Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/bMJEQhoaEx2qY1BoMBLmuExHG0o.roa
File: bMJEQhoaEx2qY1BoMBLmuExHG0o.roa (raw, json)
Hash identifier: 3jWrVFffqEbGqn0VhWKpDZPKB2DfAlpg8inQc9Q+fkA=
Subject key identifier: 6C:C2:44:42:1A:1A:13:1D:AA:63:50:68:30:12:E6:B8:4C:47:1B:4A
Certificate issuer: /CN=47d9f9e16a41530bc2abaa18f17a7456017720e5
Certificate serial: E30E64
Authority key identifier: 47:D9:F9:E1:6A:41:53:0B:C2:AB:AA:18:F1:7A:74:56:01:77:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9n54WpBUwvCq6oY8Xp0VgF3IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/bMJEQhoaEx2qY1BoMBLmuExHG0o.roa
Signing time: Sat 01 Jan 2022 03:59:36 +0000
ROA not before: Sat 01 Jan 2022 03:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 94.103.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14880356 (0xe30e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d9f9e16a41530bc2abaa18f17a7456017720e5
Validity
Not Before: Jan 1 03:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cc244421a1a131daa6350683012e6b84c471b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:05:96:2b:c3:95:ad:b1:5b:49:49:4c:40:
3d:44:bc:60:d8:ad:88:bb:9b:bc:8f:e1:bb:f2:34:
91:c4:6b:e8:47:bf:0a:a7:74:aa:b8:18:7e:80:25:
9e:07:93:00:e9:57:52:15:d2:de:fb:1d:f8:3b:a1:
27:66:4e:7a:63:83:00:68:bf:84:33:99:d0:1f:f2:
02:13:d2:96:7a:82:dd:be:d5:0e:6a:c6:d6:48:1e:
d1:73:55:86:d1:c2:8c:8b:7e:33:6c:1a:7e:e1:75:
f5:80:69:36:5e:13:6a:f9:5c:64:21:1f:d3:67:a0:
4b:07:9d:9c:cb:2a:98:5b:bf:c6:53:d2:27:d8:1f:
5e:00:04:52:04:e4:19:9b:46:d9:bb:ed:32:ac:4f:
c0:e7:0a:87:41:82:f8:b5:24:57:14:18:fb:f3:00:
38:29:20:0e:cd:28:de:ed:e1:23:f7:af:e3:8f:b2:
27:79:d8:3a:6b:94:a0:ae:92:7f:91:6e:a8:61:ad:
73:b3:8b:88:0f:56:8c:74:5f:98:e5:2f:14:f7:d8:
2a:be:9f:f2:bb:ac:ce:a6:74:11:49:6c:b8:c9:c4:
89:62:de:80:fb:63:71:af:42:41:3c:c1:2b:ca:a1:
88:e1:dd:b9:bb:dd:d8:93:8a:60:c2:9a:b4:52:7e:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C2:44:42:1A:1A:13:1D:AA:63:50:68:30:12:E6:B8:4C:47:1B:4A
X509v3 Authority Key Identifier:
keyid:47:D9:F9:E1:6A:41:53:0B:C2:AB:AA:18:F1:7A:74:56:01:77:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9n54WpBUwvCq6oY8Xp0VgF3IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/bMJEQhoaEx2qY1BoMBLmuExHG0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/R9n54WpBUwvCq6oY8Xp0VgF3IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.187.0/24
Signature Algorithm: sha256WithRSAEncryption
43:48:d2:1f:8f:a1:f3:77:09:f6:8f:8e:05:01:4e:47:94:ae:
8e:7e:db:15:73:9d:5a:59:14:e5:51:bc:c2:c0:80:bd:6c:f1:
a1:5d:d4:e2:76:9d:02:b2:8e:17:28:39:9d:27:5c:d0:5f:11:
e3:83:8a:73:a4:84:bd:93:05:46:e8:e8:e0:a4:9d:8e:5c:15:
2d:6e:c0:68:1f:04:6a:b7:ec:90:17:e6:db:92:21:18:74:eb:
d9:91:32:6e:70:b5:a6:b8:84:16:88:e0:d4:58:4b:ab:c1:6e:
ad:99:85:81:ba:fc:be:00:0f:ea:bf:1b:87:1c:73:a6:6e:a7:
be:59:19:a2:87:5d:17:52:13:cf:88:21:6d:8b:9f:a2:16:ad:
91:f4:63:73:45:f1:a6:c1:03:d1:79:52:42:0a:3f:9a:82:5c:
f4:a3:b0:4a:c7:ee:a2:60:e0:95:7a:6c:44:69:25:e0:69:f1:
e3:ab:96:01:ea:5f:70:85:74:0c:09:48:a9:ec:af:a5:4a:d5:
70:1a:1d:6b:6a:c5:e8:ef:a4:c9:98:76:c7:3f:ca:58:ca:53:
ed:9c:fb:cf:a8:4c:4a:22:83:b1:7a:1e:16:90:0b:96:6a:fe:
4e:82:15:12:35:84:1b:4e:19:fc:98:8e:4c:d3:83:76:71:39:
9d:3f:60:47
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOMOZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
N2Q5ZjllMTZhNDE1MzBiYzJhYmFhMThmMTdhNzQ1NjAxNzcyMGU1MB4XDTIyMDEw
MTAzNTkzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmNjMjQ0NDIxYTFh
MTMxZGFhNjM1MDY4MzAxMmU2Yjg0YzQ3MWI0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMA4BZYrw5WtsVtJSUxAPUS8YNitiLubvI/hu/I0kcRr6Ee/
Cqd0qrgYfoAlngeTAOlXUhXS3vsd+DuhJ2ZOemODAGi/hDOZ0B/yAhPSlnqC3b7V
DmrG1kge0XNVhtHCjIt+M2wafuF19YBpNl4TavlcZCEf02egSwednMsqmFu/xlPS
J9gfXgAEUgTkGZtG2bvtMqxPwOcKh0GC+LUkVxQY+/MAOCkgDs0o3u3hI/ev44+y
J3nYOmuUoK6Sf5FuqGGtc7OLiA9WjHRfmOUvFPfYKr6f8ruszqZ0EUlsuMnEiWLe
gPtjca9CQTzBK8qhiOHdubvd2JOKYMKatFJ+ZTcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRswkRCGhoTHapjUGgwEua4TEcbSjAfBgNVHSMEGDAWgBRH2fnhakFTC8Kr
qhjxenRWAXcg5TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1I5bjU0V3BCVXd2Q3E2b1k4WHAwVmdGM0lPVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMGFjY2YzLThiMjUtNDQwNS04ZDUyLWZjMmY3YTg3MmZmOS8x
L2JNSkVRaG9hRXgycVkxQm9NQkxtdUV4SEcwby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MGFjY2YzLThiMjUtNDQwNS04ZDUyLWZjMmY3YTg3MmZmOS8xL1I5bjU0V3BCVXd2
Q3E2b1k4WHAwVmdGM0lPVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF5nuzANBgkqhkiG9w0BAQsFAAOC
AQEAQ0jSH4+h83cJ9o+OBQFOR5Sujn7bFXOdWlkU5VG8wsCAvWzxoV3U4nadArKO
Fyg5nSdc0F8R44OKc6SEvZMFRujo4KSdjlwVLW7AaB8EarfskBfm25IhGHTr2ZEy
bnC1priEFojg1FhLq8FurZmFgbr8vgAP6r8bhxxzpm6nvlkZooddF1ITz4ghbYuf
ohatkfRjc0XxpsED0XlSQgo/moJc9KOwSsfuomDglXpsRGkl4Gnx46uWAepfcIV0
DAlIqeyvpUrVcBoda2rF6O+kyZh2xz/KWMpT7Zz7z6hMSiKDsXoeFpALlmr+ToIV
EjWEG04Z/JiOTNODdnE5nT9gRw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:23 2023 by rpki-client on console-ams.rpki-client.org