Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/jKhCV5TPQzH7aOYFNNTbVhnfC98.roa
File: jKhCV5TPQzH7aOYFNNTbVhnfC98.roa (raw, json)
Hash identifier: 5loqFK0oiHAHXaiT39uxdkfC0Pcav0Jf1Bk1v1eugLQ=
Subject key identifier: 8C:A8:42:57:94:CF:43:31:FB:68:E6:05:34:D4:DB:56:19:DF:0B:DF
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 374FDCF4
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/jKhCV5TPQzH7aOYFNNTbVhnfC98.roa
Signing time: Sat 01 Jan 2022 15:06:59 +0000
ROA not before: Sat 01 Jan 2022 15:06:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 185.11.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927980788 (0x374fdcf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 1 15:06:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ca8425794cf4331fb68e60534d4db5619df0bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:32:7d:e2:f6:db:f6:76:f9:7b:7f:88:30:a3:
7d:e0:ea:4a:dc:cd:e5:eb:3f:ac:00:d1:54:61:66:
37:e1:9b:e8:94:65:27:8a:e1:78:5c:7f:f8:f2:25:
94:36:de:fc:76:03:02:db:8e:f4:15:69:68:66:aa:
c0:f5:51:09:97:db:08:fd:50:46:e7:e8:04:b6:e6:
2c:cc:78:f7:e7:42:2d:f9:26:7e:1f:a7:c3:5c:9a:
d3:2b:47:d1:3d:c0:1d:22:2d:3f:b6:d9:76:62:70:
9f:9e:8b:63:b3:09:c5:4e:fc:ff:84:6f:11:72:ba:
5b:af:0e:36:62:b5:34:3e:8f:99:cc:5a:5e:eb:d7:
58:b1:da:33:8c:8e:1f:21:53:91:0d:09:39:82:fe:
be:bf:b0:a6:26:24:a3:57:72:4f:2d:27:e6:38:83:
8b:98:3c:0f:35:68:21:30:62:5c:da:96:43:d0:b8:
23:39:2b:f7:d0:1f:70:11:49:fe:38:c8:d6:69:4b:
db:41:50:c5:84:65:43:7b:87:41:db:9f:7d:e3:27:
be:71:5b:9e:09:32:d4:c7:40:58:08:0e:26:6c:79:
60:57:e4:f7:21:4a:69:ab:51:cb:db:86:b3:87:06:
cc:d1:a5:4f:49:85:6d:82:0c:ab:af:b1:28:ec:18:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:42:57:94:CF:43:31:FB:68:E6:05:34:D4:DB:56:19:DF:0B:DF
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/jKhCV5TPQzH7aOYFNNTbVhnfC98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.143.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a1:8b:b6:f5:ac:44:ce:f2:2c:b5:9c:02:16:ff:15:d0:47:
35:30:89:dd:a9:9e:9d:be:64:3d:db:49:1b:9b:35:5f:46:26:
ea:02:6b:24:6e:c4:83:a6:bf:f4:ff:55:03:32:1f:ed:af:c3:
0c:16:e5:1a:5a:db:1c:2c:01:0a:4d:2e:5e:b7:84:8f:49:42:
5a:e6:a2:a3:d0:73:c0:7a:f0:fd:85:20:f3:88:90:9d:36:85:
c6:14:eb:a7:58:cc:94:7e:27:51:78:7a:0a:f9:03:46:cd:4f:
a7:5e:89:c0:35:73:79:a8:a1:ed:a9:96:12:76:f1:7e:6b:61:
85:e9:1c:13:90:37:4a:fb:1c:70:38:d6:47:f2:d2:fd:f2:27:
a7:c3:8e:21:8a:a7:11:9a:f3:5a:40:2e:39:0c:5f:a3:2f:54:
72:db:d6:a2:bf:5a:54:ed:8f:74:20:eb:da:03:dc:6b:07:81:
ab:1a:30:94:f6:83:14:f0:f6:99:6e:46:2f:4a:cb:90:85:e5:
cc:f3:de:22:ac:f1:4a:17:d2:9f:9c:9c:47:87:99:ad:33:14:
e9:52:46:f8:81:7c:1f:65:62:2c:d3:d7:e8:70:2c:2f:56:5e:
1d:8f:46:69:c4:1f:b2:f4:76:92:4d:73:97:0f:d5:35:3f:a5:
4c:44:a4:71
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN0/c9DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OGIzZWVkMWM3YWNhNjM2ZDYyNDU4NTJiODAyZTBlNzM3NTRkZjYzMB4XDTIyMDEw
MTE1MDY1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGNhODQyNTc5NGNm
NDMzMWZiNjhlNjA1MzRkNGRiNTYxOWRmMGJkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANsyfeL22/Z2+Xt/iDCjfeDqStzN5es/rADRVGFmN+Gb6JRl
J4rheFx/+PIllDbe/HYDAtuO9BVpaGaqwPVRCZfbCP1QRufoBLbmLMx49+dCLfkm
fh+nw1ya0ytH0T3AHSItP7bZdmJwn56LY7MJxU78/4RvEXK6W68ONmK1ND6Pmcxa
XuvXWLHaM4yOHyFTkQ0JOYL+vr+wpiYko1dyTy0n5jiDi5g8DzVoITBiXNqWQ9C4
Izkr99AfcBFJ/jjI1mlL20FQxYRlQ3uHQduffeMnvnFbngky1MdAWAgOJmx5YFfk
9yFKaatRy9uGs4cGzNGlT0mFbYIMq6+xKOwYxhcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSMqEJXlM9DMfto5gU01NtWGd8L3zAfBgNVHSMEGDAWgBTos+7Rx6ymNtYk
WFK4AuDnN1TfYzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZMUHUwY2VzcGpiV0pGaFN1QUxnNXpkVTMyTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvMTc3MzI5LTI4Y2QtNDg2NC05ZTE2LTk0NjQwNGVjMWFhNC8x
L2pLaENWNVRQUXpIN2FPWUZOTlRiVmhuZkM5OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
MTc3MzI5LTI4Y2QtNDg2NC05ZTE2LTk0NjQwNGVjMWFhNC8xLzZMUHUwY2VzcGpi
V0pGaFN1QUxnNXpkVTMyTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkLjzANBgkqhkiG9w0BAQsFAAOC
AQEAGaGLtvWsRM7yLLWcAhb/FdBHNTCJ3amenb5kPdtJG5s1X0Ym6gJrJG7Eg6a/
9P9VAzIf7a/DDBblGlrbHCwBCk0uXreEj0lCWuaio9BzwHrw/YUg84iQnTaFxhTr
p1jMlH4nUXh6CvkDRs1Pp16JwDVzeaih7amWEnbxfmthhekcE5A3SvsccDjWR/LS
/fInp8OOIYqnEZrzWkAuOQxfoy9UctvWor9aVO2PdCDr2gPcaweBqxowlPaDFPD2
mW5GL0rLkIXlzPPeIqzxShfSn5ycR4eZrTMU6VJG+IF8H2ViLNPX6HAsL1ZeHY9G
acQfsvR2kk1zlw/VNT+lTESkcQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:30 2024 by rpki-client on console-ams.rpki-client.org