Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/J8EkHL11zeJ6zRWFBhaL5xaD3vg.roa
File: J8EkHL11zeJ6zRWFBhaL5xaD3vg.roa (raw, json)
Hash identifier: RyoDumlz5xZVYbp80M/G7e+2OeaygT0SkMWeOFwUrh4=
Subject key identifier: 27:C1:24:1C:BD:75:CD:E2:7A:CD:15:85:06:16:8B:E7:16:83:DE:F8
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018570CBD4133CFAE1D78B88AF9CD83A4CB0
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/J8EkHL11zeJ6zRWFBhaL5xaD3vg.roa
Signing time: Mon 02 Jan 2023 04:44:44 +0000
ROA not before: Mon 02 Jan 2023 04:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30880
IP address blocks: 194.236.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d4:13:3c:fa:e1:d7:8b:88:af:9c:d8:3a:4c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 04:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27c1241cbd75cde27acd158506168be71683def8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:75:1e:6b:39:fe:3f:30:28:e3:17:f7:7d:
11:2e:5b:d8:62:1a:bc:f2:f1:06:94:47:6b:d5:f9:
7a:1e:f2:26:55:88:33:73:23:34:c6:1f:b7:b2:41:
3f:6d:12:e5:26:3e:03:fa:1c:48:6c:5a:89:e6:b5:
6a:16:47:fb:7c:58:90:5f:be:bf:3c:ff:8e:19:e0:
fc:06:7c:1e:7f:00:ae:c4:0c:13:62:00:95:4a:19:
4d:47:8c:dc:6f:be:12:97:70:a8:ab:bc:58:bb:d7:
b1:90:94:5a:3b:4c:9b:73:00:14:5f:ec:ee:46:82:
8e:12:70:2a:e4:4f:68:fe:05:18:7f:2b:19:b5:f4:
1b:46:4e:5b:1b:6b:a9:96:d1:80:a2:01:0c:23:12:
a4:e3:da:42:73:06:da:85:6f:22:a8:a3:9d:16:8f:
14:30:7f:1e:41:5c:71:9c:fe:c5:66:89:a8:bc:cf:
78:a1:73:db:de:39:58:5e:4a:03:ce:bd:33:44:f4:
45:32:88:fd:dd:a3:01:a9:8d:5d:25:b3:bb:6a:00:
ed:64:ea:bf:18:44:89:f9:81:80:54:bd:06:03:b3:
e9:58:1f:20:5c:8a:12:0c:ef:a0:b9:ad:b7:de:07:
d6:80:42:90:99:36:80:de:03:fd:2c:22:7c:51:10:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:24:1C:BD:75:CD:E2:7A:CD:15:85:06:16:8B:E7:16:83:DE:F8
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/J8EkHL11zeJ6zRWFBhaL5xaD3vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.236.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:3d:30:dc:2f:f6:88:46:79:79:ce:fe:7d:2e:95:23:a7:3e:
e3:4b:72:7b:88:67:85:fd:44:4a:bd:2f:29:f7:ea:16:f1:3c:
ca:ce:26:44:32:85:90:61:a4:42:b3:bd:f7:c4:22:16:58:2f:
38:da:d7:6a:3f:5f:9e:88:87:4c:e4:a3:ad:61:3c:e4:76:6a:
87:56:24:15:1b:91:e7:0c:ce:93:5c:ef:2b:47:09:51:a4:3f:
22:0c:fb:b8:54:0f:7c:9a:a6:d3:3e:70:31:ed:0e:c5:70:ad:
c8:99:9a:db:2e:eb:09:3c:46:e1:7e:21:59:d9:c1:f5:80:56:
26:2d:3b:a4:f9:5d:19:b2:da:8e:32:5c:c4:99:9a:b2:7d:b2:
a7:f8:1f:e3:f0:ab:74:76:4b:0a:f3:cd:5f:d0:bd:39:62:0a:
f8:18:b4:49:54:31:74:8f:e6:2d:27:4d:af:9f:9c:ab:96:5c:
d9:60:f8:51:a6:a9:86:b3:ba:8f:a8:ad:05:41:6e:de:4d:0a:
9e:48:99:0c:c0:ca:7d:1a:1f:00:35:20:21:ad:e1:81:8a:04:
bf:bd:7d:48:f4:c1:f7:ac:9a:e4:37:16:28:5a:8e:b2:11:bf:
cb:0f:8b:3f:bd:22:cd:30:c1:0e:7f:7b:81:90:6b:1b:98:6e:
8e:d2:33:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwy9QTPPrh14uIr5zYOkywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1
YmUxOTAwHhcNMjMwMTAyMDQ0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2MxMjQxY2JkNzVjZGUyN2FjZDE1ODUwNjE2OGJlNzE2ODNkZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIZ1Hms5/j8wKOMX930RLlvYYhq8
8vEGlEdr1fl6HvImVYgzcyM0xh+3skE/bRLlJj4D+hxIbFqJ5rVqFkf7fFiQX76/
PP+OGeD8BnwefwCuxAwTYgCVShlNR4zcb74Sl3Coq7xYu9exkJRaO0ybcwAUX+zu
RoKOEnAq5E9o/gUYfysZtfQbRk5bG2upltGAogEMIxKk49pCcwbahW8iqKOdFo8U
MH8eQVxxnP7FZomovM94oXPb3jlYXkoDzr0zRPRFMoj93aMBqY1dJbO7agDtZOq/
GESJ+YGAVL0GA7PpWB8gXIoSDO+gua233gfWgEKQmTaA3gP9LCJ8URB0LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCfBJBy9dc3ies0VhQYWi+cWg974MB8GA1UdIwQY
MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt
NjA4NTY0ODM5ZmQwLzEvSjhFa0hMMTF6ZUo2elJXRkJoYUw1eGFEM3ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw
LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwux8MA0G
CSqGSIb3DQEBCwUAA4IBAQDGPTDcL/aIRnl5zv59LpUjpz7jS3J7iGeF/URKvS8p
9+oW8TzKziZEMoWQYaRCs733xCIWWC842tdqP1+eiIdM5KOtYTzkdmqHViQVG5Hn
DM6TXO8rRwlRpD8iDPu4VA98mqbTPnAx7Q7FcK3ImZrbLusJPEbhfiFZ2cH1gFYm
LTuk+V0ZstqOMlzEmZqyfbKn+B/j8Kt0dksK881f0L05Ygr4GLRJVDF0j+YtJ02v
n5yrllzZYPhRpqmGs7qPqK0FQW7eTQqeSJkMwMp9Gh8ANSAhreGBigS/vX1I9MH3
rJrkNxYoWo6yEb/LD4s/vSLNMMEOf3uBkGsbmG6O0jMZ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:17 2025 by rpki-client