Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/ju3ZJvNi2HWewiOhqLnzs_gHplw.roa
File: ju3ZJvNi2HWewiOhqLnzs_gHplw.roa (raw, json)
Hash identifier: 3ziVdU3UkrkFQZx9O6p68LraDy9RrFaEaTPr1JvJ7TU=
Subject key identifier: 8E:ED:D9:26:F3:62:D8:75:9E:C2:23:A1:A8:B9:F3:B3:F8:07:A6:5C
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 059BDABE
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/ju3ZJvNi2HWewiOhqLnzs_gHplw.roa
Signing time: Sat 01 Jan 2022 07:04:00 +0000
ROA not before: Sat 01 Jan 2022 07:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43704
IP address blocks: 185.248.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94100158 (0x59bdabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 07:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8eedd926f362d8759ec223a1a8b9f3b3f807a65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:04:aa:96:f5:ce:12:8b:03:c9:69:d5:ba:
e8:08:c5:95:75:33:06:79:c2:06:b0:80:b0:4d:3d:
1a:57:91:fd:84:c3:ce:ed:cc:a3:e3:f3:44:c9:6b:
43:b5:c3:4d:a6:59:f8:2c:27:44:7a:0a:0c:57:ea:
0a:6d:cb:00:96:75:20:61:29:19:5d:62:c7:39:3d:
79:25:ce:b9:52:b0:e4:06:b3:ab:54:9f:c0:f6:ea:
19:86:7e:0d:bb:f8:ae:4d:51:9b:7f:e7:2c:90:80:
61:59:d5:eb:a1:e5:7e:0a:a9:3f:dd:f7:80:3e:d3:
6f:da:02:a0:44:d7:0b:d0:bd:c1:a2:34:7b:e8:94:
d5:91:a6:ef:2b:91:fe:c1:11:a1:0d:11:85:c3:c4:
79:42:24:e2:41:69:bc:11:64:ec:f2:58:83:93:58:
0a:8b:15:4d:fb:fd:21:23:a6:0c:51:50:09:1e:e2:
cc:a6:fc:d9:12:6b:71:89:7d:48:e8:12:6c:3e:30:
d4:57:0f:9d:fd:3a:4d:d3:12:1e:d9:a9:ea:ec:2d:
6b:90:b4:b7:b4:d7:52:2d:0b:d6:cc:82:43:fe:bd:
f3:ee:ec:6c:ce:42:aa:94:9c:15:db:43:0c:33:c7:
2a:08:23:63:56:28:1a:c7:43:bf:17:17:6d:35:e8:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:ED:D9:26:F3:62:D8:75:9E:C2:23:A1:A8:B9:F3:B3:F8:07:A6:5C
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/ju3ZJvNi2HWewiOhqLnzs_gHplw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:66:0d:69:8c:40:f3:c3:c6:12:18:21:4a:28:51:71:9e:7f:
bb:53:08:57:8f:7b:54:26:61:7c:4f:05:d0:68:77:15:4c:44:
3a:b1:88:f9:f3:18:74:6b:ad:1c:00:97:eb:e7:a5:50:97:dd:
6b:e0:fc:a3:d9:5a:c2:0f:86:fe:c4:9c:6f:53:d9:c0:ae:2a:
67:73:08:cc:cc:0b:54:1e:1a:ed:71:fe:29:42:75:5c:81:23:
fd:48:49:86:c8:03:50:7a:95:4a:10:19:5c:9d:56:1b:4c:d0:
2a:bd:01:ef:4c:02:dd:e8:18:55:ba:97:5b:69:0b:b5:b5:7e:
73:fe:fc:d8:85:fa:dc:ca:b7:b4:0e:87:cf:4b:2f:7d:e7:43:
fe:bd:93:73:67:43:7a:dd:d3:f0:81:96:a9:66:f5:39:a4:c4:
46:ed:2c:3f:12:f4:47:7f:f4:17:b1:61:98:f1:be:b0:ca:96:
89:6a:bf:4d:49:2f:b8:5d:8f:48:dc:0c:e9:07:cd:df:f6:31:
33:89:bb:54:90:b2:5d:d6:e2:bb:00:48:b8:bb:3c:7b:a1:a6:
8a:29:e4:9b:25:08:8f:54:bd:01:1a:1f:2d:a4:1c:83:97:3d:
86:aa:d1:31:99:06:8d:e3:4d:6b:63:bc:66:81:2c:df:58:68:
c1:47:40:49
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBZvavjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2VmNThkNGNmYTM1NTQzZjg0ODhhMjc1NmU2OTI0ZTY0N2I0NTg5MB4XDTIyMDEw
MTA3MDQwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGVlZGQ5MjZmMzYy
ZDg3NTllYzIyM2ExYThiOWYzYjNmODA3YTY1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKyXBKqW9c4SiwPJadW66AjFlXUzBnnCBrCAsE09GleR/YTD
zu3Mo+PzRMlrQ7XDTaZZ+CwnRHoKDFfqCm3LAJZ1IGEpGV1ixzk9eSXOuVKw5Aaz
q1SfwPbqGYZ+Dbv4rk1Rm3/nLJCAYVnV66HlfgqpP933gD7Tb9oCoETXC9C9waI0
e+iU1ZGm7yuR/sERoQ0RhcPEeUIk4kFpvBFk7PJYg5NYCosVTfv9ISOmDFFQCR7i
zKb82RJrcYl9SOgSbD4w1FcPnf06TdMSHtmp6uwta5C0t7TXUi0L1syCQ/698+7s
bM5CqpScFdtDDDPHKggjY1YoGsdDvxcXbTXo8+ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSO7dkm82LYdZ7CI6GoufOz+AemXDAfBgNVHSMEGDAWgBTc71jUz6NVQ/hI
iidW5pJOZHtFiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNPOVkxTS1qVlVQNFNJb25WdWFTVG1SN1JZay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWEvZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8x
L2p1M1pKdk5pMkhXZXdpT2hxTG56c19nSHBsdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEv
ZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8xLzNPOVkxTS1qVlVQ
NFNJb25WdWFTVG1SN1JZay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn4iTANBgkqhkiG9w0BAQsFAAOC
AQEAjWYNaYxA88PGEhghSihRcZ5/u1MIV497VCZhfE8F0Gh3FUxEOrGI+fMYdGut
HACX6+elUJfda+D8o9lawg+G/sScb1PZwK4qZ3MIzMwLVB4a7XH+KUJ1XIEj/UhJ
hsgDUHqVShAZXJ1WG0zQKr0B70wC3egYVbqXW2kLtbV+c/782IX63Mq3tA6Hz0sv
fedD/r2Tc2dDet3T8IGWqWb1OaTERu0sPxL0R3/0F7FhmPG+sMqWiWq/TUkvuF2P
SNwM6QfN3/YxM4m7VJCyXdbiuwBIuLs8e6GmiinkmyUIj1S9ARofLaQcg5c9hqrR
MZkGjeNNa2O8ZoEs31howUdASQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-fra.rpki-client.org