Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KjYYn5Mcr-hkXmmCJYSNLk08xzI.roa
File: KjYYn5Mcr-hkXmmCJYSNLk08xzI.roa (raw, json)
Hash identifier: AlqUpfWPc1MXBg6BoemoOK83RC/99NFa2z3RUn8pDiE=
Subject key identifier: 2A:36:18:9F:93:1C:AF:E8:64:5E:69:82:25:84:8D:2E:4D:3C:C7:32
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0AD2214B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KjYYn5Mcr-hkXmmCJYSNLk08xzI.roa
Signing time: Sat 01 Jan 2022 03:02:41 +0000
ROA not before: Sat 01 Jan 2022 03:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212598
IP address blocks: 185.250.210.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181543243 (0xad2214b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a36189f931cafe8645e698225848d2e4d3cc732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:c1:28:8e:e5:0d:cf:f8:3c:9c:15:8b:c8:
fc:e4:8a:61:0f:55:04:a6:8a:1c:67:2f:c2:41:ab:
14:ef:d2:80:20:d7:6d:a5:55:d8:f9:91:cb:8d:f8:
b6:0e:0b:51:6c:c6:c1:52:68:1b:46:aa:29:32:a2:
fb:2f:47:24:3e:9a:de:fb:a0:fe:fd:38:55:f3:80:
33:ed:be:70:4c:91:a1:5e:52:86:77:ff:83:b6:40:
44:78:79:4a:b7:33:5c:47:fd:b6:f2:00:4d:94:62:
01:da:d1:f2:bf:6d:89:ca:4b:79:d3:d7:a6:c8:0b:
c7:b7:d7:e7:70:63:72:9c:fe:7d:8f:0c:9f:78:f3:
38:5d:43:71:ba:f8:23:e5:17:08:2c:1f:5e:29:34:
21:09:bd:9c:9f:a5:13:47:2a:fc:f7:9f:ec:d6:82:
4c:21:a3:8f:de:e0:ea:c6:00:14:73:1a:3f:8f:85:
53:5d:eb:1a:6b:4b:9c:a6:c2:97:43:bd:fb:54:a9:
19:57:0a:e9:ed:6a:d3:89:e5:85:c8:6c:2c:62:2f:
35:a8:5b:e8:14:e0:fc:29:44:97:40:2e:7b:52:e3:
bb:23:5a:0f:5c:b8:72:aa:01:11:0c:02:10:fe:3c:
f1:e1:ff:a9:a6:5f:9e:55:7a:6c:07:fd:09:f1:5a:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:36:18:9F:93:1C:AF:E8:64:5E:69:82:25:84:8D:2E:4D:3C:C7:32
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KjYYn5Mcr-hkXmmCJYSNLk08xzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.210.0/24
185.254.236.0/24
185.254.239.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:06:e3:99:eb:56:1e:bb:ff:0c:3b:88:75:37:24:b7:28:4c:
29:c7:34:09:76:cf:8d:47:1d:19:74:44:fc:97:5b:e2:95:ca:
7b:3c:e5:4f:23:d2:7e:33:a3:26:29:65:f1:58:81:4a:fb:34:
3c:d3:7e:bf:f1:2f:94:62:32:34:2d:ee:71:63:fd:b2:68:d6:
16:66:ba:99:59:6c:a9:7a:76:7c:d2:32:fe:1c:73:fc:8b:79:
77:87:48:c2:ef:30:f0:d6:89:71:0a:a4:d3:8c:0b:af:7d:16:
d9:49:51:90:dd:89:92:29:ce:58:f1:8f:2f:2a:75:e6:63:b8:
d6:0f:7f:e2:ed:7b:93:a6:53:80:58:ad:a4:be:51:8b:54:f0:
b3:d6:44:12:b8:98:0b:ef:ad:58:d9:35:c1:ca:1a:88:11:1c:
95:9f:58:e2:55:6a:f5:c5:48:04:7c:3a:46:62:a5:b6:d6:73:
8d:87:ab:6c:2f:eb:d7:4d:29:43:68:ec:14:fe:21:f2:e4:db:
47:75:35:29:f3:37:83:73:5b:96:33:00:00:8d:d4:22:a5:1a:
41:ff:18:df:49:88:19:4d:ec:53:91:04:01:17:65:3c:64:cb:
97:72:21:74:22:8c:a3:80:cc:b7:64:cd:23:a3:c1:ec:35:c5:
b1:70:29:8a
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECtIhSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjE2YzQxOTUxNTJlZmZlZGJmN2IzYWZlZTJhYTcyZTE5MDkwZTRkMB4XDTIyMDEw
MTAzMDI0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmEzNjE4OWY5MzFj
YWZlODY0NWU2OTgyMjU4NDhkMmU0ZDNjYzczMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALkFwSiO5Q3P+DycFYvI/OSKYQ9VBKaKHGcvwkGrFO/SgCDX
baVV2PmRy434tg4LUWzGwVJoG0aqKTKi+y9HJD6a3vug/v04VfOAM+2+cEyRoV5S
hnf/g7ZARHh5SrczXEf9tvIATZRiAdrR8r9ticpLedPXpsgLx7fX53Bjcpz+fY8M
n3jzOF1Dcbr4I+UXCCwfXik0IQm9nJ+lE0cq/Pef7NaCTCGjj97g6sYAFHMaP4+F
U13rGmtLnKbCl0O9+1SpGVcK6e1q04nlhchsLGIvNahb6BTg/ClEl0Aue1LjuyNa
D1y4cqoBEQwCEP488eH/qaZfnlV6bAf9CfFa7v8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQqNhifkxyv6GReaYIlhI0uTTzHMjAfBgNVHSMEGDAWgBTGFsQZUVLv/tv3
s6/uKqcuGQkOTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hoYkVHVkZTN183Yjk3T3Y3aXFuTGhrSkRrMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvYWQ2NTIxLWQzYTktNGIxMy1iZTY5LTM5ZmRiOTg2ZjA1OS8x
L0tqWVluNU1jci1oa1htbUNKWVNOTGswOHh6SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
YWQ2NTIxLWQzYTktNGIxMy1iZTY5LTM5ZmRiOTg2ZjA1OS8xL3hoYkVHVkZTN183
Yjk3T3Y3aXFuTGhrSkRrMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEALn60gMEALn+7AMEALn+7wMEAMI+
NjANBgkqhkiG9w0BAQsFAAOCAQEApgbjmetWHrv/DDuIdTcktyhMKcc0CXbPjUcd
GXRE/Jdb4pXKezzlTyPSfjOjJill8ViBSvs0PNN+v/EvlGIyNC3ucWP9smjWFma6
mVlsqXp2fNIy/hxz/It5d4dIwu8w8NaJcQqk04wLr30W2UlRkN2JkinOWPGPLyp1
5mO41g9/4u17k6ZTgFitpL5Ri1Tws9ZEEriYC++tWNk1wcoaiBEclZ9Y4lVq9cVI
BHw6RmKlttZzjYerbC/r100pQ2jsFP4h8uTbR3U1KfM3g3NbljMAAI3UIqUaQf8Y
30mIGU3sU5EEARdlPGTLl3IhdCKMo4DMt2TNI6PB7DXFsXApig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org