Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Kx6Jc43hZjC1209FadP_apadq-0.roa
File: Kx6Jc43hZjC1209FadP_apadq-0.roa (raw, json)
Hash identifier: ICuzdoJFFrlRUub6L7Oj1kfY2gxzahR5y7zT2yX2gU0=
Subject key identifier: 2B:1E:89:73:8D:E1:66:30:B5:DB:4F:45:69:D3:FF:6A:96:9D:AB:ED
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018395181B1E8F3F12B10052194905CEDE20
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Kx6Jc43hZjC1209FadP_apadq-0.roa
Signing time: Sat 01 Oct 2022 19:48:48 +0000
ROA not before: Sat 01 Oct 2022 19:48:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.226.240.0/24 maxlen: 24
141.226.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:95:18:1b:1e:8f:3f:12:b1:00:52:19:49:05:ce:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 1 19:48:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b1e89738de16630b5db4f4569d3ff6a969dabed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:72:dc:36:a3:40:57:f2:5f:b2:81:34:38:
95:2d:6d:fe:a1:6f:6a:00:21:3c:69:b6:20:d5:c3:
bc:86:f7:17:4d:34:ed:97:5b:10:7f:a5:a9:51:84:
25:82:f8:58:9f:d2:52:44:b6:20:93:2e:8f:9b:c7:
3c:e3:a0:95:e4:25:d5:c7:00:a4:0e:a2:30:89:58:
41:e5:c9:9f:c3:2d:5f:4f:f6:d9:79:55:45:1f:ac:
e7:42:32:bc:39:00:26:b6:0a:3b:79:3a:a5:85:0e:
94:19:90:e4:6c:71:d0:e8:2e:2d:a3:16:ed:1e:1d:
b2:32:09:5c:de:b0:44:b3:fc:b2:97:c3:d5:4b:c1:
9d:db:3e:c3:fc:e5:4e:cb:62:67:61:11:5a:d6:24:
c1:33:b4:15:49:6e:39:0c:09:20:68:d2:0c:ea:a2:
0a:a4:2c:2b:44:24:50:21:1e:0b:dc:42:8c:21:d5:
54:6d:7e:ca:8d:70:09:d3:a3:43:e9:64:c9:1c:7d:
39:3b:5a:ad:f6:d3:46:8b:22:41:3c:cf:a0:45:45:
0a:e6:c3:51:8d:7d:89:b0:6d:53:8d:64:d3:3f:fb:
45:af:8a:94:85:3e:9b:d9:34:59:80:25:e8:60:5a:
c7:3c:7e:ab:32:80:3d:02:0b:7b:e1:4e:cf:8b:8f:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1E:89:73:8D:E1:66:30:B5:DB:4F:45:69:D3:FF:6A:96:9D:AB:ED
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Kx6Jc43hZjC1209FadP_apadq-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.240.0/24
141.226.245.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ac:01:d3:ac:80:21:b6:d7:75:d0:9d:09:76:b1:98:ae:a7:
f7:f6:15:70:45:38:59:13:54:ea:e7:67:a6:ab:46:f8:64:0c:
8d:f4:a4:b3:10:bc:62:1d:40:00:6b:1e:09:3b:59:75:f9:1a:
22:69:4b:f1:d2:30:b6:d8:60:26:cb:56:ac:1b:9d:84:25:77:
ac:0d:6b:53:43:aa:19:af:3c:32:f2:74:40:22:39:19:48:c6:
43:44:2b:01:e1:0b:e9:75:7a:d8:2e:13:69:d2:c3:b3:24:85:
a5:3c:6a:ee:9b:78:03:38:a1:21:f1:20:71:0c:ba:d0:5d:fc:
12:4e:85:87:61:7c:24:3c:de:25:5c:2f:d4:49:5c:c4:36:c6:
fb:1c:95:08:2a:dd:1c:b9:2a:94:54:62:7a:b5:f7:da:c0:fa:
b3:44:5a:b1:a1:d5:be:b4:d2:36:b9:34:00:f5:cd:56:46:a6:
4c:f2:72:70:9f:5c:3a:4c:7e:25:1e:b9:3b:a0:9a:d0:6b:7a:
51:09:cc:9a:34:10:db:c9:8c:76:11:5c:0a:50:23:eb:15:81:
e3:d3:8b:5d:33:1e:75:4b:6b:da:bc:ec:9e:4a:5a:d2:b0:dc:
e0:37:40:c4:45:6e:e2:10:a7:68:ed:3e:32:94:9d:4e:29:3e:
c9:91:62:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOVGBsejz8SsQBSGUkFzt4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjIxMDAxMTk0ODQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjFlODk3MzhkZTE2NjMwYjVkYjRmNDU2OWQzZmY2YTk2OWRhYmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIpy3DajQFfyX7KBNDiVLW3+oW9q
ACE8abYg1cO8hvcXTTTtl1sQf6WpUYQlgvhYn9JSRLYgky6Pm8c846CV5CXVxwCk
DqIwiVhB5cmfwy1fT/bZeVVFH6znQjK8OQAmtgo7eTqlhQ6UGZDkbHHQ6C4toxbt
Hh2yMglc3rBEs/yyl8PVS8Gd2z7D/OVOy2JnYRFa1iTBM7QVSW45DAkgaNIM6qIK
pCwrRCRQIR4L3EKMIdVUbX7KjXAJ06ND6WTJHH05O1qt9tNGiyJBPM+gRUUK5sNR
jX2JsG1TjWTTP/tFr4qUhT6b2TRZgCXoYFrHPH6rMoA9Agt74U7Pi4+1NQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCseiXON4WYwtdtPRWnT/2qWnavtMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvS3g2SmM0M2haakMxMjA5RmFkUF9hcGFkcS0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjeLwAwQA
jeL1MA0GCSqGSIb3DQEBCwUAA4IBAQA1rAHTrIAhttd10J0JdrGYrqf39hVwRThZ
E1Tq52emq0b4ZAyN9KSzELxiHUAAax4JO1l1+RoiaUvx0jC22GAmy1asG52EJXes
DWtTQ6oZrzwy8nRAIjkZSMZDRCsB4QvpdXrYLhNp0sOzJIWlPGrum3gDOKEh8SBx
DLrQXfwSToWHYXwkPN4lXC/USVzENsb7HJUIKt0cuSqUVGJ6tffawPqzRFqxodW+
tNI2uTQA9c1WRqZM8nJwn1w6TH4lHrk7oJrQa3pRCcyaNBDbyYx2EVwKUCPrFYHj
04tdMx51S2vavOyeSlrSsNzgN0DERW7iEKdo7T4ylJ1OKT7JkWIb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:06 2024 by rpki-client on console-fra.rpki-client.org