Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/JkEJP3nTT8y0r-Gz0JMic2Jg7cc.roa
File: JkEJP3nTT8y0r-Gz0JMic2Jg7cc.roa (raw, json)
Hash identifier: cDoHuhCWlm30Hh1C3McLY47rGLY78GBqITUCKDuQHSo=
Subject key identifier: 26:41:09:3F:79:D3:4F:CC:B4:AF:E1:B3:D0:93:22:73:62:60:ED:C7
Certificate issuer: /CN=142b3b8607c414d86934ce09e116fdbc1d1f7f28
Certificate serial: 67D8B3
Authority key identifier: 14:2B:3B:86:07:C4:14:D8:69:34:CE:09:E1:16:FD:BC:1D:1F:7F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/JkEJP3nTT8y0r-Gz0JMic2Jg7cc.roa
Signing time: Sat 01 Jan 2022 02:58:37 +0000
ROA not before: Sat 01 Jan 2022 02:58:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 193.141.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6805683 (0x67d8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=142b3b8607c414d86934ce09e116fdbc1d1f7f28
Validity
Not Before: Jan 1 02:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2641093f79d34fccb4afe1b3d09322736260edc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:2a:f2:fb:f3:54:96:fc:ca:1a:42:1d:42:
4b:0f:38:f2:3c:ba:fe:9d:6b:ca:00:ee:ec:5b:04:
69:df:40:9a:ca:c5:c2:23:e2:8f:ca:7c:d6:c0:39:
c7:65:9e:b2:97:ab:c2:ab:ad:63:27:fe:75:f6:0f:
c6:a5:28:66:16:f1:74:2d:e5:4f:c1:7a:ec:61:ac:
f2:8d:a1:4b:45:74:f9:24:ea:b7:c5:b6:79:99:59:
ab:db:d4:07:56:62:3d:98:4f:32:82:79:75:02:2a:
46:b0:2c:a5:d8:a2:c0:4e:1d:0a:b5:3f:45:a4:36:
b2:8a:59:8f:bf:88:2f:4b:4a:3c:f2:8a:64:eb:9c:
ee:83:39:79:9b:4b:be:fe:46:1b:bd:fa:81:8e:80:
5d:44:8a:c8:7d:d7:a6:1d:01:9e:0e:b3:3e:6f:cc:
e4:e2:f1:a3:6c:25:63:14:5c:36:c7:d8:6d:31:0c:
a7:e6:c7:ef:77:50:63:eb:68:8e:f0:83:00:53:57:
e5:e8:89:06:6e:9a:17:7c:eb:4d:b9:3e:5e:00:a3:
9f:7f:c8:51:c8:30:30:02:e2:c8:28:98:ba:70:df:
86:17:70:2a:b7:62:ce:77:45:5e:63:06:ba:d4:6d:
4e:ba:fc:ca:7b:ce:6e:9a:9b:da:5a:cb:9b:85:00:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:41:09:3F:79:D3:4F:CC:B4:AF:E1:B3:D0:93:22:73:62:60:ED:C7
X509v3 Authority Key Identifier:
keyid:14:2B:3B:86:07:C4:14:D8:69:34:CE:09:E1:16:FD:BC:1D:1F:7F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/JkEJP3nTT8y0r-Gz0JMic2Jg7cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.92.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e8:c0:4d:06:6d:a2:0a:16:82:96:e7:fd:8e:bf:fe:7e:dd:
59:e0:df:b7:4c:32:60:72:89:1d:7d:1a:01:28:02:ea:d6:f0:
d2:49:8c:1e:d9:8d:dd:e8:4e:76:51:46:2c:c7:1e:f8:76:de:
c9:2a:29:58:0b:e4:4a:38:bf:fb:31:35:e5:2d:3e:f7:80:56:
f3:10:c8:f2:f8:42:12:52:b7:35:3b:27:b2:49:cd:cc:40:47:
18:e0:02:92:96:07:dc:14:e2:44:3d:a0:24:6f:20:60:42:de:
71:64:cb:f7:c6:46:10:27:eb:b3:1f:89:89:53:df:99:8a:8c:
0a:be:dc:6c:6d:f0:78:c1:31:b8:7f:42:03:c3:3a:84:02:15:
ca:1b:5b:7e:8b:c1:0c:50:f6:92:4b:08:cc:40:06:8f:67:b9:
1a:19:de:c1:ee:6b:91:a0:e2:af:37:ba:e3:86:5d:be:9b:e7:
c8:c4:46:d2:19:04:87:52:b0:93:31:22:44:b0:2b:ac:07:22:
0e:ea:68:74:7b:23:39:40:09:c2:85:d4:9c:93:5f:80:b2:df:
f0:af:9b:33:d1:27:42:b7:60:1f:ce:b3:8f:f0:06:0d:25:57:
c2:fc:d4:fa:b3:c4:ea:73:df:95:44:cb:39:65:c7:59:21:ae:
e1:00:19:95
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDZ9izMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0
MmIzYjg2MDdjNDE0ZDg2OTM0Y2UwOWUxMTZmZGJjMWQxZjdmMjgwHhcNMjIwMTAx
MDI1ODM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyNjQxMDkzZjc5ZDM0
ZmNjYjRhZmUxYjNkMDkzMjI3MzYyNjBlZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAptwq8vvzVJb8yhpCHUJLDzjyPLr+nWvKAO7sWwRp30CaysXC
I+KPynzWwDnHZZ6yl6vCq61jJ/519g/GpShmFvF0LeVPwXrsYazyjaFLRXT5JOq3
xbZ5mVmr29QHVmI9mE8ygnl1AipGsCyl2KLATh0KtT9FpDayilmPv4gvS0o88opk
65zugzl5m0u+/kYbvfqBjoBdRIrIfdemHQGeDrM+b8zk4vGjbCVjFFw2x9htMQyn
5sfvd1Bj62iO8IMAU1fl6IkGbpoXfOtNuT5eAKOff8hRyDAwAuLIKJi6cN+GF3Aq
t2LOd0VeYwa61G1OuvzKe85umpvaWsubhQBXswIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCZBCT9500/MtK/hs9CTInNiYO3HMB8GA1UdIwQYMBaAFBQrO4YHxBTYaTTO
CeEW/bwdH38oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RkNzN2hnZkVGTmhwTk00SjRSYjl2QjBmZnlnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81Mi84MTc5YTctYjczNS00N2Y3LWE4YmEtNjkyMmI0OWQwNzQ3LzEv
SmtFSlAzblRUOHkwci1HejBKTWljMkpnN2NjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi84
MTc5YTctYjczNS00N2Y3LWE4YmEtNjkyMmI0OWQwNzQ3LzEvRkNzN2hnZkVGTmhw
Tk00SjRSYjl2QjBmZnlnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY1cMA0GCSqGSIb3DQEBCwUAA4IB
AQA56MBNBm2iChaCluf9jr/+ft1Z4N+3TDJgcokdfRoBKALq1vDSSYwe2Y3d6E52
UUYsxx74dt7JKilYC+RKOL/7MTXlLT73gFbzEMjy+EISUrc1OyeySc3MQEcY4AKS
lgfcFOJEPaAkbyBgQt5xZMv3xkYQJ+uzH4mJU9+ZiowKvtxsbfB4wTG4f0IDwzqE
AhXKG1t+i8EMUPaSSwjMQAaPZ7kaGd7B7muRoOKvN7rjhl2+m+fIxEbSGQSHUrCT
MSJEsCusByIO6mh0eyM5QAnChdSck1+Ast/wr5sz0SdCt2AfzrOP8AYNJVfC/NT6
s8Tqc9+VRMs5ZcdZIa7hABmV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:25 2023 by rpki-client on console-fra.rpki-client.org