Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9Ju5BveD3Jno4Rg6iJC5QJn3ZlM.roa
File: 9Ju5BveD3Jno4Rg6iJC5QJn3ZlM.roa (raw, json)
Hash identifier: bAg+wqJcHWzffjL2FrtP0q8N7u9BzfFauPo+T7Zlr/Y=
Subject key identifier: F4:9B:B9:06:F7:83:DC:99:E8:E1:18:3A:88:90:B9:40:99:F7:66:53
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17D5F816
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9Ju5BveD3Jno4Rg6iJC5QJn3ZlM.roa
Signing time: Sat 01 Jan 2022 04:54:34 +0000
ROA not before: Sat 01 Jan 2022 04:54:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140570
IP address blocks: 91.189.186.0/24 maxlen: 32
5.253.137.0/24 maxlen: 32
185.171.3.0/24 maxlen: 32
185.224.146.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399898646 (0x17d5f816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f49bb906f783dc99e8e1183a8890b94099f76653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:25:36:6a:76:2f:dc:7b:98:44:68:44:02:
df:b4:63:22:64:fa:8a:dd:c5:9b:24:98:86:17:9b:
9f:df:64:5c:9b:5c:61:14:18:c8:bc:f0:cc:b4:ca:
5e:fc:0d:88:e7:6c:f8:be:72:14:f3:d0:11:95:b8:
11:74:83:07:a8:4b:ca:d0:5f:91:80:2f:cb:56:04:
7c:1a:39:f1:15:20:ee:21:e3:39:5f:f7:af:91:41:
08:b7:ee:11:7c:34:6d:8f:60:73:55:34:b3:76:f1:
17:49:12:ff:88:63:e4:26:e7:a1:f7:ce:09:ce:4d:
ee:b0:e6:03:b1:5f:bf:36:1a:ad:aa:b4:9a:f2:a8:
0c:ba:83:46:12:11:94:16:1f:50:92:42:ea:1e:4d:
b0:ae:0b:d5:26:7e:8e:45:4e:fc:96:94:ac:a8:f2:
fd:e5:a7:80:c2:b3:c4:35:a8:2d:e0:2b:da:c1:99:
5b:e7:5e:c2:0b:fe:28:d1:4e:01:2d:d0:db:2e:68:
07:22:1f:ca:9c:c5:b9:5b:f2:14:76:c8:ca:0f:45:
a7:d8:69:cc:7e:d9:99:c8:b7:d2:3e:35:45:c0:8a:
14:8f:39:2f:25:d7:6c:71:e8:d9:7b:c3:cb:13:9f:
fa:fe:64:43:5b:8a:1c:45:59:7c:b9:1b:2f:1e:c4:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:B9:06:F7:83:DC:99:E8:E1:18:3A:88:90:B9:40:99:F7:66:53
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9Ju5BveD3Jno4Rg6iJC5QJn3ZlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.137.0/24
91.189.186.0/24
185.171.3.0/24
185.224.146.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ea:ef:9e:7f:1e:93:fb:4e:29:d6:bc:c3:f3:3a:36:6e:bf:
fc:4a:b3:74:5a:82:90:46:81:03:82:cb:fb:f0:5d:13:99:bf:
35:91:d8:be:88:83:6c:fa:a1:39:63:13:20:5b:d8:5e:12:66:
9c:11:aa:52:5b:10:42:8d:35:46:d3:b1:84:25:0e:75:a3:6f:
9a:7c:4d:65:d9:51:95:73:aa:29:00:5f:bf:33:b3:e5:ad:7c:
f8:71:f6:df:8b:cc:b7:c6:9f:48:cc:1c:b5:ce:62:c3:7c:05:
a0:3f:d2:32:57:80:f8:f2:f7:5d:dc:a3:93:e4:00:bf:b7:26:
06:57:1e:08:2c:bc:3c:21:7f:0b:fc:7e:1a:c2:47:fe:c5:f4:
4c:cc:ec:f3:f4:14:a0:c7:e0:a7:53:c6:47:e2:65:d2:ff:09:
64:a8:3f:27:e3:2d:81:a9:03:df:a8:5b:96:f5:6c:88:71:ed:
6f:7f:cc:ef:83:44:8f:8a:91:eb:3e:13:5d:09:91:85:85:fb:
12:80:60:81:80:5a:d3:43:cd:bd:d2:fe:12:3d:b2:57:22:08:
4a:21:78:86:e1:9b:35:57:5a:37:13:a5:8d:b4:dd:c1:e8:d3:
0b:bd:c9:86:a6:7d:21:72:09:be:be:da:48:b8:d2:3e:8b:e7:
86:08:0b:47
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEF9X4FjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjQ5YmI5MDZmNzgz
ZGM5OWU4ZTExODNhODg5MGI5NDA5OWY3NjY1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVYJTZqdi/ce5hEaEQC37RjImT6it3FmySYhhebn99kXJtc
YRQYyLzwzLTKXvwNiOds+L5yFPPQEZW4EXSDB6hLytBfkYAvy1YEfBo58RUg7iHj
OV/3r5FBCLfuEXw0bY9gc1U0s3bxF0kS/4hj5CbnoffOCc5N7rDmA7FfvzYaraq0
mvKoDLqDRhIRlBYfUJJC6h5NsK4L1SZ+jkVO/JaUrKjy/eWngMKzxDWoLeAr2sGZ
W+dewgv+KNFOAS3Q2y5oByIfypzFuVvyFHbIyg9Fp9hpzH7Zmci30j41RcCKFI85
LyXXbHHo2XvDyxOf+v5kQ1uKHEVZfLkbLx7E92kCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBT0m7kG94PcmejhGDqIkLlAmfdmUzAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
LzlKdTVCdmVEM0pubzRSZzZpSkM1UUpuM1psTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAAX9iQMEAFu9ugMEALmrAwMEALng
kjANBgkqhkiG9w0BAQsFAAOCAQEAN+rvnn8ek/tOKda8w/M6Nm6//EqzdFqCkEaB
A4LL+/BdE5m/NZHYvoiDbPqhOWMTIFvYXhJmnBGqUlsQQo01RtOxhCUOdaNvmnxN
ZdlRlXOqKQBfvzOz5a18+HH234vMt8afSMwctc5iw3wFoD/SMleA+PL3Xdyjk+QA
v7cmBlceCCy8PCF/C/x+GsJH/sX0TMzs8/QUoMfgp1PGR+Jl0v8JZKg/J+MtgakD
36hblvVsiHHtb3/M74NEj4qR6z4TXQmRhYX7EoBggYBa00PNvdL+Ej2yVyIISiF4
huGbNVdaNxOljbTdwejTC73JhqZ9IXIJvr7aSLjSPovnhggLRw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org