Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/JlqTA8497KKLczKvWidm78IMc6A.roa
File: JlqTA8497KKLczKvWidm78IMc6A.roa (raw, json)
Hash identifier: aM+jaF6feGpfc+mVSmKTjlAkLkyB1P5Wpv9Hgc7SBQY=
Subject key identifier: 26:5A:93:03:CE:3D:EC:A2:8B:73:32:AF:5A:27:66:EF:C2:0C:73:A0
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 01153412
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/JlqTA8497KKLczKvWidm78IMc6A.roa
Signing time: Fri 17 Jun 2022 09:36:44 +0000
ROA not before: Fri 17 Jun 2022 09:36:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50414
IP address blocks: 212.46.55.0/24 maxlen: 24
2a12:bc0:2::/48 maxlen: 48
2a12:bc0::/48 maxlen: 48
2a12:bc0:3::/48 maxlen: 48
2a12:bc0:1::/48 maxlen: 48
2a12:bc0:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18166802 (0x1153412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Jun 17 09:36:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=265a9303ce3deca28b7332af5a2766efc20c73a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:7c:2d:7b:4b:45:43:ca:ce:7e:c2:eb:f0:
89:f3:62:a0:a1:bb:b2:21:47:55:57:8a:07:6c:c5:
4d:4a:1a:f2:90:41:75:61:b2:9d:5d:50:d5:d9:93:
d9:58:aa:2e:c4:00:19:ea:45:52:fa:ed:1b:1b:22:
b8:bf:d4:7a:8c:ca:91:66:69:30:73:ec:6b:a3:73:
8f:43:2c:9d:9a:60:60:bd:e9:1b:c4:c8:e9:43:3b:
11:d2:f5:66:fc:5d:a9:0f:cf:95:b1:f2:75:a1:fe:
58:11:9c:44:37:4c:d8:44:90:ad:71:7a:e2:b0:d8:
48:91:a6:e6:b9:6f:19:90:af:c3:22:c9:2d:99:05:
d9:5e:cb:db:69:de:40:5c:2f:b9:da:0d:7d:30:8a:
45:25:6b:18:81:61:ab:a2:8c:7d:2b:4e:d2:18:74:
91:ef:63:12:5a:1b:a4:dc:f5:a0:ee:6f:54:ca:34:
96:cf:92:65:9a:b5:65:a1:04:36:2f:41:29:76:93:
5d:de:de:61:12:4e:54:8a:fa:15:dd:cb:34:11:2b:
a1:14:7f:60:58:bd:c1:8c:ea:9f:a1:b1:97:d6:04:
97:59:12:8c:06:ce:eb:0b:a6:be:5f:e8:18:99:bc:
13:41:f3:11:a3:6c:f7:1a:b4:a5:81:05:81:14:69:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5A:93:03:CE:3D:EC:A2:8B:73:32:AF:5A:27:66:EF:C2:0C:73:A0
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/JlqTA8497KKLczKvWidm78IMc6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.55.0/24
IPv6:
2a12:bc0::-2a12:bc0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:23:46:aa:51:0a:76:ad:de:14:59:fa:f5:56:b5:47:93:c1:
fe:13:3f:45:f3:78:c0:43:08:1d:71:f5:24:1a:5b:7b:55:4a:
32:97:e6:79:eb:c9:99:ed:5c:48:bf:04:eb:d3:f4:b4:cf:aa:
e1:ef:00:46:74:33:c7:fb:1a:a2:72:48:62:be:5b:c8:a6:d8:
1f:e8:81:1e:fb:ea:aa:3f:50:fa:d4:09:7b:47:a0:ae:9a:53:
47:6f:b4:ee:27:43:26:16:87:df:74:5b:ae:69:de:0e:97:d9:
91:c8:44:20:be:0c:3f:b2:1e:a2:f6:d1:d9:0d:cd:c8:9f:4f:
00:a5:09:3c:84:6d:dd:e1:15:a9:0d:88:62:26:d4:c7:9a:8e:
06:da:9a:0d:0f:f3:05:26:c4:d3:7f:cd:2e:92:71:48:d0:6e:
ce:c6:d3:66:c8:a0:9d:5a:78:c0:11:c5:f2:56:c8:69:9d:16:
1a:08:39:83:84:fc:1b:52:86:56:fa:1b:47:89:52:35:ff:bc:
68:f5:f1:d4:52:ec:b6:f9:28:0a:ee:0c:7f:64:d6:dd:75:a6:
8a:31:4f:3e:7f:03:ae:22:f2:be:97:fe:62:fe:5e:a5:5c:94:
8e:0d:53:ef:b4:5c:53:9e:2e:fe:81:21:fd:38:e1:e5:a8:bb:
81:7f:db:2d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEARU0EjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
OWI1ZmZkMjRkMmViNWQ1YzFlMWNmZTc4YjAwM2M0YmFiNWEyZjEzMB4XDTIyMDYx
NzA5MzY0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjY1YTkzMDNjZTNk
ZWNhMjhiNzMzMmFmNWEyNzY2ZWZjMjBjNzNhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL20fC17S0VDys5+wuvwifNioKG7siFHVVeKB2zFTUoa8pBB
dWGynV1Q1dmT2ViqLsQAGepFUvrtGxsiuL/UeozKkWZpMHPsa6Nzj0MsnZpgYL3p
G8TI6UM7EdL1ZvxdqQ/PlbHydaH+WBGcRDdM2ESQrXF64rDYSJGm5rlvGZCvwyLJ
LZkF2V7L22neQFwvudoNfTCKRSVrGIFhq6KMfStO0hh0ke9jElobpNz1oO5vVMo0
ls+SZZq1ZaEENi9BKXaTXd7eYRJOVIr6Fd3LNBEroRR/YFi9wYzqn6Gxl9YEl1kS
jAbO6wumvl/oGJm8E0HzEaNs9xq0pYEFgRRpYNkCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBQmWpMDzj3sootzMq9aJ2bvwgxzoDAfBgNVHSMEGDAWgBSptf/STS611cHh
z+eLADxLq1ovEzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FiWF8wazB1dGRYQjRjX25pd0E4UzZ0YUx4TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjIvMDMwMWQ0LTQ4MDUtNDA1Yy1hNmUwLWE0MmUxZjFmNDc5OC8x
L0pscVRBODQ5N0tLTGN6S3ZXaWRtNzhJTWM2QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIv
MDMwMWQ0LTQ4MDUtNDA1Yy1hNmUwLWE0MmUxZjFmNDc5OC8xL3FiWF8wazB1dGRY
QjRjX25pd0E4UzZ0YUx4TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEwBgMEANQuNzAYBAIAAjASMBADBQYqEgvA
AwcAKhILwAAEMA0GCSqGSIb3DQEBCwUAA4IBAQBxI0aqUQp2rd4UWfr1VrVHk8H+
Ez9F83jAQwgdcfUkGlt7VUoyl+Z568mZ7VxIvwTr0/S0z6rh7wBGdDPH+xqickhi
vlvIptgf6IEe++qqP1D61Al7R6CumlNHb7TuJ0MmFoffdFuuad4Ol9mRyEQgvgw/
sh6i9tHZDc3In08ApQk8hG3d4RWpDYhiJtTHmo4G2poND/MFJsTTf80uknFI0G7O
xtNmyKCdWnjAEcXyVshpnRYaCDmDhPwbUoZW+htHiVI1/7xo9fHUUuy2+SgK7gx/
ZNbddaaKMU8+fwOuIvK+l/5i/l6lXJSODVPvtFxTni7+gSH9OOHlqLuBf9st
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:21 2024 by rpki-client on console-fra.rpki-client.org