Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/jjoG5wYAh1WSmJYyxRx5z-HUeSQ.roa
File: jjoG5wYAh1WSmJYyxRx5z-HUeSQ.roa (raw, json)
Hash identifier: I6QJfBF46iWw6LigpWHyxJbhZj9Q3zVIY2lrdaCYlXk=
Subject key identifier: 8E:3A:06:E7:06:00:87:55:92:98:96:32:C5:1C:79:CF:E1:D4:79:24
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 136F6182
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/jjoG5wYAh1WSmJYyxRx5z-HUeSQ.roa
Signing time: Sat 01 Jan 2022 08:56:05 +0000
ROA not before: Sat 01 Jan 2022 08:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29396
IP address blocks: 185.202.200.0/22 maxlen: 22
185.128.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326066562 (0x136f6182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Jan 1 08:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e3a06e70600875592989632c51c79cfe1d47924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:c7:f9:e1:d9:60:61:20:2c:95:b6:58:ab:
ea:f8:07:d8:0f:3d:67:be:e3:fc:b7:82:ea:0c:2b:
17:12:46:e5:8f:02:47:37:2f:1d:a4:19:0b:7f:7c:
8b:d8:f5:91:e4:f6:0f:c4:7f:01:43:07:e8:8a:d9:
d6:04:4e:91:61:77:09:5e:91:c3:d6:08:2a:6c:b3:
d5:9d:13:a4:16:d6:c2:4e:1e:1e:d2:af:2c:35:2a:
d1:8a:e0:92:a2:49:20:88:98:f8:02:d8:bf:56:5c:
42:b9:fd:d7:49:ed:50:b1:88:e2:81:92:10:55:d3:
c3:36:bd:0a:a1:af:1e:2f:a3:36:cf:99:84:e9:7d:
3f:20:2a:ac:94:f4:78:1a:7f:ad:1e:ac:31:47:12:
a3:81:f4:83:50:59:62:52:1f:db:13:69:15:6b:9c:
41:9a:aa:e1:bd:14:7b:0e:d7:26:ef:0e:5d:49:0d:
4f:cd:88:12:72:23:ff:a4:a6:d8:71:88:a3:d9:f8:
d7:74:7b:d2:09:b2:e6:51:57:88:41:ac:19:d8:33:
cc:69:3c:cd:21:79:93:c4:75:c2:a1:f6:09:0f:2a:
8e:3e:da:a6:bb:1b:45:7c:98:c9:02:5a:e8:22:d1:
af:3f:a0:83:fb:7d:f3:84:82:f4:85:01:1a:b5:b4:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3A:06:E7:06:00:87:55:92:98:96:32:C5:1C:79:CF:E1:D4:79:24
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/jjoG5wYAh1WSmJYyxRx5z-HUeSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.32.0/22
185.202.200.0/22
Signature Algorithm: sha256WithRSAEncryption
af:bb:68:9c:40:56:35:36:8d:93:e0:36:50:65:cd:13:cc:94:
39:d4:1e:10:04:b8:77:91:41:04:37:ff:54:db:2f:3e:3e:5a:
6d:c5:d2:c4:41:41:90:32:b1:83:d2:20:78:f7:9e:85:45:2d:
d6:50:40:34:67:a0:1b:b8:5f:70:da:c4:3c:75:41:cd:c5:a9:
8a:96:d5:8e:73:fe:5e:3a:6b:88:14:e5:53:7b:de:00:5f:0d:
f7:05:42:cb:5a:0a:7a:9a:a0:28:90:a1:39:06:0c:5f:ca:0c:
88:ad:03:26:56:9d:1d:95:72:9c:4f:ac:da:88:14:ae:3a:d4:
18:0f:13:71:e7:4d:e1:c5:b3:29:4d:47:8e:b7:51:30:70:e8:
c5:f5:c5:dd:8d:2d:70:cd:ed:6a:8f:ae:9f:3b:79:c3:33:6e:
68:58:87:2e:97:5b:46:46:1c:c1:49:f5:2f:45:9e:9f:f0:bf:
d9:ed:37:52:00:f0:3b:28:d6:9a:e8:45:4c:5c:38:f6:2f:bb:
9c:9c:7b:6b:9d:96:11:4b:c2:ee:6b:f9:e0:91:2c:aa:b7:03:
52:4d:3a:da:2b:40:f7:3f:5c:53:68:e7:35:63:d4:36:8f:48:
e6:b7:0f:75:7a:59:2c:db:4d:a2:99:9f:87:cb:95:78:bd:a8:
44:5b:41:81
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEE29hgjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MGFlNTM4ZTJhOTEzNDZmMDQwMjU5OGIwZmYyZmI5YTk1YzA3YzM5MB4XDTIyMDEw
MTA4NTYwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGUzYTA2ZTcwNjAw
ODc1NTkyOTg5NjMyYzUxYzc5Y2ZlMWQ0NzkyNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANc3x/nh2WBhICyVtlir6vgH2A89Z77j/LeC6gwrFxJG5Y8C
RzcvHaQZC398i9j1keT2D8R/AUMH6IrZ1gROkWF3CV6Rw9YIKmyz1Z0TpBbWwk4e
HtKvLDUq0YrgkqJJIIiY+ALYv1ZcQrn910ntULGI4oGSEFXTwza9CqGvHi+jNs+Z
hOl9PyAqrJT0eBp/rR6sMUcSo4H0g1BZYlIf2xNpFWucQZqq4b0Uew7XJu8OXUkN
T82IEnIj/6Sm2HGIo9n413R70gmy5lFXiEGsGdgzzGk8zSF5k8R1wqH2CQ8qjj7a
prsbRXyYyQJa6CLRrz+gg/t984SC9IUBGrW0k/MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSOOgbnBgCHVZKYljLFHHnP4dR5JDAfBgNVHSMEGDAWgBSQrlOOKpE0bwQC
WYsP8vualcB8OTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tLNVRqaXFSTkc4RUFsbUxEX0w3bXBYQWZEay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjcvZDQ3OTA5LWE1NjAtNDA5Yy1iODM5LWM1ZTc4MjE1NzlmMS8x
L2pqb0c1d1lBaDFXU21KWXl4Ung1ei1IVWVTUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcv
ZDQ3OTA5LWE1NjAtNDA5Yy1iODM5LWM1ZTc4MjE1NzlmMS8xL2tLNVRqaXFSTkc4
RUFsbUxEX0w3bXBYQWZEay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArmAIAMEArnKyDANBgkqhkiG9w0B
AQsFAAOCAQEAr7tonEBWNTaNk+A2UGXNE8yUOdQeEAS4d5FBBDf/VNsvPj5abcXS
xEFBkDKxg9IgePeehUUt1lBANGegG7hfcNrEPHVBzcWpipbVjnP+XjpriBTlU3ve
AF8N9wVCy1oKepqgKJChOQYMX8oMiK0DJladHZVynE+s2ogUrjrUGA8TcedN4cWz
KU1HjrdRMHDoxfXF3Y0tcM3tao+unzt5wzNuaFiHLpdbRkYcwUn1L0Wen/C/2e03
UgDwOyjWmuhFTFw49i+7nJx7a52WEUvC7mv54JEsqrcDUk062itA9z9cU2jnNWPU
No9I5rcPdXpZLNtNopmfh8uVeL2oRFtBgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:13 2024 by rpki-client on console-ams.rpki-client.org