Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/jRab0bQZaUuRa1tEn63r1zYfg30.roa
File: jRab0bQZaUuRa1tEn63r1zYfg30.roa (raw, json)
Hash identifier: LJkkluuFs0MpCZiuLVDrjuAQtAvYQcpFQLE5oM+efso=
Subject key identifier: 8D:16:9B:D1:B4:19:69:4B:91:6B:5B:44:9F:AD:EB:D7:36:1F:83:7D
Certificate issuer: /CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Certificate serial: 0917404C
Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/jRab0bQZaUuRa1tEn63r1zYfg30.roa
Signing time: Sat 01 Jan 2022 11:57:50 +0000
ROA not before: Sat 01 Jan 2022 11:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57151
IP address blocks: 185.1.142.0/24 maxlen: 24
2001:7f8:dd::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152518732 (0x917404c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Validity
Not Before: Jan 1 11:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d169bd1b419694b916b5b449fadebd7361f837d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:1c:97:0f:d9:8b:3e:0a:d2:d6:d2:c4:3e:
fa:3a:37:03:ba:31:34:75:df:0a:86:85:45:9b:ac:
6c:54:be:45:aa:77:89:54:7a:10:88:5f:34:b6:18:
55:20:fe:9d:df:23:d5:cf:4c:ce:1b:b6:90:7a:c0:
d6:3f:98:9a:69:c9:c1:85:85:ad:0b:67:16:2a:d6:
59:c2:6b:db:de:f1:9a:63:6e:fa:41:8d:e7:65:73:
fb:c9:44:e3:a3:3c:de:74:38:1d:7b:a6:c3:7e:a0:
76:d6:e9:e2:78:8b:0f:4d:bb:f1:94:98:fe:54:36:
6a:49:8b:bb:19:a0:01:e1:bb:a6:2b:eb:e3:df:74:
d6:4f:69:13:48:d4:99:d5:0e:fc:e5:a3:26:2d:6d:
02:93:70:0f:26:eb:e6:ad:77:cf:46:0e:13:16:51:
94:fa:44:fc:45:9d:8f:bf:8b:e4:1f:62:ed:8f:50:
10:70:55:37:f9:3d:b3:98:ab:5b:ff:d6:e3:07:dc:
61:64:d7:1b:0d:fe:6d:58:79:ad:d9:6e:13:8d:ca:
df:3c:bc:c1:b1:ae:1f:57:08:78:cd:60:b4:14:1b:
62:0e:d3:df:2c:a4:f3:5d:06:41:38:e4:20:c5:1f:
72:57:54:70:d3:43:bd:55:f1:b6:58:f3:56:60:32:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:9B:D1:B4:19:69:4B:91:6B:5B:44:9F:AD:EB:D7:36:1F:83:7D
X509v3 Authority Key Identifier:
keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/jRab0bQZaUuRa1tEn63r1zYfg30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.142.0/24
IPv6:
2001:7f8:dd::/48
Signature Algorithm: sha256WithRSAEncryption
a9:c3:83:8e:56:3e:97:f1:05:db:29:02:5c:1c:b8:4b:71:a0:
d0:de:68:b4:5e:fb:5d:de:13:bc:d7:a8:40:d1:9f:1b:f4:fb:
00:cf:ae:dc:a2:97:cf:de:47:55:4e:15:51:76:89:9f:1a:6b:
12:56:ca:27:15:29:79:4b:6e:42:48:67:f9:00:88:93:0a:09:
25:48:46:21:35:55:bf:1b:8b:1a:b2:10:00:dc:07:c2:fb:0f:
73:e8:88:e8:f2:7c:5b:0f:95:05:e5:42:b5:fd:2c:50:9c:6d:
54:7d:76:32:49:d0:d3:fd:54:56:e7:c1:42:3d:66:11:a7:06:
c4:7e:d7:7c:da:78:01:b1:b9:3b:dc:e6:fd:d7:97:0e:b6:4d:
b2:a5:73:74:4e:a2:ad:c7:58:0f:35:6a:a0:b2:62:e7:e9:e7:
1c:89:41:a4:22:1d:5f:17:41:33:95:21:5f:d5:f4:e6:6d:29:
01:6a:c2:fc:75:64:a1:3a:33:ed:41:7c:72:4d:ed:55:e0:d3:
c3:30:58:8e:48:1c:2d:ad:7e:d7:f3:a1:07:be:36:ab:fb:ab:
1d:51:6f:f3:db:da:2c:10:1c:4b:8c:22:15:29:fb:d1:4b:bb:
e4:a9:3b:3d:a2:01:b2:10:8e:01:fc:da:9a:e3:01:9c:61:6d:
13:d9:a4:38
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECRdATDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MTllOTc0NzBjNjNmZGExNGMzMjY1ZWI3NDFhNzBlM2E4YjY5YWZmMB4XDTIyMDEw
MTExNTc1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGQxNjliZDFiNDE5
Njk0YjkxNmI1YjQ0OWZhZGViZDczNjFmODM3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8nHJcP2Ys+CtLW0sQ++jo3A7oxNHXfCoaFRZusbFS+Rap3
iVR6EIhfNLYYVSD+nd8j1c9Mzhu2kHrA1j+YmmnJwYWFrQtnFirWWcJr297xmmNu
+kGN52Vz+8lE46M83nQ4HXumw36gdtbp4niLD0278ZSY/lQ2akmLuxmgAeG7pivr
49901k9pE0jUmdUO/OWjJi1tApNwDybr5q13z0YOExZRlPpE/EWdj7+L5B9i7Y9Q
EHBVN/k9s5irW//W4wfcYWTXGw3+bVh5rdluE43K3zy8wbGuH1cIeM1gtBQbYg7T
3yyk810GQTjkIMUfcldUcNNDvVXxtljzVmAyY5UCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSNFpvRtBlpS5FrW0SfrevXNh+DfTAfBgNVHSMEGDAWgBRRnpdHDGP9oUwy
Zet0GnDjqLaa/zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VaNlhSd3hqX2FGTU1tWHJkQnB3NDZpMm12OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzEvM2ZkOTEwLTc4YmMtNDQyYS04OGFjLThjNTJkZTZmYTg4OC8x
L2pSYWIwYlFaYVV1UmExdEVuNjNyMXpZZmczMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEv
M2ZkOTEwLTc4YmMtNDQyYS04OGFjLThjNTJkZTZmYTg4OC8xL1VaNlhSd3hqX2FG
TU1tWHJkQnB3NDZpMm12OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALkBjjAPBAIAAjAJAwcAIAEH+ADd
MA0GCSqGSIb3DQEBCwUAA4IBAQCpw4OOVj6X8QXbKQJcHLhLcaDQ3mi0Xvtd3hO8
16hA0Z8b9PsAz67copfP3kdVThVRdomfGmsSVsonFSl5S25CSGf5AIiTCgklSEYh
NVW/G4sashAA3AfC+w9z6Ijo8nxbD5UF5UK1/SxQnG1UfXYySdDT/VRW58FCPWYR
pwbEftd82ngBsbk73Ob915cOtk2ypXN0TqKtx1gPNWqgsmLn6ecciUGkIh1fF0Ez
lSFf1fTmbSkBasL8dWShOjPtQXxyTe1V4NPDMFiOSBwtrX7X86EHvjar+6sdUW/z
29osEBxLjCIVKfvRS7vkqTs9ogGyEI4B/Nqa4wGcYW0T2aQ4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:20 2024 by rpki-client on console-ams.rpki-client.org