Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/JGzAohdPz87C-soi8iNluuJrxW0.roa
File: JGzAohdPz87C-soi8iNluuJrxW0.roa (raw, json)
Hash identifier: tJCVpgSv1lp6xpp2Ch1ZsnAH9O80BHS5Q8D1Iz4o+bs=
Subject key identifier: 24:6C:C0:A2:17:4F:CF:CE:C2:FA:CA:22:F2:23:65:BA:E2:6B:C5:6D
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0183B9CCAC122F5BEB67861ED2C4C2D30E9D
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/JGzAohdPz87C-soi8iNluuJrxW0.roa
Signing time: Sat 08 Oct 2022 22:52:21 +0000
ROA not before: Sat 08 Oct 2022 22:52:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 95.214.176.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b9:cc:ac:12:2f:5b:eb:67:86:1e:d2:c4:c2:d3:0e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 8 22:52:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=246cc0a2174fcfcec2faca22f22365bae26bc56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:28:32:e5:d5:99:7a:8b:56:7d:fc:ab:bd:
6e:39:11:e6:7b:50:a7:51:b6:54:d4:56:fe:86:e3:
a3:a4:41:31:07:fe:d7:96:8e:d4:33:e8:79:a5:63:
7d:a3:de:ca:96:ca:7a:7f:bf:5e:79:3c:22:64:8d:
a9:84:3c:96:46:be:ad:49:c6:da:9e:17:93:2a:45:
85:72:f2:46:39:00:85:e1:91:27:43:4c:6a:46:61:
27:6e:ab:34:fc:1e:44:11:d5:3e:0b:66:02:8e:42:
80:38:cb:b6:33:82:aa:f5:09:09:7e:52:9b:e5:dc:
db:17:b9:60:eb:f2:8b:f3:26:ce:78:b0:29:8e:33:
f7:0c:80:56:92:f6:0f:9a:70:94:30:53:69:20:20:
9b:25:e8:59:2f:78:a1:1d:d8:f7:f9:0f:64:41:a0:
52:5f:bd:a8:bf:e1:5b:9b:1d:c1:f7:d8:c2:e2:1a:
39:e1:15:4c:02:a4:da:aa:66:19:e1:b0:71:53:ae:
6b:03:33:98:44:45:44:9a:f5:d1:4f:01:27:79:2a:
47:ed:a1:97:3f:ad:4c:d7:f1:09:82:0c:7e:55:14:
50:a7:fe:7e:ba:65:7f:68:de:e4:a8:09:c0:8d:74:
6c:ad:4d:56:4d:d5:d0:3c:a4:b3:f6:ef:bd:db:bd:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6C:C0:A2:17:4F:CF:CE:C2:FA:CA:22:F2:23:65:BA:E2:6B:C5:6D
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/JGzAohdPz87C-soi8iNluuJrxW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.176.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:c8:9f:aa:bc:6a:b6:eb:ab:67:d1:41:94:5a:fd:55:b5:88:
07:98:52:3b:ee:11:e3:a8:42:ff:df:02:3f:2f:1e:80:61:d3:
f7:c3:a4:6d:82:fc:6e:db:65:b4:2a:21:b7:fa:8c:fc:07:3a:
15:1e:73:56:ea:38:52:5d:74:da:01:96:22:b4:51:85:05:df:
21:2b:c6:90:4b:81:96:44:e0:3d:2e:9d:d6:3c:1a:d9:49:a7:
43:47:a7:bf:69:02:31:be:57:53:c7:80:81:d1:e6:a9:43:a8:
a0:04:79:1e:3b:80:bb:19:59:66:6c:ac:c7:d9:b9:d2:52:e9:
b9:56:80:a1:a9:0c:83:a9:17:af:dc:f7:8d:03:db:d2:f2:16:
54:b3:e7:8a:a9:31:fb:2b:00:b1:97:4c:80:88:62:aa:cd:26:
f0:59:d1:1e:3d:f8:f4:fa:ac:5f:9a:11:48:4c:c6:af:6c:72:
71:77:00:73:33:9f:27:64:70:d6:cc:20:17:25:55:eb:92:0d:
7c:e8:df:f9:bc:c9:7a:1e:c1:96:ca:d5:65:36:49:d3:57:d0:
01:99:82:42:9a:ac:0c:6a:e4:69:4e:ed:f1:2e:9f:b8:db:a2:
b6:a0:a3:84:7a:cf:1d:ae:00:17:de:4e:fa:76:77:8a:6c:3f:
f2:cb:b3:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYO5zKwSL1vrZ4Ye0sTC0w6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjIxMDA4MjI1MjIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDZjYzBhMjE3NGZjZmNlYzJmYWNhMjJmMjIzNjViYWUyNmJjNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiokoMuXVmXqLVn38q71uORHme1Cn
UbZU1Fb+huOjpEExB/7Xlo7UM+h5pWN9o97Klsp6f79eeTwiZI2phDyWRr6tScba
nheTKkWFcvJGOQCF4ZEnQ0xqRmEnbqs0/B5EEdU+C2YCjkKAOMu2M4Kq9QkJflKb
5dzbF7lg6/KL8ybOeLApjjP3DIBWkvYPmnCUMFNpICCbJehZL3ihHdj3+Q9kQaBS
X72ov+Fbmx3B99jC4ho54RVMAqTaqmYZ4bBxU65rAzOYREVEmvXRTwEneSpH7aGX
P61M1/EJggx+VRRQp/5+umV/aN7kqAnAjXRsrU1WTdXQPKSz9u+9271InQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCRswKIXT8/OwvrKIvIjZbria8VtMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvSkd6QW9oZFB6ODdDLXNvaThpTmx1dUpyeFcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX9awMA0G
CSqGSIb3DQEBCwUAA4IBAQCiyJ+qvGq266tn0UGUWv1VtYgHmFI77hHjqEL/3wI/
Lx6AYdP3w6Rtgvxu22W0KiG3+oz8BzoVHnNW6jhSXXTaAZYitFGFBd8hK8aQS4GW
ROA9Lp3WPBrZSadDR6e/aQIxvldTx4CB0eapQ6igBHkeO4C7GVlmbKzH2bnSUum5
VoChqQyDqRev3PeNA9vS8hZUs+eKqTH7KwCxl0yAiGKqzSbwWdEePfj0+qxfmhFI
TMavbHJxdwBzM58nZHDWzCAXJVXrkg186N/5vMl6HsGWytVlNknTV9ABmYJCmqwM
auRpTu3xLp+426K2oKOEes8drgAX3k76dneKbD/yy7Ny
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org