Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/kXuF_OSZ2P5s_KlsKXZAqONYP1c.roa
File: kXuF_OSZ2P5s_KlsKXZAqONYP1c.roa (raw, json)
Hash identifier: jFbBZqfbApgCx0v7+Bm8xYHEz/adtZk0ydXTHyK7yIw=
Subject key identifier: 91:7B:85:FC:E4:99:D8:FE:6C:FC:A9:6C:29:76:40:A8:E3:58:3F:57
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 0C0C16A3
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/kXuF_OSZ2P5s_KlsKXZAqONYP1c.roa
Signing time: Sat 01 Jan 2022 13:06:46 +0000
ROA not before: Sat 01 Jan 2022 13:06:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15491
IP address blocks: 92.241.64.0/19 maxlen: 24
185.51.16.0/22 maxlen: 24
109.238.224.0/20 maxlen: 24
213.131.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202118819 (0xc0c16a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Jan 1 13:06:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=917b85fce499d8fe6cfca96c297640a8e3583f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:22:06:aa:06:41:10:ef:55:51:cb:9e:25:
97:8e:dc:2f:36:48:3e:1f:24:4b:f2:66:da:01:94:
6b:df:15:88:51:72:45:b1:e6:80:d4:54:3a:64:52:
1c:48:af:63:2e:07:bf:48:1d:aa:d5:fa:e3:f7:3b:
31:1c:6c:35:49:f4:24:dd:77:dc:9b:ab:06:ef:ee:
00:48:2b:07:24:fe:43:0a:91:13:24:fe:77:91:65:
b0:8c:e7:36:0a:13:fa:81:09:1f:81:5a:eb:d1:46:
a1:65:38:c0:99:a9:1b:a5:20:3a:98:21:b7:ba:1f:
bb:33:c7:b4:ed:ff:72:c8:8c:04:16:75:8f:4f:4e:
12:7c:a3:af:82:97:14:92:de:ef:fb:c7:3a:b9:91:
4d:9f:07:90:a0:e8:a1:04:c4:c4:fc:9c:27:e8:9e:
10:bb:72:7f:50:7c:51:84:c5:95:b8:a5:56:cb:c7:
f4:31:3d:b9:e7:d5:64:30:12:cd:66:2d:fd:29:89:
03:15:6c:45:c6:d8:da:a8:24:3f:ec:9d:0d:c1:2e:
77:ea:66:fe:e0:5d:05:bc:51:98:53:f6:0b:37:1d:
66:9c:e6:c0:74:b3:83:b1:a6:85:cd:d6:5e:0d:c1:
c1:ef:b6:5c:27:a8:c0:dd:65:17:5d:2e:f1:c8:51:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7B:85:FC:E4:99:D8:FE:6C:FC:A9:6C:29:76:40:A8:E3:58:3F:57
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/kXuF_OSZ2P5s_KlsKXZAqONYP1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.241.64.0/19
109.238.224.0/20
185.51.16.0/22
213.131.32.0/19
Signature Algorithm: sha256WithRSAEncryption
72:d1:19:05:58:81:7d:66:9a:aa:50:33:a6:6d:2b:42:6d:6c:
25:69:27:55:39:05:b9:1d:0c:f1:0b:22:dc:4b:da:48:e0:d6:
6d:dc:15:a0:8f:6e:b9:04:b6:30:58:4f:6a:15:c1:9c:cb:bc:
0d:a1:a6:14:3f:9f:a1:25:00:b4:fa:f5:de:b8:3b:e8:67:1f:
32:85:18:39:4d:36:84:3b:84:ac:0a:67:27:3f:57:51:9c:e3:
49:f2:c7:eb:db:cc:9d:39:d9:cd:41:45:1b:6d:df:a0:3e:2d:
8a:c6:ab:29:c4:1a:b8:b3:f6:b0:0d:71:db:b4:08:96:44:0f:
f2:f9:e7:8f:a4:95:ad:78:e7:99:86:46:2e:4d:5a:5e:bd:2f:
9a:3a:b6:ff:b2:c1:4b:82:c4:1b:ab:fd:99:4b:ea:f7:a8:f6:
2a:8c:d4:1d:98:5a:a3:66:28:9a:54:46:e1:e2:66:08:2d:53:
c2:69:59:8f:64:6a:82:17:51:3e:d3:0e:8e:8e:7d:19:c8:e4:
ea:f1:8f:72:d3:3d:ca:be:8b:18:68:82:10:c1:2b:42:8b:c9:
19:2f:cb:fa:dd:72:5c:7e:33:ce:b4:ea:f8:ca:a9:fd:7d:7b:
12:65:41:fa:7b:36:cd:02:6b:17:9c:aa:51:66:d4:78:71:47:
38:9b:1d:ee
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEDAwWozANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDI1NzE5MDgyMWY3MDU4YThlYWZkNDgxOTY5NzQzNjhiYWQ4ZjE0MB4XDTIyMDEw
MTEzMDY0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE3Yjg1ZmNlNDk5
ZDhmZTZjZmNhOTZjMjk3NjQwYThlMzU4M2Y1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKL+IgaqBkEQ71VRy54ll47cLzZIPh8kS/Jm2gGUa98ViFFy
RbHmgNRUOmRSHEivYy4Hv0gdqtX64/c7MRxsNUn0JN133JurBu/uAEgrByT+QwqR
EyT+d5FlsIznNgoT+oEJH4Fa69FGoWU4wJmpG6UgOpght7ofuzPHtO3/csiMBBZ1
j09OEnyjr4KXFJLe7/vHOrmRTZ8HkKDooQTExPycJ+ieELtyf1B8UYTFlbilVsvH
9DE9uefVZDASzWYt/SmJAxVsRcbY2qgkP+ydDcEud+pm/uBdBbxRmFP2CzcdZpzm
wHSzg7Gmhc3WXg3Bwe+2XCeowN1lF10u8chRxt8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSRe4X85JnY/mz8qWwpdkCo41g/VzAfBgNVHSMEGDAWgBSdJXGQgh9wWKjq
/UgZaXQ2i62PFDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25TVnhrSUlmY0ZpbzZ2MUlHV2wwTm91dGp4US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvNjZmODI5LTUxMjktNDg0Mi1hNWMwLTM3NDBiMDk0MWRiOC8x
L2tYdUZfT1NaMlA1c19LbHNLWFpBcU9OWVAxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
NjZmODI5LTUxMjktNDg0Mi1hNWMwLTM3NDBiMDk0MWRiOC8xL25TVnhrSUlmY0Zp
bzZ2MUlHV2wwTm91dGp4US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEBVzxQAMEBG3u4AMEArkzEAMEBdWD
IDANBgkqhkiG9w0BAQsFAAOCAQEActEZBViBfWaaqlAzpm0rQm1sJWknVTkFuR0M
8Qsi3EvaSODWbdwVoI9uuQS2MFhPahXBnMu8DaGmFD+foSUAtPr13rg76GcfMoUY
OU02hDuErApnJz9XUZzjSfLH69vMnTnZzUFFG23foD4tisarKcQauLP2sA1x27QI
lkQP8vnnj6SVrXjnmYZGLk1aXr0vmjq2/7LBS4LEG6v9mUvq96j2KozUHZhao2Yo
mlRG4eJmCC1TwmlZj2RqghdRPtMOjo59Gcjk6vGPctM9yr6LGGiCEMErQovJGS/L
+t1yXH4zzrTq+Mqp/X17EmVB+ns2zQJrF5yqUWbUeHFHOJsd7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org