Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/JaW8EOyEUfED6XWSILAXoWgTMdA.roa
File: JaW8EOyEUfED6XWSILAXoWgTMdA.roa (raw, json)
Hash identifier: O4X1Fa9AyoI1xF3QYjAAxcroCZfNq2fBeGhe/2RCUGE=
Subject key identifier: 25:A5:BC:10:EC:84:51:F1:03:E9:75:92:20:B0:17:A1:68:13:31:D0
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 0181FC66E4375BF51DF30D54638CD656189E
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/JaW8EOyEUfED6XWSILAXoWgTMdA.roa
Signing time: Thu 14 Jul 2022 11:10:10 +0000
ROA not before: Thu 14 Jul 2022 11:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57314
IP address blocks: 91.231.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:66:e4:37:5b:f5:1d:f3:0d:54:63:8c:d6:56:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jul 14 11:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25a5bc10ec8451f103e9759220b017a1681331d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:40:82:57:af:be:66:a8:22:cb:ad:39:1b:
f8:74:cd:dc:8a:d0:c1:f1:69:0f:a4:f4:22:3f:07:
bd:4a:ed:39:88:cf:77:24:b6:c6:5d:21:45:c2:cb:
8f:c7:6f:a0:31:47:46:1e:8f:18:aa:c0:51:c3:bb:
9d:0e:8d:50:be:cd:1d:d5:25:4f:0a:82:24:6a:cf:
44:7a:67:1b:cb:22:6b:86:ee:ab:95:58:ad:b8:5a:
ae:12:e5:ab:75:6e:b1:8c:53:ba:6d:c4:fd:d9:ed:
c0:63:0b:02:d2:b5:df:a6:82:68:34:87:98:88:ef:
54:90:e3:47:a7:28:42:cd:2d:d0:7f:11:d7:9c:a0:
d7:23:58:88:54:d7:c6:cd:fd:62:4e:62:d7:1f:47:
86:cb:3c:66:3e:f0:7c:e4:79:6f:87:09:6e:a3:8e:
4c:9a:f5:a4:50:8f:c0:46:66:66:c7:ec:96:ae:4d:
d3:a3:39:d9:f1:ff:c3:47:0a:a8:38:f8:78:ca:d0:
9c:b3:87:9b:2e:4e:66:f0:8c:9d:ed:2d:82:e7:dc:
59:f7:b0:1b:e0:08:f6:1c:45:a1:02:22:01:c4:5c:
d3:c9:81:bc:66:5a:46:8d:9e:93:f8:2f:dc:f0:d8:
70:e1:45:09:8b:14:34:cc:11:a4:a8:74:96:da:89:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:BC:10:EC:84:51:F1:03:E9:75:92:20:B0:17:A1:68:13:31:D0
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/JaW8EOyEUfED6XWSILAXoWgTMdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.132.0/22
Signature Algorithm: sha256WithRSAEncryption
04:6c:77:71:47:58:eb:35:c8:23:96:1f:8d:fa:fb:0d:59:ac:
87:da:e0:3d:bd:73:f3:94:df:72:6e:ca:99:24:0f:42:73:b7:
4b:1e:9a:ff:be:ff:54:12:4a:b7:6e:c4:35:9b:01:48:76:0c:
90:78:42:66:8d:1b:78:44:22:c0:45:16:14:bc:f6:cc:2d:4c:
b0:aa:2a:fa:24:3c:fd:de:a8:d8:9d:92:9e:90:f7:3f:35:96:
c5:52:d1:04:59:2d:15:a4:df:15:a3:23:3c:37:f9:4e:01:39:
fd:cc:c4:af:dd:93:c7:5f:3a:7f:c2:b9:72:c6:88:ed:62:e5:
e1:ce:47:4c:8c:ce:ed:cb:3b:27:aa:92:25:5a:47:bc:3e:cf:
1d:5d:97:cd:f2:00:7f:20:2a:67:cf:65:d5:bd:41:7f:f1:e9:
e6:bc:43:b3:66:13:65:66:5e:3f:da:13:db:3e:76:9d:7d:b0:
d2:c0:47:77:99:a8:c2:a1:40:06:b5:cf:89:33:e1:12:a4:22:
ca:72:cb:a1:14:42:f4:e5:a5:1c:0a:19:1e:e4:c7:a4:89:e2:
92:0e:6c:ea:4f:d5:28:af:49:18:8e:d2:5e:58:3c:6a:74:c3:
19:e3:c1:4e:38:4a:39:53:c0:21:e6:0f:b0:fd:27:13:ec:0b:
4e:c4:18:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH8ZuQ3W/Ud8w1UY4zWVhieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjIwNzE0MTExMDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWE1YmMxMGVjODQ1MWYxMDNlOTc1OTIyMGIwMTdhMTY4MTMzMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm79AglevvmaoIsutORv4dM3citDB
8WkPpPQiPwe9Su05iM93JLbGXSFFwsuPx2+gMUdGHo8YqsBRw7udDo1Qvs0d1SVP
CoIkas9EemcbyyJrhu6rlVituFquEuWrdW6xjFO6bcT92e3AYwsC0rXfpoJoNIeY
iO9UkONHpyhCzS3QfxHXnKDXI1iIVNfGzf1iTmLXH0eGyzxmPvB85Hlvhwluo45M
mvWkUI/ARmZmx+yWrk3ToznZ8f/DRwqoOPh4ytCcs4ebLk5m8Iyd7S2C59xZ97Ab
4Aj2HEWhAiIBxFzTyYG8ZlpGjZ6T+C/c8Nhw4UUJixQ0zBGkqHSW2omXZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWlvBDshFHxA+l1kiCwF6FoEzHQMB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvSmFXOEVPeUVVZkVENlhXU0lMQVhvV2dUTWRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+eEMA0G
CSqGSIb3DQEBCwUAA4IBAQAEbHdxR1jrNcgjlh+N+vsNWayH2uA9vXPzlN9ybsqZ
JA9Cc7dLHpr/vv9UEkq3bsQ1mwFIdgyQeEJmjRt4RCLARRYUvPbMLUywqir6JDz9
3qjYnZKekPc/NZbFUtEEWS0VpN8VoyM8N/lOATn9zMSv3ZPHXzp/wrlyxojtYuXh
zkdMjM7tyzsnqpIlWke8Ps8dXZfN8gB/ICpnz2XVvUF/8enmvEOzZhNlZl4/2hPb
PnadfbDSwEd3majCoUAGtc+JM+ESpCLKcsuhFEL05aUcChke5MekieKSDmzqT9Uo
r0kYjtJeWDxqdMMZ48FOOEo5U8Ah5g+w/ScT7AtOxBgU
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:25 2023 by rpki-client on console-fra.rpki-client.org