Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/jBJzj6ZJv1Y6pAJ8n5XeyBwskJ4.roa
File: jBJzj6ZJv1Y6pAJ8n5XeyBwskJ4.roa (raw, json)
Hash identifier: ZaoSNN/5f38wNBiV0u1rk+e05ZDSRq6hEz43Kw9+9Xg=
Subject key identifier: 8C:12:73:8F:A6:49:BF:56:3A:A4:02:7C:9F:95:DE:C8:1C:2C:90:9E
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0DE6CA42
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/jBJzj6ZJv1Y6pAJ8n5XeyBwskJ4.roa
Signing time: Sat 01 Jan 2022 10:54:09 +0000
ROA not before: Sat 01 Jan 2022 10:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 185.226.204.0/22 maxlen: 24
185.101.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233228866 (0xde6ca42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 10:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c12738fa649bf563aa4027c9f95dec81c2c909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:4d:43:8f:4c:9e:3a:c4:28:9e:b1:20:5b:
36:c8:a7:6d:e0:07:a2:8e:63:68:69:38:fd:a4:fa:
a7:58:71:c3:7f:5b:ca:fc:95:e6:01:a0:30:cc:dc:
39:b9:58:e7:9f:f1:09:97:8e:83:77:2d:09:26:ff:
32:86:f1:cb:db:7b:25:21:94:ce:e9:9a:86:d5:b2:
a4:a2:b1:2d:d9:f0:fd:15:89:ca:6f:5b:3f:bf:06:
df:80:29:02:23:77:1d:3b:f1:32:ed:5a:24:c2:1d:
27:ca:d6:3f:4a:7b:e4:7b:19:31:e7:be:39:58:6b:
a0:61:a1:12:d0:0f:16:72:fb:e8:5f:4f:ae:82:b6:
5f:d0:db:4c:4e:9d:ca:ab:7f:e4:d3:e6:3d:95:d9:
e2:fa:48:f7:02:54:b5:3e:c2:6a:e0:11:14:11:14:
d8:51:28:b6:d0:c5:a4:62:98:ea:8d:c1:8b:4b:bd:
e2:9d:a6:a0:a2:f3:65:15:f6:5a:75:8f:b4:13:21:
60:7d:8d:f4:c2:08:2a:7c:ff:05:6e:2b:0e:e1:08:
e7:c2:e3:9d:44:52:25:90:c9:5a:fd:6c:63:3f:cc:
3b:aa:9e:99:ee:9c:71:84:05:83:4e:f9:fc:dd:0f:
00:54:50:6c:4b:44:49:08:65:92:d7:0c:14:3b:06:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:12:73:8F:A6:49:BF:56:3A:A4:02:7C:9F:95:DE:C8:1C:2C:90:9E
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/jBJzj6ZJv1Y6pAJ8n5XeyBwskJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.252.0/22
185.226.204.0/22
Signature Algorithm: sha256WithRSAEncryption
58:fa:2a:0e:63:b8:51:2e:af:a6:cb:e5:99:9c:da:c6:80:39:
74:b6:32:57:3f:6b:0f:01:24:49:fa:63:03:a8:29:e3:b4:89:
82:99:7d:27:0c:33:f8:8d:74:99:ed:05:f6:29:e2:7a:5e:c1:
95:4d:3c:a8:ac:57:90:8a:e4:55:bc:d0:60:01:de:6e:26:c4:
02:36:2b:08:c1:6a:cb:62:1e:38:c2:1c:ca:c1:ba:1b:e5:bd:
db:a5:8d:1e:97:e7:ce:20:75:e3:9c:8b:ea:59:57:02:23:9f:
d9:2b:51:64:6e:11:b0:3a:56:bf:5f:f5:40:dd:6f:15:a4:42:
5a:1c:8d:bd:c3:b2:c0:ae:a3:6d:7c:bf:bb:7c:22:d6:e9:ed:
da:72:f2:a5:59:67:3a:f3:5a:96:a8:be:ea:56:23:8c:c4:45:
d8:b9:2c:c9:1f:f1:c4:8a:b9:b0:6b:7a:86:b6:75:9a:b7:e4:
50:2c:90:d7:1a:85:84:23:53:23:03:81:d8:87:9d:f5:e8:82:
d0:f5:3a:bc:89:cd:06:47:c4:cf:05:2a:32:0e:a9:77:f1:5c:
cf:7e:d8:90:b9:67:5e:2d:9e:51:1b:4d:49:1d:4e:d5:46:17:
5b:4c:0d:a8:60:2f:7c:3d:e0:8b:5f:1c:a0:d3:f0:42:02:c9:
3a:2a:df:b7
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDebKQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MjY2MDViNGQyN2YxMzk2OGU4Nzk0ZTZlZjA5MTIyMzc0ODgxN2Q4MB4XDTIyMDEw
MTEwNTQwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGMxMjczOGZhNjQ5
YmY1NjNhYTQwMjdjOWY5NWRlYzgxYzJjOTA5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANc6TUOPTJ46xCiesSBbNsinbeAHoo5jaGk4/aT6p1hxw39b
yvyV5gGgMMzcOblY55/xCZeOg3ctCSb/Mobxy9t7JSGUzumahtWypKKxLdnw/RWJ
ym9bP78G34ApAiN3HTvxMu1aJMIdJ8rWP0p75HsZMee+OVhroGGhEtAPFnL76F9P
roK2X9DbTE6dyqt/5NPmPZXZ4vpI9wJUtT7CauARFBEU2FEottDFpGKY6o3Bi0u9
4p2moKLzZRX2WnWPtBMhYH2N9MIIKnz/BW4rDuEI58LjnURSJZDJWv1sYz/MO6qe
me6ccYQFg075/N0PAFRQbEtESQhlktcMFDsGtPsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSMEnOPpkm/VjqkAnyfld7IHCyQnjAfBgNVHSMEGDAWgBSCZgW00n8Tlo6H
lObvCRIjdIgX2DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dtWUZ0TkpfRTVhT2g1VG03d2tTSTNTSUY5Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvZmJjYzMyLTMzYzgtNDFmZi04OWZhLTJkMTkxOGJhMWMwZS8x
L2pCSnpqNlpKdjFZNnBBSjhuNVhleUJ3c2tKNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
ZmJjYzMyLTMzYzgtNDFmZi04OWZhLTJkMTkxOGJhMWMwZS8xL2dtWUZ0TkpfRTVh
T2g1VG03d2tTSTNTSUY5Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArll/AMEArnizDANBgkqhkiG9w0B
AQsFAAOCAQEAWPoqDmO4US6vpsvlmZzaxoA5dLYyVz9rDwEkSfpjA6gp47SJgpl9
Jwwz+I10me0F9iniel7BlU08qKxXkIrkVbzQYAHebibEAjYrCMFqy2IeOMIcysG6
G+W926WNHpfnziB145yL6llXAiOf2StRZG4RsDpWv1/1QN1vFaRCWhyNvcOywK6j
bXy/u3wi1unt2nLypVlnOvNalqi+6lYjjMRF2LksyR/xxIq5sGt6hrZ1mrfkUCyQ
1xqFhCNTIwOB2Ied9eiC0PU6vInNBkfEzwUqMg6pd/Fcz37YkLlnXi2eURtNSR1O
1UYXW0wNqGAvfD3gi18coNPwQgLJOirftw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org