Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/kjmkiNOIWfSNNZyIVCHzp2YD8Wk.roa
File: kjmkiNOIWfSNNZyIVCHzp2YD8Wk.roa (raw, json)
Hash identifier: MI6gB/NByXP3iVmsOt/VHpTXNPscn6Q4gHIjZkotTCQ=
Subject key identifier: 92:39:A4:88:D3:88:59:F4:8D:35:9C:88:54:21:F3:A7:66:03:F1:69
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 064C1326
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/kjmkiNOIWfSNNZyIVCHzp2YD8Wk.roa
Signing time: Sat 01 Jan 2022 11:01:09 +0000
ROA not before: Sat 01 Jan 2022 11:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19197
IP address blocks: 57.72.96.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105648934 (0x64c1326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 11:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9239a488d38859f48d359c885421f3a76603f169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:f7:2f:57:01:95:33:79:83:d4:f2:35:ec:
d1:b6:ae:59:8e:99:fb:7f:03:80:df:a1:dc:e5:03:
4d:08:4e:9a:05:a8:5c:18:77:31:6a:d0:32:2d:5b:
69:a4:0e:29:bd:49:f2:64:7e:85:e8:a1:22:1b:5b:
54:0c:c2:e5:c9:68:a7:7a:ae:29:b7:37:47:14:85:
ea:4c:3f:ea:0b:e3:92:a4:85:db:65:c5:7c:51:5b:
8b:89:d3:87:57:a0:30:fc:5e:90:b5:28:0a:90:77:
e7:c1:13:eb:dd:09:26:9f:86:a5:e2:c4:b7:8c:4e:
a5:52:97:67:81:a7:22:cb:fa:c6:f6:26:c3:5e:fc:
44:e8:27:bf:ff:2a:1e:a8:8a:e1:42:7e:7a:6d:15:
63:33:50:e2:1a:53:9c:54:7b:26:75:7a:94:ba:2b:
a9:60:6e:9d:74:94:94:c3:c0:3d:68:90:23:26:27:
5c:0e:63:ef:59:2e:22:26:0f:ba:69:11:ae:64:2b:
f1:e1:0e:b1:c6:8e:95:2d:b3:c3:4c:27:ce:4a:e2:
8b:5a:33:27:ff:f6:80:b0:a2:15:d8:d0:c0:cc:ed:
94:54:48:17:3f:f4:f8:c1:52:3d:a2:1c:77:ec:ad:
e1:e3:80:51:09:f5:99:57:21:8d:23:9d:59:dd:ab:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:39:A4:88:D3:88:59:F4:8D:35:9C:88:54:21:F3:A7:66:03:F1:69
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/kjmkiNOIWfSNNZyIVCHzp2YD8Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.72.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:19:9c:91:fa:58:3e:34:5f:27:d8:fc:8c:f3:12:ad:21:2f:
b4:c5:94:4a:37:a2:1e:4b:e0:09:96:06:ad:2b:c1:e1:e7:a5:
89:b4:95:c9:4b:e4:d9:8a:d1:89:e2:89:f5:51:8f:6b:60:94:
e2:a2:0b:6e:0c:35:09:b6:9d:66:71:ac:8b:54:fa:b9:63:d8:
f0:d0:20:08:63:08:d7:ec:03:e8:d5:86:54:eb:1a:c1:fa:df:
09:76:5a:59:9e:83:43:09:4f:4b:0a:74:6c:46:48:ca:e1:61:
bb:18:88:47:79:c5:00:02:be:98:40:de:dc:4c:7f:b5:d5:31:
f9:fa:4a:cb:04:34:ee:61:4f:68:94:e7:4d:11:1f:c5:87:4c:
ae:c1:96:6c:8d:6c:73:1e:dd:01:16:31:c4:9b:2e:ff:30:aa:
fc:7f:e3:d4:e8:a4:a9:85:b1:c8:c0:b4:18:af:34:72:d3:bd:
57:dc:7a:f7:1b:d6:54:66:19:77:39:cd:6f:e6:54:6e:f0:84:
f7:3f:6c:99:fc:62:ad:94:96:90:e5:e3:d6:4d:17:0c:c7:6c:
f2:06:95:26:8c:45:51:8b:9a:37:13:d4:09:2a:53:d9:6c:8e:
c7:7b:48:dc:6d:41:d8:fd:34:45:85:72:04:f9:13:33:af:64:
7c:6f:dc:34
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBkwTJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZGI4M2NmZTU0ODk4MzVmMjk0ZDBhZjRkZDRkYjZlM2RjMjVmMWYzMB4XDTIyMDEw
MTExMDEwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTIzOWE0ODhkMzg4
NTlmNDhkMzU5Yzg4NTQyMWYzYTc2NjAzZjE2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK0/9y9XAZUzeYPU8jXs0bauWY6Z+38DgN+h3OUDTQhOmgWo
XBh3MWrQMi1baaQOKb1J8mR+heihIhtbVAzC5clop3quKbc3RxSF6kw/6gvjkqSF
22XFfFFbi4nTh1egMPxekLUoCpB358ET690JJp+GpeLEt4xOpVKXZ4GnIsv6xvYm
w178ROgnv/8qHqiK4UJ+em0VYzNQ4hpTnFR7JnV6lLorqWBunXSUlMPAPWiQIyYn
XA5j71kuIiYPumkRrmQr8eEOscaOlS2zw0wnzkrii1ozJ//2gLCiFdjQwMztlFRI
Fz/0+MFSPaIcd+yt4eOAUQn1mVchjSOdWd2rykECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSSOaSI04hZ9I01nIhUIfOnZgPxaTAfBgNVHSMEGDAWgBTNuDz+VImDXylN
CvTdTbbj3CXx8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3piZzhfbFNKZzE4cFRRcjAzVTIyNDl3bDhmTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvNzM5NzE2LTlhZjItNDdmNS1hNmYxLWEzYjc0Zjk2NDFhYy8x
L2tqbWtpTk9JV2ZTTk5aeUlWQ0h6cDJZRDhXay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
NzM5NzE2LTlhZjItNDdmNS1hNmYxLWEzYjc0Zjk2NDFhYy8xL3piZzhfbFNKZzE4
cFRRcjAzVTIyNDl3bDhmTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADlIYDANBgkqhkiG9w0BAQsFAAOC
AQEAfhmckfpYPjRfJ9j8jPMSrSEvtMWUSjeiHkvgCZYGrSvB4eelibSVyUvk2YrR
ieKJ9VGPa2CU4qILbgw1CbadZnGsi1T6uWPY8NAgCGMI1+wD6NWGVOsawfrfCXZa
WZ6DQwlPSwp0bEZIyuFhuxiIR3nFAAK+mEDe3Ex/tdUx+fpKywQ07mFPaJTnTREf
xYdMrsGWbI1scx7dARYxxJsu/zCq/H/j1OikqYWxyMC0GK80ctO9V9x69xvWVGYZ
dznNb+ZUbvCE9z9smfxirZSWkOXj1k0XDMds8gaVJoxFUYuaNxPUCSpT2WyOx3tI
3G1B2P00RYVyBPkTM69kfG/cNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:35 2024 by rpki-client on console-ams.rpki-client.org