Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/AutKu1mu1IBxkburxtil-PCWgCI.roa
File: AutKu1mu1IBxkburxtil-PCWgCI.roa (raw, json)
Hash identifier: UvPEz2eQpChz+sP3xZPsYC5pCAFruEnu+Zl60C849fU=
Subject key identifier: 02:EB:4A:BB:59:AE:D4:80:71:91:BB:AB:C6:D8:A5:F8:F0:96:80:22
Certificate issuer: /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial: 068E856E
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/AutKu1mu1IBxkburxtil-PCWgCI.roa
Signing time: Sat 01 Jan 2022 14:54:46 +0000
ROA not before: Sat 01 Jan 2022 14:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39122
IP address blocks: 194.8.59.0/24 maxlen: 24
194.9.174.0/24 maxlen: 24
194.9.222.0/24 maxlen: 24
194.8.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110003566 (0x68e856e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Validity
Not Before: Jan 1 14:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02eb4abb59aed4807191bbabc6d8a5f8f0968022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:bd:95:f9:28:b4:6d:84:3d:37:40:44:db:
8a:68:97:04:e3:0c:3f:b4:f3:63:ee:bf:48:85:58:
ec:4f:1b:29:05:61:4a:b7:54:db:f0:f6:e1:8b:c2:
ac:23:42:b0:7e:53:6d:20:45:ad:f2:f7:3d:51:47:
9e:41:7d:71:ce:e7:a5:07:a8:34:f0:bd:d0:2e:fa:
f5:68:87:66:d3:be:f0:6a:30:02:5f:f1:09:76:d2:
9a:bf:b2:87:73:ad:0d:fc:a0:f5:bc:cd:03:48:b6:
55:a6:9b:84:6a:ba:cb:91:99:3a:49:c1:8f:d2:ef:
50:86:be:40:b2:3c:f7:39:07:c0:37:d8:a9:3a:21:
ae:e5:64:8f:01:67:a1:3a:f9:49:b1:15:6e:56:65:
05:9d:5f:21:d2:3f:fb:63:d1:e2:02:c5:51:69:ca:
48:bd:db:a9:e8:03:3a:5a:ed:a6:bc:1b:e1:cc:47:
00:01:b1:ff:af:02:e0:0c:83:38:e0:d5:1c:a6:95:
da:0c:5c:8f:05:ee:a2:bf:9d:10:9f:5b:2e:76:6c:
fa:37:96:f2:6a:81:b9:8c:46:39:6a:06:3e:ef:9c:
6c:d5:a8:8b:c8:a4:de:43:6c:a4:45:f1:db:21:0b:
d6:f0:73:0e:e5:51:04:6f:40:1c:d4:5b:4d:3f:ed:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EB:4A:BB:59:AE:D4:80:71:91:BB:AB:C6:D8:A5:F8:F0:96:80:22
X509v3 Authority Key Identifier:
keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/AutKu1mu1IBxkburxtil-PCWgCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.48.0/24
194.8.59.0/24
194.9.174.0/24
194.9.222.0/24
Signature Algorithm: sha256WithRSAEncryption
87:63:f2:5e:b1:b6:a8:f5:2c:4c:2e:0f:c6:d7:cb:76:1f:de:
fc:49:92:8c:e5:01:10:b7:9b:32:7a:df:37:4e:31:eb:2e:25:
0f:ad:87:c4:b1:5e:67:1c:49:3c:8b:d3:f8:f7:a5:23:a4:71:
21:a1:c2:1f:ee:4a:1b:73:bf:6c:20:e5:91:df:c5:90:67:ce:
7b:c4:da:b1:d3:fc:52:fd:6a:cf:55:94:31:39:1f:93:a2:82:
84:1c:ac:2f:13:8b:bf:8b:88:7f:cd:df:21:57:10:b7:a1:48:
e5:1a:68:41:f7:32:bd:17:3f:7e:00:fd:31:f1:b7:1f:4b:d2:
c7:8d:d6:74:2f:bb:ae:07:aa:47:bb:46:a9:32:40:fe:4d:78:
28:1d:a8:c7:09:1e:1c:aa:48:fb:d0:01:d6:8f:11:26:b2:d7:
5a:34:78:8c:70:f7:9e:3d:f4:09:e7:bb:46:ef:2a:7c:05:3c:
43:00:26:60:a0:5f:db:59:ef:24:41:3d:1f:6b:55:a4:83:a5:
0c:33:7c:b3:fa:74:2f:46:11:45:9b:c6:77:a8:3a:0f:80:fc:
df:8f:ff:fe:a8:18:a4:e4:21:90:ca:c5:cb:58:cb:09:5c:58:
f6:33:48:83:7e:9d:38:d9:89:c3:6e:1c:0b:6f:66:f2:a2:21:
bc:ba:6d:f3
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBo6FbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MzMxOTUxM2ZkMGI5MDQxNzA2MGEyMThiNzZkNjJiOGUzZmJjYzUxMB4XDTIyMDEw
MTE0NTQ0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDJlYjRhYmI1OWFl
ZDQ4MDcxOTFiYmFiYzZkOGE1ZjhmMDk2ODAyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvMvZX5KLRthD03QETbimiXBOMMP7TzY+6/SIVY7E8bKQVh
SrdU2/D24YvCrCNCsH5TbSBFrfL3PVFHnkF9cc7npQeoNPC90C769WiHZtO+8Gow
Al/xCXbSmr+yh3OtDfyg9bzNA0i2VaabhGq6y5GZOknBj9LvUIa+QLI89zkHwDfY
qTohruVkjwFnoTr5SbEVblZlBZ1fIdI/+2PR4gLFUWnKSL3bqegDOlrtprwb4cxH
AAGx/68C4AyDOODVHKaV2gxcjwXuor+dEJ9bLnZs+jeW8mqBuYxGOWoGPu+cbNWo
i8ik3kNspEXx2yEL1vBzDuVRBG9AHNRbTT/tZaMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQC60q7Wa7UgHGRu6vG2KX48JaAIjAfBgNVHSMEGDAWgBQTMZUT/QuQQXBg
ohi3bWK44/vMUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0V6R1ZFXzBMa0VGd1lLSVl0MjFpdU9QN3pGRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvODM3YjBjLTE4YTktNGFiMy04MzUwLTQ4MTcwYmUxMTMzMi8x
L0F1dEt1MW11MUlCeGtidXJ4dGlsLVBDV2dDSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
ODM3YjBjLTE4YTktNGFiMy04MzUwLTQ4MTcwYmUxMTMzMi8xL0V6R1ZFXzBMa0VG
d1lLSVl0MjFpdU9QN3pGRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAMIIMAMEAMIIOwMEAMIJrgMEAMIJ
3jANBgkqhkiG9w0BAQsFAAOCAQEAh2PyXrG2qPUsTC4PxtfLdh/e/EmSjOUBELeb
MnrfN04x6y4lD62HxLFeZxxJPIvT+PelI6RxIaHCH+5KG3O/bCDlkd/FkGfOe8Ta
sdP8Uv1qz1WUMTkfk6KChBysLxOLv4uIf83fIVcQt6FI5RpoQfcyvRc/fgD9MfG3
H0vSx43WdC+7rgeqR7tGqTJA/k14KB2oxwkeHKpI+9AB1o8RJrLXWjR4jHD3nj30
Cee7Ru8qfAU8QwAmYKBf21nvJEE9H2tVpIOlDDN8s/p0L0YRRZvGd6g6D4D834//
/qgYpOQhkMrFy1jLCVxY9jNIg36dONmJw24cC29m8qIhvLpt8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:56 2024 by rpki-client on console-ams.rpki-client.org