fb:c3:00:40:59:
1f:41:4b:03:52:08:6d:a0:9b:4d:7e:38:39:5c:59:93:16:92:
fe:e2:47:9d:67:8c:0c:50:37:c1:b7:04:bf:9d:7a:5f:13:ce:
ac:61:a9:25:02:a4:c8:63:59:a8:a7:f8:50:06:78:41:1d:8d:
57:80:35:95:61:6e:e1:c3:b3:4d:08:bd:50:53:1a:43:fc:6a:
bb:5a:7a:cf:80:9d:09:76:54:a9:51:0b:ee:db:90:d8:c1:88:
fa:64:cc:c4
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEAPYGEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
M2MxMDNkNjVhNTRkNmFmMWVmYmE2YWMzZTYzNzIyMDI4YWYyYmIxMB4XDTIyMDcw
MTExMzYyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjg5MDA2MWI1ZTc0
YmJiY2YwZDQ4ZWU0Yjg2NDA0ZjFmMGUyZGFlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJmXy3JI8znGviSLaNJPPCHhlL2ZySdu2yXOOIf3z6GMiekC
zNrm93Y7KGLfuOx8VhzPHwZAiXzBniP7tGk33tU4lcbo9/jwx/iTSZD6OqyYaHOB
2dTxCWV+okGkqxx665qofR26fUseehYrfXCjx2YOj56DlVoNDfR5+VsYg+nrUylr
G7trjwuKIO1O0U65h1XUL/5ezO1dGBvx0X4XmC/CcgU2JYRVXSkxL1p2hLpEVrd9
5nL5FBVCx36FceraoIY2axVlrwjXCyQMi+muvEWROkhY8LGSj+DNiG0GOGNCmocH
IbWabr2CoGf6G0ARNNR7jAatPuk1wXsz9nZCqC0CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBT4kAYbXnS7vPDUjuS4ZATx8OLa5DAfBgNVHSMEGDAWgBSDwQPWWlTWrx77
pqw+Y3IgKK8rsTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2c4RUQxbHBVMXE4ZS02YXNQbU55SUNpdks3RS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvMDgxYmQ0LTEyMTAtNDAyMS1hODY0LWI1MGNmNWYyYWEyMi8x
LzEtSkFHRzE1MHU3encxSTdrdUdRRThmRGkydVEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2
LzA4MWJkNC0xMjEwLTQwMjEtYTg2NC1iNTBjZjVmMmFhMjIvMS9nOEVEMWxwVTFx
OGUtNmFzUG1OeUlDaXZLN0UuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
NQYIKwYBBQUHAQcBAf8EJjAkMCIEAgABMBwwDAMEAkIWxAMEAkIW4DAMAwQBQhbm
AwQAQhb4MA0GCSqGSIb3DQEBCwUAA4IBAQAkZQ+kLLEPa5Zu1ikRRF1B6nizHk5g
SlgVu1BH+NbFJSDitsp3QHERR1rgN0v4t0bhfrZl1vLRzfXmckyyXMhRY8Fp6XnK
lCr3MjH1gdr/y/0RRVLw+1l5w1vue542lGdfgtJ2ifI4aIFfiS/EGm8XEe7acukn
h9kqPD8maqxXx1JzgRQfRhSPZAmD5UMx+dJgM3JDo7c+V75r9t0i+8MAQFkfQUsD
UghtoJtNfjg5XFmTFpL+4kedZ4wMUDfBtwS/nXpfE86sYaklAqTIY1mop/hQBnhB
HY1XgDWVYW7hw7NNCL1QUxpD/Gq7WnrPgJ0JdlSpUQvu25DYwYj6ZMzE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org