Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/kUjNRU_Ik5LGDX0S3w00CnPsXR0.roa
File: kUjNRU_Ik5LGDX0S3w00CnPsXR0.roa (raw, json)
Hash identifier: sL+aM+930YRVePigvxLykAFYAh6sLMOrbOGTMaxSPLk=
Subject key identifier: 91:48:CD:45:4F:C8:93:92:C6:0D:7D:12:DF:0D:34:0A:73:EC:5D:1D
Certificate issuer: /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial: 01009814
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/kUjNRU_Ik5LGDX0S3w00CnPsXR0.roa
Signing time: Sat 01 Jan 2022 12:56:24 +0000
ROA not before: Sat 01 Jan 2022 12:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202441
IP address blocks: 194.15.224.0/22 maxlen: 22
178.223.224.0/19 maxlen: 19
2a0c:b240::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16816148 (0x1009814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Validity
Not Before: Jan 1 12:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9148cd454fc89392c60d7d12df0d340a73ec5d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:8e:18:50:9d:ee:f1:e6:00:95:90:d7:1c:
c5:70:d4:24:d7:50:18:6d:2a:dc:81:5f:f5:32:a1:
0d:e5:1a:f0:ab:09:37:65:6b:3a:e6:bb:d4:3b:f4:
95:57:c4:78:15:6d:9f:30:17:ae:22:37:db:0e:0d:
4f:db:0a:27:42:68:89:be:5e:06:52:3d:e3:54:bc:
b3:c5:46:5c:9b:66:c2:1b:2b:93:41:90:c8:ef:2b:
2a:6e:f1:77:9a:3e:f3:8a:6a:9b:f6:52:4e:76:ab:
56:70:49:f1:6d:b3:f3:e5:87:71:85:1c:eb:ef:a6:
6b:0d:f2:ca:63:a9:19:09:ba:50:f3:ff:8c:e3:96:
b5:18:a8:8c:95:47:5f:c0:86:e1:9a:22:a5:24:2f:
bf:10:d7:e3:da:61:db:d5:5f:d4:06:23:7a:1b:ca:
b2:26:88:3c:3f:88:a7:40:e6:45:9f:fb:b4:6e:34:
6f:12:43:d2:81:40:93:07:bc:ec:1d:52:46:ee:1d:
8d:23:64:7d:4f:80:98:19:e0:25:d9:c6:fe:a3:88:
18:36:fd:1c:0e:e3:76:09:73:36:07:17:c7:04:ac:
9d:82:c7:23:2d:ca:b6:13:04:9d:03:d7:ec:6c:50:
04:07:e3:60:25:23:f0:db:9f:4b:47:38:ee:e3:d9:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:48:CD:45:4F:C8:93:92:C6:0D:7D:12:DF:0D:34:0A:73:EC:5D:1D
X509v3 Authority Key Identifier:
keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/kUjNRU_Ik5LGDX0S3w00CnPsXR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.223.224.0/19
194.15.224.0/22
IPv6:
2a0c:b240::/32
Signature Algorithm: sha256WithRSAEncryption
af:7e:20:ae:75:ea:0b:6a:be:41:76:b7:95:fa:70:e0:81:60:
8c:66:f0:e4:5c:a0:fb:58:be:11:c8:66:e9:dc:75:a2:c3:e2:
ca:9c:69:7e:27:e6:6a:2c:4c:7a:9f:13:ca:71:1d:26:61:62:
4d:24:26:d4:d3:40:15:64:87:78:19:ab:c1:ac:5e:a0:83:33:
ea:64:7b:9d:77:04:fe:a4:01:d7:a4:82:ba:49:ad:5c:f0:3a:
9b:c9:5e:d8:70:00:5a:c5:c2:1e:28:5e:82:c1:2d:4f:ff:b8:
e2:67:54:ef:7c:17:1c:95:49:8b:8d:26:2a:3d:e4:e8:ec:e4:
81:dc:6e:a6:2a:56:7d:58:d5:28:f6:05:08:31:a2:0a:27:d3:
5c:d3:de:cc:6f:1b:43:a5:e9:0b:54:bf:66:20:06:88:9f:a9:
7a:59:cd:d1:fd:4b:8a:c0:34:1e:f6:f7:79:21:9c:00:d4:1f:
1b:fd:d7:eb:9a:f2:57:d7:3f:bf:7a:06:b3:3e:06:d4:f7:21:
75:31:82:63:f7:f2:04:a2:1f:06:04:65:26:3d:96:5d:86:d2:
ff:64:d4:df:8d:d7:80:4f:c7:5d:b9:76:b9:69:93:6c:ef:fb:
7a:26:83:a0:9b:c0:be:00:38:8d:14:53:4c:a3:6d:98:43:2a:
ad:f4:41:82
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEAQCYFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZGU1ZWQ0NTdmNzQzODJhOGVkMGI3YWY2ODZlMWFkYjI5MzUyMjUwMB4XDTIyMDEw
MTEyNTYyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE0OGNkNDU0ZmM4
OTM5MmM2MGQ3ZDEyZGYwZDM0MGE3M2VjNWQxZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKcCjhhQne7x5gCVkNccxXDUJNdQGG0q3IFf9TKhDeUa8KsJ
N2VrOua71Dv0lVfEeBVtnzAXriI32w4NT9sKJ0Joib5eBlI941S8s8VGXJtmwhsr
k0GQyO8rKm7xd5o+84pqm/ZSTnarVnBJ8W2z8+WHcYUc6++maw3yymOpGQm6UPP/
jOOWtRiojJVHX8CG4ZoipSQvvxDX49ph29Vf1AYjehvKsiaIPD+Ip0DmRZ/7tG40
bxJD0oFAkwe87B1SRu4djSNkfU+AmBngJdnG/qOIGDb9HA7jdglzNgcXxwSsnYLH
Iy3KthMEnQPX7GxQBAfjYCUj8NufS0c47uPZjj0CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSRSM1FT8iTksYNfRLfDTQKc+xdHTAfBgNVHSMEGDAWgBTt5e1Ff3Q4Ko7Q
t69obhrbKTUiUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdlWHRSWDkwT0NxTzBMZXZhRzRhMnlrMUlsQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvZTRkYzM5LTdkOWItNGI1Yi04NTkzLTVhNTgzODgwMDI4YS8x
L2tVak5SVV9JazVMR0RYMFMzdzAwQ25Qc1hSMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
ZTRkYzM5LTdkOWItNGI1Yi04NTkzLTVhNTgzODgwMDI4YS8xLzdlWHRSWDkwT0Nx
TzBMZXZhRzRhMnlrMUlsQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBbLf4AMEAsIP4DANBAIAAjAHAwUA
KgyyQDANBgkqhkiG9w0BAQsFAAOCAQEAr34grnXqC2q+QXa3lfpw4IFgjGbw5Fyg
+1i+Echm6dx1osPiypxpfifmaixMep8TynEdJmFiTSQm1NNAFWSHeBmrwaxeoIMz
6mR7nXcE/qQB16SCukmtXPA6m8le2HAAWsXCHihegsEtT/+44mdU73wXHJVJi40m
Kj3k6OzkgdxupipWfVjVKPYFCDGiCifTXNPezG8bQ6XpC1S/ZiAGiJ+pelnN0f1L
isA0Hvb3eSGcANQfG/3X65ryV9c/v3oGsz4G1PchdTGCY/fyBKIfBgRlJj2WXYbS
/2TU343XgE/HXbl2uWmTbO/7eiaDoJvAvgA4jRRTTKNtmEMqrfRBgg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:55 2023 by rpki-client on console-ams.rpki-client.org