Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/JN1lJsnPZ-Cx913qfbzI8bpG0ck.roa
File: JN1lJsnPZ-Cx913qfbzI8bpG0ck.roa (raw, json)
Hash identifier: PTftHooFCoCtFmJDvoUBnWgMczz79/x5nM9qu6ukUjg=
Subject key identifier: 24:DD:65:26:C9:CF:67:E0:B1:F7:5D:EA:7D:BC:C8:F1:BA:46:D1:C9
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 0181DD072D2120FA46C2922E637AAB2EC6A2
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/JN1lJsnPZ-Cx913qfbzI8bpG0ck.roa
Signing time: Fri 08 Jul 2022 08:57:23 +0000
ROA not before: Fri 08 Jul 2022 08:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 194.1.132.0/22 maxlen: 22
194.1.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:07:2d:21:20:fa:46:c2:92:2e:63:7a:ab:2e:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jul 8 08:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24dd6526c9cf67e0b1f75dea7dbcc8f1ba46d1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:5e:8b:34:70:ba:83:ca:97:35:b9:35:18:
3f:ec:b5:6f:79:b9:32:88:e2:b5:85:db:58:c0:16:
3a:57:7a:05:84:32:b6:f1:c0:47:60:ae:21:a2:da:
2d:8f:3b:18:e1:62:27:fe:a4:1a:5c:ac:88:23:f2:
3b:68:bc:c3:c7:2f:13:02:76:2c:42:0a:74:bc:75:
4a:70:b9:0c:22:d0:4c:d4:9d:e2:e8:75:ff:42:23:
86:69:a1:70:f3:b4:4f:69:35:0a:fa:5c:ec:34:ca:
9f:6f:65:e8:d9:a5:0e:fd:47:2e:18:49:a3:e7:20:
5b:a3:9b:9d:dd:95:67:d1:81:79:70:8d:5a:06:6a:
26:1d:3f:03:4e:42:d5:53:c4:97:f2:d3:46:13:c2:
77:19:c2:4f:4c:95:86:32:c0:d2:ce:f8:da:89:8d:
fc:73:1a:ad:20:09:c8:2d:66:b0:92:82:4a:12:b6:
e6:79:ac:18:31:29:21:e9:68:fa:eb:08:10:78:c8:
24:13:d7:05:37:0f:ee:7b:3d:5d:e7:60:73:3c:40:
55:bf:64:9d:b8:37:57:d3:49:78:ac:1c:99:73:a7:
8a:9f:e0:50:e6:a4:e7:b4:ca:ef:e2:86:9b:01:9e:
22:91:73:1e:2a:ae:10:d2:ab:c9:e3:67:38:92:4a:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:65:26:C9:CF:67:E0:B1:F7:5D:EA:7D:BC:C8:F1:BA:46:D1:C9
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/JN1lJsnPZ-Cx913qfbzI8bpG0ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.132.0-194.1.139.255
Signature Algorithm: sha256WithRSAEncryption
71:60:1a:86:53:c0:b5:b5:bb:88:06:20:30:cb:ce:36:b8:fe:
09:79:7a:94:67:44:f5:d6:85:49:f4:cd:ee:1b:38:9b:94:d8:
54:c2:e4:42:d0:7d:62:e8:58:39:bc:6e:0e:ed:98:2e:9f:d0:
32:8e:11:79:05:a4:0f:3e:87:84:55:9a:7c:71:06:15:f4:19:
89:64:b2:15:29:06:ee:cb:e3:bc:17:b6:bd:33:ea:f6:42:42:
32:8d:1f:4c:2b:45:e1:ed:85:b7:84:3e:40:e9:88:53:c6:b8:
4f:86:3a:47:ab:8e:48:4d:19:59:39:34:8d:4b:b1:d0:4a:ed:
87:bd:e6:9e:69:f3:4e:a1:70:c0:fd:59:61:e6:94:de:1a:09:
cb:b9:1d:ac:0e:0a:69:a9:70:f0:1c:30:cd:f8:74:44:50:3b:
91:4a:8f:0b:26:67:60:ac:07:3e:30:1b:3d:8a:6e:95:e6:5e:
5f:c9:2b:cd:b2:d8:a6:f7:39:be:6b:86:7d:e8:5b:72:f3:e8:
c1:db:63:ef:34:7c:ef:0e:e3:fe:d9:c6:fe:8f:b3:b3:69:da:
c7:3e:80:c8:04:83:86:cc:35:0a:1d:88:4c:d3:cd:b7:da:4f:
85:d7:15:26:f0:d0:44:1a:d6:24:60:0e:97:54:cd:e3:8f:31:
cf:a8:15:95
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYHdBy0hIPpGwpIuY3qrLsaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0
N2U4MzkwHhcNMjIwNzA4MDg1NzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGRkNjUyNmM5Y2Y2N2UwYjFmNzVkZWE3ZGJjYzhmMWJhNDZkMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JteizRwuoPKlzW5NRg/7LVvebky
iOK1hdtYwBY6V3oFhDK28cBHYK4hototjzsY4WIn/qQaXKyII/I7aLzDxy8TAnYs
Qgp0vHVKcLkMItBM1J3i6HX/QiOGaaFw87RPaTUK+lzsNMqfb2Xo2aUO/UcuGEmj
5yBbo5ud3ZVn0YF5cI1aBmomHT8DTkLVU8SX8tNGE8J3GcJPTJWGMsDSzvjaiY38
cxqtIAnILWawkoJKErbmeawYMSkh6Wj66wgQeMgkE9cFNw/uez1d52BzPEBVv2Sd
uDdX00l4rByZc6eKn+BQ5qTntMrv4oabAZ4ikXMeKq4Q0qvJ42c4kkoiOwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCTdZSbJz2fgsfdd6n28yPG6RtHJMB8GA1UdIwQY
MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct
NTA0YzhmYzIyMGVhLzEvSk4xbEpzblBaLUN4OTEzcWZiekk4YnBHMGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh
LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCAYQD
BALCAYgwDQYJKoZIhvcNAQELBQADggEBAHFgGoZTwLW1u4gGIDDLzja4/gl5epRn
RPXWhUn0ze4bOJuU2FTC5ELQfWLoWDm8bg7tmC6f0DKOEXkFpA8+h4RVmnxxBhX0
GYlkshUpBu7L47wXtr0z6vZCQjKNH0wrReHthbeEPkDpiFPGuE+GOkerjkhNGVk5
NI1LsdBK7Ye95p5p806hcMD9WWHmlN4aCcu5HawOCmmpcPAcMM34dERQO5FKjwsm
Z2CsBz4wGz2KbpXmXl/JK82y2Kb3Ob5rhn3oW3Lz6MHbY+80fO8O4/7Zxv6Ps7Np
2sc+gMgEg4bMNQodiEzTzbfaT4XXFSbw0EQa1iRgDpdUzeOPMc+oFZU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org