Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/JqLYo2GNh_msf-vhnqLxXpceNDk.roa
File: JqLYo2GNh_msf-vhnqLxXpceNDk.roa (raw, json)
Hash identifier: nnnIgMZ2R5sszbVcc5dKRFkOeSOtVw1hr55ZkX/P19Y=
Subject key identifier: 26:A2:D8:A3:61:8D:87:F9:AC:7F:EB:E1:9E:A2:F1:5E:97:1E:34:39
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 02C78832
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/JqLYo2GNh_msf-vhnqLxXpceNDk.roa
Signing time: Sat 01 Jan 2022 14:08:14 +0000
ROA not before: Sat 01 Jan 2022 14:08:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203474
IP address blocks: 185.114.196.0/22 maxlen: 22
185.114.196.0/24 maxlen: 24
2a03:3780::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46630962 (0x2c78832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Jan 1 14:08:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26a2d8a3618d87f9ac7febe19ea2f15e971e3439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:6c:6f:a8:65:dd:d1:e7:38:31:de:f4:05:
ec:c3:8f:71:12:3b:83:42:15:6d:58:9a:19:55:6c:
54:bb:d9:c6:80:48:42:41:b2:5d:f7:1f:cd:87:a1:
36:2d:22:fa:eb:c8:47:bc:bf:8e:15:37:72:72:91:
44:b9:1d:af:a6:ef:94:d5:7b:f5:0e:31:e2:3d:ef:
16:f0:de:e3:5c:05:3f:cf:98:82:e5:8e:11:2c:7b:
95:38:b9:81:2a:cd:ce:18:64:f9:d2:18:8e:7e:10:
5d:5a:b4:41:22:99:54:14:b0:08:21:91:d6:6b:e0:
fe:6a:dc:52:85:bb:f6:74:1f:0f:6d:bf:f5:6b:9b:
35:0a:ad:ae:2c:9d:a5:3f:42:6c:26:80:df:6e:ed:
94:6c:80:74:e5:89:64:ff:d1:c9:1d:aa:9d:86:3a:
ac:69:06:c1:29:bb:de:b3:00:a5:f3:38:12:bb:2a:
86:b4:e7:d8:1b:1a:a1:a7:d0:d4:17:2c:2f:52:86:
43:e4:fc:66:d9:6c:b0:92:6e:98:dc:6c:13:05:27:
d0:3a:59:57:49:7d:3b:30:5e:4f:52:c5:46:1a:9a:
f7:ba:60:32:87:bf:f6:86:90:fd:20:28:0d:79:9b:
62:da:9c:18:4a:4e:97:e5:11:27:71:70:3a:75:2f:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A2:D8:A3:61:8D:87:F9:AC:7F:EB:E1:9E:A2:F1:5E:97:1E:34:39
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/JqLYo2GNh_msf-vhnqLxXpceNDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.196.0/22
IPv6:
2a03:3780::/48
Signature Algorithm: sha256WithRSAEncryption
69:9c:f4:fe:aa:00:18:5e:97:d9:d5:52:b3:42:46:92:1d:fe:
63:51:3b:8e:fb:c4:ee:27:e2:c7:60:0f:38:17:0c:5d:9c:3f:
8d:a6:d8:5d:99:c3:64:93:37:03:f8:14:e0:57:f0:2d:73:5c:
7b:b3:b3:3a:d4:86:94:16:a8:09:f8:f8:9f:b4:b4:2a:41:7a:
26:c2:49:58:3c:15:b1:41:de:ca:91:ec:b4:2e:f5:96:07:9c:
f5:7f:55:93:b5:cf:6d:d9:c0:7a:e6:82:1f:9c:63:fd:ac:d3:
a5:74:ff:3a:e4:80:dc:55:4e:17:19:dd:5e:e7:64:41:76:b4:
50:58:9b:93:02:75:8a:a4:87:fb:b2:a5:d2:c8:4c:61:10:10:
05:64:b1:d7:ff:6a:3e:67:27:da:8a:93:b6:a4:eb:1b:ea:80:
5e:02:14:09:9d:53:c3:9a:f2:c9:96:87:93:68:db:bc:11:97:
bd:d9:88:15:26:e4:83:6c:a4:bb:21:89:c4:e2:24:eb:04:e2:
36:2d:03:e2:ba:1d:b5:8f:12:5e:45:a7:ed:dd:76:07:75:0f:
54:6f:e3:e2:e4:1e:1a:91:23:fe:c7:22:4b:de:ea:69:6e:c7:
38:d5:90:74:36:1e:37:d7:f0:f1:2a:ea:5d:9d:c4:77:cb:ba:
5c:57:6d:93
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEAseIMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NDY3MzMzMThjNjJjNDc5MjBmZTM3NWFkOTljYjcyOWVlOTBhMWFkMB4XDTIyMDEw
MTE0MDgxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZhMmQ4YTM2MThk
ODdmOWFjN2ZlYmUxOWVhMmYxNWU5NzFlMzQzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKh7bG+oZd3R5zgx3vQF7MOPcRI7g0IVbViaGVVsVLvZxoBI
QkGyXfcfzYehNi0i+uvIR7y/jhU3cnKRRLkdr6bvlNV79Q4x4j3vFvDe41wFP8+Y
guWOESx7lTi5gSrNzhhk+dIYjn4QXVq0QSKZVBSwCCGR1mvg/mrcUoW79nQfD22/
9WubNQqtriydpT9CbCaA327tlGyAdOWJZP/RyR2qnYY6rGkGwSm73rMApfM4Ersq
hrTn2BsaoafQ1BcsL1KGQ+T8ZtlssJJumNxsEwUn0DpZV0l9OzBeT1LFRhqa97pg
Moe/9oaQ/SAoDXmbYtqcGEpOl+URJ3FwOnUvZe8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQmotijYY2H+ax/6+GeovFelx40OTAfBgNVHSMEGDAWgBSUZzMxjGLEeSD+
N1rZnLcp7pChrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xHY3pNWXhpeEhrZ19qZGEyWnkzS2U2UW9hMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvZDc2MDllLTYzOTYtNDE1NS1hZDM1LWI3NDA4OWQ4ZTU5ZS8x
L0pxTFlvMkdOaF9tc2YtdmhucUx4WHBjZU5Eay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
ZDc2MDllLTYzOTYtNDE1NS1hZDM1LWI3NDA4OWQ4ZTU5ZS8xL2xHY3pNWXhpeEhr
Z19qZGEyWnkzS2U2UW9hMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEArlyxDAPBAIAAjAJAwcAKgM3gAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBpnPT+qgAYXpfZ1VKzQkaSHf5jUTuO+8TuJ+LH
YA84FwxdnD+NpthdmcNkkzcD+BTgV/Atc1x7s7M61IaUFqgJ+PiftLQqQXomwklY
PBWxQd7Kkey0LvWWB5z1f1WTtc9t2cB65oIfnGP9rNOldP865IDcVU4XGd1e52RB
drRQWJuTAnWKpIf7sqXSyExhEBAFZLHX/2o+ZyfaipO2pOsb6oBeAhQJnVPDmvLJ
loeTaNu8EZe92YgVJuSDbKS7IYnE4iTrBOI2LQPiuh21jxJeRaft3XYHdQ9Ub+Pi
5B4akSP+xyJL3uppbsc41ZB0Nh431/DxKupdncR3y7pcV22T
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:59 2024 by rpki-client on console-ams.rpki-client.org