Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/mLjwYTVHEMI23UDztbsx5fnhxZY.roa
File: mLjwYTVHEMI23UDztbsx5fnhxZY.roa (raw, json)
Hash identifier: h3pcrCBpBulF6FQOGVWOhiICMpXrhImegQIsDjebjyQ=
Subject key identifier: 98:B8:F0:61:35:47:10:C2:36:DD:40:F3:B5:BB:31:E5:F9:E1:C5:96
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 0908F903
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/mLjwYTVHEMI23UDztbsx5fnhxZY.roa
Signing time: Sat 01 Jan 2022 08:54:17 +0000
ROA not before: Sat 01 Jan 2022 08:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43151
IP address blocks: 185.122.140.0/24 maxlen: 24
193.93.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151582979 (0x908f903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 1 08:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98b8f061354710c236dd40f3b5bb31e5f9e1c596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:3e:8d:15:92:28:7e:6e:28:43:51:c8:1a:
bb:07:4c:b6:1f:9b:82:91:af:e8:c8:8a:9e:c3:f9:
7e:71:05:37:0a:28:5c:87:d5:dd:b9:d5:80:c3:85:
39:a3:3c:98:70:90:94:47:c5:d3:d4:56:1f:dd:ae:
68:11:f5:d5:95:3c:28:1d:ad:e8:68:8a:8d:77:44:
60:a1:d6:0a:0d:99:78:a1:8d:f5:f0:e1:ca:74:91:
0f:03:8d:10:6c:d6:4c:3c:9a:b3:83:a2:5e:80:95:
d5:ed:27:38:9c:e0:24:2c:2b:ca:98:a2:b9:e0:e7:
e2:cd:7c:24:48:7f:a2:86:ce:b4:a3:c0:91:fb:4d:
31:b3:42:5f:a8:3c:91:55:c4:96:0d:5e:2a:03:bc:
2e:e3:8d:9e:ef:ab:9f:bb:71:14:77:2f:79:31:da:
39:a2:f4:89:86:a9:30:13:01:fa:f2:27:db:1b:fd:
2b:91:69:97:6f:31:63:d8:3a:79:44:6d:9c:12:b0:
14:3c:45:30:df:e2:10:1e:f7:96:02:d7:e8:4e:66:
cb:e1:bb:3e:60:35:d0:48:fb:09:14:17:70:61:35:
9b:c1:7d:40:7c:e8:18:2c:26:13:48:be:73:6d:20:
b5:37:54:12:a0:b2:84:8f:69:33:4b:2c:c3:2c:5d:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B8:F0:61:35:47:10:C2:36:DD:40:F3:B5:BB:31:E5:F9:E1:C5:96
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/mLjwYTVHEMI23UDztbsx5fnhxZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.140.0/24
193.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4d:d6:db:3b:8e:24:8a:0c:47:98:86:6a:2c:58:b6:7c:42:
13:ba:bd:c9:5f:69:5d:ce:b6:cb:2d:c6:93:ba:b2:aa:f0:f4:
25:c8:ae:f3:e4:8a:ce:22:4b:c8:2a:fb:ae:a6:e5:58:39:63:
ee:28:73:ef:c5:42:4f:21:db:93:ea:e2:7f:2b:59:7c:98:30:
13:72:4b:9e:5f:2a:46:fd:03:2b:3c:8c:12:be:29:6b:bf:76:
62:e4:d3:6c:81:d9:70:79:18:28:d8:23:85:9a:87:9d:43:ff:
4a:ba:a8:55:39:92:8f:b3:1e:83:5d:88:b1:86:ee:57:63:e5:
d1:4f:94:58:35:8b:d4:e6:df:04:37:e5:1a:5f:c0:aa:9c:57:
b6:af:97:5e:a8:a3:70:22:00:ad:bf:bf:84:d7:0c:5e:f7:3c:
c3:ef:91:4e:37:6d:91:fa:9b:f7:e9:ce:0a:37:35:48:7b:48:
e8:16:a1:88:d7:9e:3c:9e:ad:82:a5:61:4d:4b:5e:cf:a9:f2:
9f:6a:59:6a:b6:14:5a:6f:9b:63:5c:72:79:d6:20:db:40:1f:
f8:5f:2c:80:a9:c3:b1:05:8c:14:c8:0a:a4:58:5e:78:19:90:
59:51:60:e9:79:40:56:43:97:ce:ad:23:b9:11:94:e1:14:01:
41:38:48:1f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECQj5AzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Y2M0NzhkZDljY2Q2MTYyZjgyNDg4YWM2ZmM1MGMyMWQzNjlmMmEwMB4XDTIyMDEw
MTA4NTQxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOThiOGYwNjEzNTQ3
MTBjMjM2ZGQ0MGYzYjViYjMxZTVmOWUxYzU5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMd6Po0Vkih+bihDUcgauwdMth+bgpGv6MiKnsP5fnEFNwoo
XIfV3bnVgMOFOaM8mHCQlEfF09RWH92uaBH11ZU8KB2t6GiKjXdEYKHWCg2ZeKGN
9fDhynSRDwONEGzWTDyas4OiXoCV1e0nOJzgJCwrypiiueDn4s18JEh/oobOtKPA
kftNMbNCX6g8kVXElg1eKgO8LuONnu+rn7txFHcveTHaOaL0iYapMBMB+vIn2xv9
K5Fpl28xY9g6eURtnBKwFDxFMN/iEB73lgLX6E5my+G7PmA10Ej7CRQXcGE1m8F9
QHzoGCwmE0i+c20gtTdUEqCyhI9pM0sswyxdvyECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSYuPBhNUcQwjbdQPO1uzHl+eHFljAfBgNVHSMEGDAWgBTMxHjdnM1hYvgk
iKxvxQwh02nyoDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pNUjQzWnpOWVdMNEpJaXNiOFVNSWROcDhxQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvZWUzZTNmLTNhNDUtNDNlYi1hNWRlLTQyODU5OTgzOTJkMy8x
L21MandZVFZIRU1JMjNVRHp0YnN4NWZuaHhaWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
ZWUzZTNmLTNhNDUtNDNlYi1hNWRlLTQyODU5OTgzOTJkMy8xL3pNUjQzWnpOWVdM
NEpJaXNiOFVNSWROcDhxQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALl6jAMEAMFdPzANBgkqhkiG9w0B
AQsFAAOCAQEAgk3W2zuOJIoMR5iGaixYtnxCE7q9yV9pXc62yy3Gk7qyqvD0Jciu
8+SKziJLyCr7rqblWDlj7ihz78VCTyHbk+rifytZfJgwE3JLnl8qRv0DKzyMEr4p
a792YuTTbIHZcHkYKNgjhZqHnUP/SrqoVTmSj7Meg12IsYbuV2Pl0U+UWDWL1Obf
BDflGl/AqpxXtq+XXqijcCIArb+/hNcMXvc8w++RTjdtkfqb9+nOCjc1SHtI6Bah
iNeePJ6tgqVhTUtez6nyn2pZarYUWm+bY1xyedYg20Af+F8sgKnDsQWMFMgKpFhe
eBmQWVFg6XlAVkOXzq0juRGU4RQBQThIHw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:30 2024 by rpki-client on console-ams.rpki-client.org