Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/jzigap0x5WbdPAZZka2PLUZYqLg.roa
File: jzigap0x5WbdPAZZka2PLUZYqLg.roa (raw, json)
Hash identifier: yw6MytNDDyRCNx0ykCngRD9vIYPHoL1FG5Df5s/VAdY=
Subject key identifier: 8F:38:A0:6A:9D:31:E5:66:DD:3C:06:59:91:AD:8F:2D:46:58:A8:B8
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 0184A9EAD79A676FA81532B1DB003CB2EA29
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/jzigap0x5WbdPAZZka2PLUZYqLg.roa
Signing time: Thu 24 Nov 2022 13:54:10 +0000
ROA not before: Thu 24 Nov 2022 13:54:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44309
IP address blocks: 185.229.139.0/24 maxlen: 24
185.229.138.0/24 maxlen: 24
185.229.137.0/24 maxlen: 24
185.229.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:ea:d7:9a:67:6f:a8:15:32:b1:db:00:3c:b2:ea:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Nov 24 13:54:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f38a06a9d31e566dd3c065991ad8f2d4658a8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cc:48:84:be:42:67:6c:25:8e:ce:16:a7:a2:
ea:2c:7e:00:c3:f8:5b:22:9a:70:05:d2:8a:f4:99:
06:bd:5d:61:df:5e:ed:d4:fb:d1:27:d6:c8:8d:d4:
05:c0:ec:18:a7:d7:58:97:62:dd:5e:77:98:2a:b8:
91:a8:2b:6b:50:77:32:f8:6c:2f:10:ae:f4:dc:3a:
4e:a1:f5:43:a2:f2:01:3c:22:27:06:ee:b3:bf:08:
a4:b8:c6:e9:cf:5b:a0:54:e3:06:df:07:77:b8:1b:
4c:5b:99:cb:6d:20:9c:69:60:aa:ee:a8:7e:e1:2a:
d4:b2:55:89:12:51:fc:c7:5e:59:4e:0e:e1:56:2a:
c3:3e:dc:30:9f:7c:de:fb:66:1a:40:19:5a:a2:cf:
b9:e2:a3:66:cd:ef:08:bf:40:b7:a4:80:6e:02:68:
0e:88:26:db:5f:0e:dc:4e:4c:59:c7:92:46:cb:9b:
67:ba:98:5e:8b:00:09:0a:3e:15:1d:35:1d:ff:c7:
0d:65:c3:7c:43:9f:7a:45:67:94:f3:f1:e1:b3:17:
20:ed:84:45:25:a8:9b:ef:bc:e2:f2:aa:8c:82:a3:
ca:ec:21:26:d8:6e:1a:35:ed:ea:b3:d9:cb:a3:ce:
e3:f9:fe:b9:65:6d:16:e1:6c:de:37:f4:4a:40:d1:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:A0:6A:9D:31:E5:66:DD:3C:06:59:91:AD:8F:2D:46:58:A8:B8
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/jzigap0x5WbdPAZZka2PLUZYqLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:db:a8:83:bc:be:8b:6f:f1:25:05:47:a2:ec:d1:95:26:d4:
ad:a9:64:9e:55:ca:c4:b9:30:40:e1:84:07:84:da:07:fb:3f:
1f:07:93:f4:9b:99:aa:b8:05:c3:1b:ae:89:2f:5f:1a:01:ae:
23:83:2b:fa:e5:69:d3:f5:d6:b3:68:1e:68:97:86:f7:46:01:
87:63:db:66:9b:fb:70:02:2a:53:4b:f4:4c:4c:3f:05:08:41:
76:64:d2:61:58:9e:f1:fa:1d:8e:c6:6f:9a:25:75:59:8c:3a:
78:85:60:f0:b9:21:52:f7:95:a1:40:7a:63:ac:95:c1:51:d7:
23:76:b8:c7:aa:6e:6c:24:ed:51:8a:92:46:c9:bb:2a:86:6c:
cb:6d:6d:46:00:c8:41:6d:2c:8d:3a:78:21:92:e3:c8:6b:0b:
1d:66:ae:f8:bc:c8:58:12:1b:61:f9:9b:c9:02:30:c6:cf:dd:
f7:c6:f9:70:89:db:e1:46:9d:bc:8e:3e:29:5e:41:ef:4a:0e:
16:f7:80:ad:24:9b:e3:96:e4:f7:79:15:9e:63:9f:04:3c:2e:
06:c0:40:39:37:1d:40:8f:5f:d9:f1:a0:80:15:3e:fb:dc:14:
38:07:76:ff:48:45:32:56:20:8f:25:d3:49:57:31:06:1e:42:
26:c7:d5:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSp6teaZ2+oFTKx2wA8suopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODdiOWNmYzNlZTBjNDQ5NjVlYTIwOWMwNGZkOGU4ZjQ4
ZmE0MmYwHhcNMjIxMTI0MTM1NDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjM4YTA2YTlkMzFlNTY2ZGQzYzA2NTk5MWFkOGYyZDQ2NThhOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsxIhL5CZ2wljs4Wp6LqLH4Aw/hb
IppwBdKK9JkGvV1h317t1PvRJ9bIjdQFwOwYp9dYl2LdXneYKriRqCtrUHcy+Gwv
EK703DpOofVDovIBPCInBu6zvwikuMbpz1ugVOMG3wd3uBtMW5nLbSCcaWCq7qh+
4SrUslWJElH8x15ZTg7hVirDPtwwn3ze+2YaQBlaos+54qNmze8Iv0C3pIBuAmgO
iCbbXw7cTkxZx5JGy5tnupheiwAJCj4VHTUd/8cNZcN8Q596RWeU8/Hhsxcg7YRF
Jaib77zi8qqMgqPK7CEm2G4aNe3qs9nLo87j+f65ZW0W4WzeN/RKQNE9qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI84oGqdMeVm3TwGWZGtjy1GWKi4MB8GA1UdIwQY
MBaAFLyHuc/D7gxEll6iCcBP2Oj0j6QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgt
NDVmYWJlM2Y5ZjMzLzEvanppZ2FwMHg1V2JkUEFaWmthMlBMVVpZcUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgtNDVmYWJlM2Y5ZjMz
LzEvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueWIMA0G
CSqGSIb3DQEBCwUAA4IBAQBb26iDvL6Lb/ElBUei7NGVJtStqWSeVcrEuTBA4YQH
hNoH+z8fB5P0m5mquAXDG66JL18aAa4jgyv65WnT9dazaB5ol4b3RgGHY9tmm/tw
AipTS/RMTD8FCEF2ZNJhWJ7x+h2Oxm+aJXVZjDp4hWDwuSFS95WhQHpjrJXBUdcj
drjHqm5sJO1RipJGybsqhmzLbW1GAMhBbSyNOnghkuPIawsdZq74vMhYEhth+ZvJ
AjDGz933xvlwidvhRp28jj4pXkHvSg4W94CtJJvjluT3eRWeY58EPC4GwEA5Nx1A
j1/Z8aCAFT773BQ4B3b/SEUyViCPJdNJVzEGHkImx9Wt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org