Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Sjj1yoGoyRre072BdpjU_hprl48.roa
File: Sjj1yoGoyRre072BdpjU_hprl48.roa (raw, json)
Hash identifier: h0LRPH0p1ADkvGmzv0PIM2HD6e0b94bRFDS/42YcNag=
Subject key identifier: 4A:38:F5:CA:81:A8:C9:1A:DE:D3:BD:81:76:98:D4:FE:1A:6B:97:8F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17E02A4E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Sjj1yoGoyRre072BdpjU_hprl48.roa
Signing time: Sat 01 Jan 2022 04:54:39 +0000
ROA not before: Sat 01 Jan 2022 04:54:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205512
IP address blocks: 185.122.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400566862 (0x17e02a4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a38f5ca81a8c91aded3bd817698d4fe1a6b978f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:5c:98:16:b2:73:ae:cc:c7:86:71:79:9d:
46:b9:a9:22:74:2a:71:3b:95:65:a1:07:94:de:f4:
14:20:f0:34:2c:bf:8c:b0:f1:d2:34:9d:7b:e2:a3:
81:ed:18:b8:00:72:29:cd:db:25:78:1d:ba:d4:85:
b7:e4:81:5d:d5:cd:33:48:a2:e8:94:51:f0:9c:1d:
eb:68:e2:39:4e:18:42:c9:0a:c9:31:66:cc:a9:ea:
f4:39:26:ba:9b:b4:c6:93:88:96:85:df:a5:97:ba:
32:87:4e:d4:6f:c0:16:fb:9b:24:f4:09:ce:05:63:
e9:47:82:66:83:9e:d0:b5:96:df:72:e1:e4:fc:4f:
c1:05:58:71:6a:89:cd:34:bb:38:b9:05:c9:77:dd:
63:6b:8a:d1:2e:30:0b:bc:5c:c8:f2:9b:6a:26:ae:
5b:57:85:6a:49:75:76:fc:61:73:d9:73:ba:60:cb:
98:35:7b:c5:cc:ad:b6:44:cc:cc:ac:0f:f6:fd:79:
f2:e0:5f:9b:bd:53:24:35:6a:49:ca:4b:05:6a:20:
79:8a:37:0e:20:0d:0d:5b:94:9b:76:c3:27:21:87:
0b:1b:de:00:52:10:36:62:4a:ae:15:82:27:d9:e5:
69:04:d9:a2:a4:c7:10:25:5a:3b:53:4b:b5:40:3a:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:F5:CA:81:A8:C9:1A:DE:D3:BD:81:76:98:D4:FE:1A:6B:97:8F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Sjj1yoGoyRre072BdpjU_hprl48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.38.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2a:dc:03:9f:59:04:15:50:bc:f8:bb:46:dc:ec:9f:57:ca:
af:08:5f:6d:77:a1:5a:94:b0:89:50:95:00:6f:72:d2:49:77:
a7:c2:64:e3:fc:3a:30:1f:eb:54:27:ab:82:3e:0c:c1:12:8b:
5b:75:48:f7:62:85:3e:91:ea:e0:6f:d0:72:f8:8d:55:fc:c3:
03:af:d0:c8:e8:40:4f:5d:a8:3a:29:c1:c8:6e:11:28:24:d7:
c7:d9:3a:f8:e3:a1:e2:85:7b:e1:4e:9d:40:3d:2d:0d:b6:ec:
4b:fd:91:e1:6f:cc:5a:b0:0d:01:b3:ae:57:a4:47:36:98:b5:
55:cb:5a:7d:5f:7c:49:f4:b2:2e:be:61:96:2b:4c:2f:68:b4:
35:57:5e:3e:55:78:23:7a:c5:36:76:00:52:ae:9c:42:d1:72:
12:a6:de:b1:c6:d5:8e:1e:6d:b8:18:ea:bf:24:21:80:47:39:
fe:ba:40:1b:58:a1:2b:d1:08:d7:67:90:b3:5e:07:b4:16:40:
fd:55:d2:8a:92:7e:58:b0:72:af:58:47:73:e4:3d:21:69:56:
bc:74:00:f2:9c:c2:a9:2e:bd:07:8b:00:ee:3e:b0:08:7b:58:
01:ee:0c:13:f7:4a:38:45:46:fc:1e:2d:c9:f8:29:ed:7e:5e:
2b:19:60:cc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF+AqTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGEzOGY1Y2E4MWE4
YzkxYWRlZDNiZDgxNzY5OGQ0ZmUxYTZiOTc4ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALcoXJgWsnOuzMeGcXmdRrmpInQqcTuVZaEHlN70FCDwNCy/
jLDx0jSde+Kjge0YuAByKc3bJXgdutSFt+SBXdXNM0ii6JRR8Jwd62jiOU4YQskK
yTFmzKnq9Dkmupu0xpOIloXfpZe6ModO1G/AFvubJPQJzgVj6UeCZoOe0LWW33Lh
5PxPwQVYcWqJzTS7OLkFyXfdY2uK0S4wC7xcyPKbaiauW1eFakl1dvxhc9lzumDL
mDV7xcyttkTMzKwP9v158uBfm71TJDVqScpLBWogeYo3DiANDVuUm3bDJyGHCxve
AFIQNmJKrhWCJ9nlaQTZoqTHECVaO1NLtUA6HEUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRKOPXKgajJGt7TvYF2mNT+GmuXjzAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L1NqajF5b0dveVJyZTA3MkJkcGpVX2hwcmw0OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALl6JjANBgkqhkiG9w0BAQsFAAOC
AQEAVyrcA59ZBBVQvPi7Rtzsn1fKrwhfbXehWpSwiVCVAG9y0kl3p8Jk4/w6MB/r
VCergj4MwRKLW3VI92KFPpHq4G/QcviNVfzDA6/QyOhAT12oOinByG4RKCTXx9k6
+OOh4oV74U6dQD0tDbbsS/2R4W/MWrANAbOuV6RHNpi1VctafV98SfSyLr5hlitM
L2i0NVdePlV4I3rFNnYAUq6cQtFyEqbescbVjh5tuBjqvyQhgEc5/rpAG1ihK9EI
12eQs14HtBZA/VXSipJ+WLByr1hHc+Q9IWlWvHQA8pzCqS69B4sA7j6wCHtYAe4M
E/dKOEVG/B4tyfgp7X5eKxlgzA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org