Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/sMgRZFo6Cnmsa8rf3U4rLvXwkZM.roa
File: sMgRZFo6Cnmsa8rf3U4rLvXwkZM.roa (raw, json)
Hash identifier: 3uXtSZQWZvF9f2mEskh6d9jmVVrTt4ua2gMnNq6HWdA=
Subject key identifier: B0:C8:11:64:5A:3A:0A:79:AC:6B:CA:DF:DD:4E:2B:2E:F5:F0:91:93
Certificate issuer: /CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Certificate serial: 018437FF503A482C7A9DD59A42B7F8C1AC39
Authority key identifier: E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/sMgRZFo6Cnmsa8rf3U4rLvXwkZM.roa
Signing time: Wed 02 Nov 2022 10:59:49 +0000
ROA not before: Wed 02 Nov 2022 10:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13259
IP address blocks: 94.142.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:ff:50:3a:48:2c:7a:9d:d5:9a:42:b7:f8:c1:ac:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Validity
Not Before: Nov 2 10:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0c811645a3a0a79ac6bcadfdd4e2b2ef5f09193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e4:a6:88:2d:2f:01:53:fe:9c:53:ff:4b:57:
29:40:c1:6a:32:95:87:7b:ed:74:b7:47:91:ab:0d:
c3:0e:07:53:86:a8:3b:e0:10:43:01:43:bf:bc:c5:
17:ee:bd:0f:61:61:ba:a0:1f:a9:b0:ee:11:0d:fc:
63:a7:c1:c4:28:e1:a9:56:51:af:f4:3c:07:19:8d:
bc:b4:aa:26:68:35:e7:f3:dc:d5:04:89:07:b7:32:
8c:19:0e:da:d2:e8:6a:98:bb:c6:af:cb:89:29:52:
66:85:00:26:0b:bd:d0:e4:03:3e:48:d5:4b:0a:ea:
fa:03:87:46:15:88:70:8d:d4:82:26:d5:11:6c:8e:
8d:48:85:0f:96:8d:26:de:3b:92:1c:57:62:5d:2a:
97:ca:9f:5e:7a:9d:e7:74:f6:9f:7f:7d:62:b9:d0:
0a:79:57:07:df:51:dd:0b:94:72:4f:ef:30:8a:ff:
98:a8:e2:91:1a:da:96:04:f4:15:7e:b1:23:18:7d:
a5:9f:38:89:39:9b:2e:82:7c:53:bb:a2:a2:c3:cc:
b0:ae:11:4d:5a:2b:f5:56:3f:de:5f:66:58:94:52:
3b:09:99:82:10:73:76:d8:36:d2:dd:f6:1c:68:a0:
47:83:15:0e:38:d1:20:f1:be:79:98:30:d8:06:4f:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C8:11:64:5A:3A:0A:79:AC:6B:CA:DF:DD:4E:2B:2E:F5:F0:91:93
X509v3 Authority Key Identifier:
keyid:E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/sMgRZFo6Cnmsa8rf3U4rLvXwkZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:06:a6:35:75:4e:78:d1:2c:e0:01:d6:e7:6e:ff:e7:ef:6e:
76:78:68:a0:58:dd:3b:a5:bb:18:02:dc:92:b5:41:90:6c:39:
23:f5:79:88:52:a0:fe:3b:48:9d:f8:c6:8e:57:f4:69:e2:90:
aa:e7:20:72:bb:a4:2d:71:e2:cf:8d:23:98:8f:62:1d:3a:ee:
57:bf:7a:b4:2d:ed:d0:5e:ad:54:ce:cf:76:d2:78:53:9f:ed:
4a:b7:ce:58:83:cf:2a:36:10:dc:da:66:7f:1e:18:20:06:28:
e6:39:ed:3b:94:dc:34:60:b5:90:e2:f8:2c:08:3d:77:09:18:
18:8b:c4:32:fc:bf:a0:f9:0f:8f:ce:81:84:51:cb:e1:c0:18:
a7:35:a1:a3:9d:74:06:7d:18:d2:9b:91:55:5e:78:3d:da:2b:
ce:c7:f6:bb:7a:73:8a:f8:90:9e:ad:0b:94:ff:23:6f:73:a0:
df:0b:51:76:47:e9:92:cd:33:29:9c:1f:9e:c5:0f:c6:5b:ac:
0e:7f:20:e2:b0:a1:52:21:b3:65:73:2d:c8:71:ee:fe:ca:eb:
ed:da:b3:e5:60:09:9f:30:d8:09:4d:e5:77:56:9a:b6:0c:e8:
f5:64:fc:4c:1d:10:e9:3d:d7:4c:2f:5c:27:5f:0c:63:b5:ff:
c9:1b:d8:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ3/1A6SCx6ndWaQrf4waw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OWYyYjY5ZjRhOTVhNTIxZTE4ZmIzM2U2NzkzZjQ2N2Uw
MzFiYzEwHhcNMjIxMTAyMTA1OTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGM4MTE2NDVhM2EwYTc5YWM2YmNhZGZkZDRlMmIyZWY1ZjA5MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+SmiC0vAVP+nFP/S1cpQMFqMpWH
e+10t0eRqw3DDgdThqg74BBDAUO/vMUX7r0PYWG6oB+psO4RDfxjp8HEKOGpVlGv
9DwHGY28tKomaDXn89zVBIkHtzKMGQ7a0uhqmLvGr8uJKVJmhQAmC73Q5AM+SNVL
Cur6A4dGFYhwjdSCJtURbI6NSIUPlo0m3juSHFdiXSqXyp9eep3ndPaff31iudAK
eVcH31HdC5RyT+8wiv+YqOKRGtqWBPQVfrEjGH2lnziJOZsugnxTu6Kiw8ywrhFN
Wiv1Vj/eX2ZYlFI7CZmCEHN22DbS3fYcaKBHgxUOONEg8b55mDDYBk+nCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLDIEWRaOgp5rGvK391OKy718JGTMB8GA1UdIwQY
MBaAFOafK2n0qVpSHhj7M+Z5P0Z+AxvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXA4cmFmU3BXbEllR1BzejVua19SbjRERzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zN2VhYjAtN2Y1My00YjYyLWI1ZDQt
NzgwMDZlMDc4MTcxLzEvc01nUlpGbzZDbm1zYThyZjNVNHJMdlh3a1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zN2VhYjAtN2Y1My00YjYyLWI1ZDQtNzgwMDZlMDc4MTcx
LzEvNXA4cmFmU3BXbEllR1BzejVua19SbjRERzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo76MA0G
CSqGSIb3DQEBCwUAA4IBAQCyBqY1dU540SzgAdbnbv/n7252eGigWN07pbsYAtyS
tUGQbDkj9XmIUqD+O0id+MaOV/Rp4pCq5yByu6QtceLPjSOYj2IdOu5Xv3q0Le3Q
Xq1Uzs920nhTn+1Kt85Yg88qNhDc2mZ/HhggBijmOe07lNw0YLWQ4vgsCD13CRgY
i8Qy/L+g+Q+PzoGEUcvhwBinNaGjnXQGfRjSm5FVXng92ivOx/a7enOK+JCerQuU
/yNvc6DfC1F2R+mSzTMpnB+exQ/GW6wOfyDisKFSIbNlcy3Ice7+yuvt2rPlYAmf
MNgJTeV3Vpq2DOj1ZPxMHRDpPddML1wnXwxjtf/JG9jE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:22 2024 by rpki-client on console-ams.rpki-client.org