Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/j8lrhzrcnFRspDl9lSwNuQZgzmQ.roa
File: j8lrhzrcnFRspDl9lSwNuQZgzmQ.roa (raw, json)
Hash identifier: HN/td5OvAKaEYRa4svciI8pqF+KrXjgmWBg2/IFYR44=
Subject key identifier: 8F:C9:6B:87:3A:DC:9C:54:6C:A4:39:7D:95:2C:0D:B9:06:60:CE:64
Certificate issuer: /CN=5a15823b86adc7eebeee7a2d8b70e12dc9bbf5b5
Certificate serial: 01D389D4
Authority key identifier: 5A:15:82:3B:86:AD:C7:EE:BE:EE:7A:2D:8B:70:E1:2D:C9:BB:F5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhWCO4atx-6-7noti3DhLcm79bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/j8lrhzrcnFRspDl9lSwNuQZgzmQ.roa
Signing time: Sat 01 Jan 2022 13:57:10 +0000
ROA not before: Sat 01 Jan 2022 13:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 185.224.78.0/24 maxlen: 24
185.224.77.0/24 maxlen: 24
185.224.76.0/24 maxlen: 24
185.224.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30640596 (0x1d389d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a15823b86adc7eebeee7a2d8b70e12dc9bbf5b5
Validity
Not Before: Jan 1 13:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fc96b873adc9c546ca4397d952c0db90660ce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ee:6e:a7:e9:ed:7a:b6:a5:88:10:2b:ee:95:
b6:a9:54:b8:67:c3:9e:36:d9:c6:73:e6:0a:da:74:
b3:1f:43:14:59:15:40:2a:64:07:e3:82:29:a4:46:
54:0c:2a:be:0e:76:bf:d2:77:49:c9:23:0e:79:3e:
85:2f:4d:22:4a:cd:18:ec:a4:48:5f:5f:d3:11:23:
42:40:9d:bd:0e:c5:21:16:f0:cc:bc:3a:9d:14:4a:
2c:3c:9a:4a:ed:91:93:df:ef:68:ff:fc:ba:76:69:
f7:f2:3b:9c:1a:da:31:f6:b6:a2:2c:f3:f9:60:98:
01:2f:eb:73:51:17:88:4a:ba:0a:99:3b:d4:4f:73:
4c:6a:82:58:96:52:1a:92:6a:63:35:32:98:ab:12:
ce:c5:e9:5e:63:60:d3:4e:9f:26:1f:0f:de:f3:26:
33:7d:df:74:fe:02:92:7e:94:ce:7b:57:f2:56:24:
50:8d:85:f6:de:74:f4:a4:8c:ad:30:d2:cd:2f:53:
9f:ed:e6:34:be:6f:dd:8a:6e:d3:4b:34:45:e7:f1:
c5:c1:3a:bc:28:ac:31:d1:0b:bc:39:35:0a:db:84:
17:a6:e7:34:6e:2f:fd:d0:7b:28:88:f3:91:57:4a:
36:7d:2b:62:ab:be:3c:28:5e:30:56:1a:c3:b2:6b:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C9:6B:87:3A:DC:9C:54:6C:A4:39:7D:95:2C:0D:B9:06:60:CE:64
X509v3 Authority Key Identifier:
keyid:5A:15:82:3B:86:AD:C7:EE:BE:EE:7A:2D:8B:70:E1:2D:C9:BB:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhWCO4atx-6-7noti3DhLcm79bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/j8lrhzrcnFRspDl9lSwNuQZgzmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/WhWCO4atx-6-7noti3DhLcm79bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:ab:9c:1f:cc:74:a8:54:73:76:03:cd:9f:dc:aa:8a:97:3a:
b5:d3:85:6b:4f:7f:e3:d3:f9:46:ef:46:f2:8c:94:d3:a9:e4:
8f:e6:7b:4f:b4:3a:d9:01:fe:ab:c0:d4:84:23:c8:a2:82:29:
94:2b:cd:a4:69:1b:c3:c0:12:09:ea:7c:49:13:37:54:3e:b8:
fa:cb:c9:5e:48:9e:04:d4:7e:28:72:c9:33:f9:78:2a:46:25:
af:32:4d:03:67:65:7b:9f:ba:10:fd:7a:be:19:88:04:87:31:
fe:b4:a1:52:ae:53:48:a3:c4:61:38:53:db:21:37:88:ac:c8:
31:2f:ec:22:64:69:51:b8:d0:89:02:5b:7a:b1:88:76:20:62:
4e:94:1c:ba:4d:1a:cc:3d:24:85:80:c9:8b:de:16:58:d1:80:
61:ab:87:86:11:67:63:05:9f:e1:93:ee:74:8b:a9:f9:d6:08:
a2:0f:0c:85:b3:f3:e2:9f:3d:1a:4f:2c:b2:04:b5:ea:a9:e7:
ec:40:c3:9a:79:38:6c:dc:64:46:55:1b:37:87:be:ff:33:2f:
47:84:c2:cc:6b:3e:da:64:c8:f1:cb:09:0c:ff:36:bf:88:f8:
ed:7a:36:a6:6c:2a:bb:50:57:8b:f8:42:10:8b:11:3a:28:4a:
1f:35:a5:08
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAdOJ1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YTE1ODIzYjg2YWRjN2VlYmVlZTdhMmQ4YjcwZTEyZGM5YmJmNWI1MB4XDTIyMDEw
MTEzNTcxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGZjOTZiODczYWRj
OWM1NDZjYTQzOTdkOTUyYzBkYjkwNjYwY2U2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPDubqfp7Xq2pYgQK+6VtqlUuGfDnjbZxnPmCtp0sx9DFFkV
QCpkB+OCKaRGVAwqvg52v9J3SckjDnk+hS9NIkrNGOykSF9f0xEjQkCdvQ7FIRbw
zLw6nRRKLDyaSu2Rk9/vaP/8unZp9/I7nBraMfa2oizz+WCYAS/rc1EXiEq6Cpk7
1E9zTGqCWJZSGpJqYzUymKsSzsXpXmNg006fJh8P3vMmM33fdP4Ckn6UzntX8lYk
UI2F9t509KSMrTDSzS9Tn+3mNL5v3Ypu00s0RefxxcE6vCisMdELvDk1CtuEF6bn
NG4v/dB7KIjzkVdKNn0rYqu+PCheMFYaw7JrKnECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSPyWuHOtycVGykOX2VLA25BmDOZDAfBgNVHSMEGDAWgBRaFYI7hq3H7r7u
ei2LcOEtybv1tTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1doV0NPNGF0eC02LTdub3RpM0RoTGNtNzliVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTQvNmVmNGI5LTVlMzUtNDIzYy1iYmM0LTBhMmViZmMyYzg1MC8x
L2o4bHJoenJjbkZSc3BEbDlsU3dOdVFaZ3ptUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQv
NmVmNGI5LTVlMzUtNDIzYy1iYmM0LTBhMmViZmMyYzg1MC8xL1doV0NPNGF0eC02
LTdub3RpM0RoTGNtNzliVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArngTDANBgkqhkiG9w0BAQsFAAOC
AQEAq6ucH8x0qFRzdgPNn9yqipc6tdOFa09/49P5Ru9G8oyU06nkj+Z7T7Q62QH+
q8DUhCPIooIplCvNpGkbw8ASCep8SRM3VD64+svJXkieBNR+KHLJM/l4KkYlrzJN
A2dle5+6EP16vhmIBIcx/rShUq5TSKPEYThT2yE3iKzIMS/sImRpUbjQiQJberGI
diBiTpQcuk0azD0khYDJi94WWNGAYauHhhFnYwWf4ZPudIup+dYIog8MhbPz4p89
Gk8ssgS16qnn7EDDmnk4bNxkRlUbN4e+/zMvR4TCzGs+2mTI8csJDP82v4j47Xo2
pmwqu1BXi/hCEIsROihKHzWlCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:19 2024 by rpki-client on console-fra.rpki-client.org