Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/JOf4LUas_F4COCOQqUSRNsuLm1k.roa
File: JOf4LUas_F4COCOQqUSRNsuLm1k.roa (raw, json)
Hash identifier: iJs37FJkY4MmfeAcpWo0JM3NyVGce1UyHXtaQ8PzzJU=
Subject key identifier: 24:E7:F8:2D:46:AC:FC:5E:02:38:23:90:A9:44:91:36:CB:8B:9B:59
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 010740AB
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/JOf4LUas_F4COCOQqUSRNsuLm1k.roa
Signing time: Wed 06 Apr 2022 09:24:02 +0000
ROA not before: Wed 06 Apr 2022 09:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7155
IP address blocks: 185.15.100.0/22 maxlen: 22
5.8.184.0/21 maxlen: 21
37.1.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17252523 (0x10740ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Apr 6 09:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24e7f82d46acfc5e02382390a9449136cb8b9b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:f3:f8:25:99:68:18:f8:36:bd:f7:dd:94:
6e:26:7b:35:b7:b2:42:07:49:c5:57:d4:ec:a6:ea:
5d:36:bf:7f:78:f1:69:49:c4:e3:e5:b1:49:cb:95:
5e:d3:75:42:80:b2:d2:80:f8:92:41:9f:0e:4f:86:
01:36:f6:64:68:ff:e7:9d:06:aa:9e:d8:f0:ac:e7:
a3:ce:4c:37:63:b4:14:72:94:b3:ba:fe:b3:0a:ee:
77:73:0e:dd:7d:82:8e:e1:ae:23:03:bb:36:1c:5b:
a9:3a:43:d4:09:c8:61:4a:71:1d:00:65:8f:11:7b:
e3:f9:67:b4:fc:b7:83:69:02:72:98:e1:c3:3f:62:
fa:8f:8c:1c:a9:43:4a:ee:b8:f4:bc:a2:47:65:af:
a0:7c:17:b9:ab:6a:26:38:8f:fd:c4:ac:85:03:be:
03:35:9a:89:04:e0:15:f8:4d:ca:77:5a:5b:bb:ba:
85:9d:3c:d1:af:ab:53:3d:1d:6c:55:73:fd:36:09:
ce:3b:88:05:3c:b0:8b:37:8b:76:a8:c2:92:3a:65:
6e:ab:48:3c:f0:ef:a1:91:12:7c:46:1d:bb:07:4f:
c8:f5:4a:32:c1:d9:33:d5:16:49:84:54:5c:f1:ab:
03:0d:1a:ab:17:ba:81:48:7b:43:85:6b:bf:52:c9:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E7:F8:2D:46:AC:FC:5E:02:38:23:90:A9:44:91:36:CB:8B:9B:59
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/JOf4LUas_F4COCOQqUSRNsuLm1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.184.0/21
37.1.176.0/21
185.15.100.0/22
Signature Algorithm: sha256WithRSAEncryption
04:56:23:51:ed:8b:79:97:1a:91:31:6e:05:72:61:8b:6a:c8:
97:42:dc:45:e2:86:03:3f:73:e1:b8:54:a6:aa:03:e2:c5:39:
47:09:03:72:b3:f9:ca:60:67:a0:31:d5:01:ab:ca:d0:58:e3:
c1:52:cb:58:69:83:90:0f:d2:dc:f0:ab:aa:fb:2f:28:bc:ce:
a0:82:46:ca:06:26:20:42:7a:0d:7c:05:fb:ea:c2:cf:58:3c:
ab:06:ee:87:70:0d:61:7f:02:89:8c:92:bc:96:d0:ff:8d:47:
6a:62:31:ae:a0:c5:fe:24:8b:13:08:6a:5b:e4:ec:4b:b1:66:
55:27:65:54:f8:cb:fd:db:0d:a6:ba:0d:bb:39:27:84:cb:45:
0e:40:fc:e1:3a:f1:a2:7a:12:34:29:8b:98:b1:f3:a9:60:34:
dd:58:8e:d4:03:21:06:f0:e8:56:2d:c8:06:f3:f9:8b:1d:3c:
31:39:6f:30:e7:d7:ca:14:f5:49:75:d7:24:6b:35:8c:7c:12:
d9:4e:6e:b8:3b:d1:0d:37:73:1d:e7:6a:fe:5e:ea:45:3b:2e:
45:fe:3d:e6:8b:73:29:7b:b5:92:75:2c:02:e4:ef:18:84:16:
06:45:ff:15:c7:a8:45:2a:ab:98:2c:2e:81:73:5d:00:1d:d7:
4e:a6:cb:4a
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAQdAqzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE4OWI2N2M2NmRlYmY1ZGVkM2YyODgwYmI0OTQxZDMwNDExMjU3MB4XDTIyMDQw
NjA5MjQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjRlN2Y4MmQ0NmFj
ZmM1ZTAyMzgyMzkwYTk0NDkxMzZjYjhiOWI1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMUv8/glmWgY+Da9992UbiZ7NbeyQgdJxVfU7KbqXTa/f3jx
aUnE4+WxScuVXtN1QoCy0oD4kkGfDk+GATb2ZGj/550Gqp7Y8Kzno85MN2O0FHKU
s7r+swrud3MO3X2CjuGuIwO7NhxbqTpD1AnIYUpxHQBljxF74/lntPy3g2kCcpjh
wz9i+o+MHKlDSu649LyiR2WvoHwXuatqJjiP/cSshQO+AzWaiQTgFfhNyndaW7u6
hZ080a+rUz0dbFVz/TYJzjuIBTywizeLdqjCkjplbqtIPPDvoZESfEYduwdPyPVK
MsHZM9UWSYRUXPGrAw0aqxe6gUh7Q4Vrv1LJTRcCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQk5/gtRqz8XgI4I5CpRJE2y4ubWTAfBgNVHSMEGDAWgBSxqJtnxm3r9d7T
8ogLtJQdMEESVzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhaWJaOFp0Nl9YZTBfS0lDN1NVSFRCQkVsYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvYmM0ZDdiLTNjYjctNGYzMy04OWU3LTIxMDBiZjBmMTQwYS8x
L0pPZjRMVWFzX0Y0Q09DT1FxVVNSTnN1TG0xay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
YmM0ZDdiLTNjYjctNGYzMy04OWU3LTIxMDBiZjBmMTQwYS8xL3NhaWJaOFp0Nl9Y
ZTBfS0lDN1NVSFRCQkVsYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAwUIuAMEAyUBsAMEArkPZDANBgkq
hkiG9w0BAQsFAAOCAQEABFYjUe2LeZcakTFuBXJhi2rIl0LcReKGAz9z4bhUpqoD
4sU5RwkDcrP5ymBnoDHVAavK0FjjwVLLWGmDkA/S3PCrqvsvKLzOoIJGygYmIEJ6
DXwF++rCz1g8qwbuh3ANYX8CiYySvJbQ/41HamIxrqDF/iSLEwhqW+TsS7FmVSdl
VPjL/dsNproNuzknhMtFDkD84TrxonoSNCmLmLHzqWA03ViO1AMhBvDoVi3IBvP5
ix08MTlvMOfXyhT1SXXXJGs1jHwS2U5uuDvRDTdzHedq/l7qRTsuRf495otzKXu1
knUsAuTvGIQWBkX/FceoRSqrmCwugXNdAB3XTqbLSg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:08 2024 by rpki-client on console-ams.rpki-client.org