Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jD_jlEjrjgKk9qCdIUj6i_7-bLo.roa
File: jD_jlEjrjgKk9qCdIUj6i_7-bLo.roa (raw, json)
Hash identifier: 3i/L/Ph4RDpdx0n8i62k8h1WekKh3+vM/V9h47FFCR0=
Subject key identifier: 8C:3F:E3:94:48:EB:8E:02:A4:F6:A0:9D:21:48:FA:8B:FE:FE:6C:BA
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1995388B
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jD_jlEjrjgKk9qCdIUj6i_7-bLo.roa
Signing time: Sat 09 Apr 2022 22:23:37 +0000
ROA not before: Sat 09 Apr 2022 22:23:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429209739 (0x1995388b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 9 22:23:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c3fe39448eb8e02a4f6a09d2148fa8bfefe6cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:18:3c:b0:2e:14:95:a8:cf:0e:f1:b7:97:
2d:af:94:e6:62:d3:ca:03:f2:3a:c4:37:19:90:26:
6a:48:3c:49:85:47:81:17:41:1c:e3:1d:23:62:ae:
38:45:c8:0d:b4:0a:48:17:2a:7e:36:c9:75:aa:dd:
ac:ca:c9:f6:9a:91:b7:e4:b9:b3:1e:77:24:bd:53:
df:1b:bb:2b:3b:5e:60:dd:80:1e:99:6a:f7:4b:1a:
9c:8d:7a:a1:a0:91:ca:b9:1e:b0:a0:d4:10:f5:c1:
1e:6f:13:b8:59:ad:be:23:a5:2d:f5:1f:05:71:f5:
36:de:d5:65:c3:56:8d:5b:db:a5:36:6a:04:28:e4:
13:2a:a9:55:4d:b2:6f:26:29:75:e5:91:de:9b:0e:
7c:58:1f:f0:fd:b2:89:2e:30:02:18:b2:91:5d:d9:
9b:6f:8b:cf:6e:33:ac:ab:ab:0b:2d:73:48:34:38:
5b:dd:1a:e6:c2:95:27:69:8a:48:10:4f:ee:ca:b4:
9e:83:ad:a3:4f:0d:0b:ab:2f:a7:0c:e8:b9:6f:d4:
f9:0e:f2:fa:43:d2:83:28:cf:e8:78:51:5a:d3:76:
76:ff:32:52:90:d8:f0:c4:24:a1:6b:1b:78:56:60:
02:89:6d:65:d2:4f:d9:0c:49:53:bf:ee:b5:d5:64:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:E3:94:48:EB:8E:02:A4:F6:A0:9D:21:48:FA:8B:FE:FE:6C:BA
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jD_jlEjrjgKk9qCdIUj6i_7-bLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.58.0/24
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
7f:74:97:fd:c6:b1:dc:2f:d6:7b:ef:5f:68:68:24:df:af:83:
24:e3:4c:5b:99:13:13:c0:33:7e:9c:21:23:5f:fd:6f:4f:0b:
30:4a:e0:f9:90:e9:a1:ce:6a:32:ea:39:aa:18:86:73:cc:2b:
c8:35:6d:82:7e:23:48:ae:55:fb:89:32:fb:b8:07:b7:e8:6a:
56:22:b1:7f:d4:fa:41:78:e8:f7:ab:e2:b7:19:5f:4f:01:9e:
dc:0e:e7:83:14:81:4c:1c:25:7a:0f:18:73:a8:be:3c:42:cf:
f8:2e:1e:22:95:66:5a:85:51:2f:a1:6e:33:73:60:18:d9:27:
a4:a8:96:0c:60:28:b6:95:7c:64:d4:12:85:2b:bb:d6:f2:4a:
20:8b:65:53:10:36:40:53:91:05:e0:22:07:8d:ff:b2:da:5f:
80:11:ce:97:4f:37:58:e6:71:2f:cd:a9:43:15:7a:e8:b3:20:
7e:2a:17:2a:82:ba:7c:70:4a:71:d0:0b:04:57:be:ea:ce:e0:
03:98:c7:5f:8b:52:8e:16:40:6a:44:2f:69:68:f1:1c:68:f7:
58:0e:f3:ee:87:77:4f:42:5f:85:8c:ee:10:d8:3e:5d:c9:12:
0f:dc:37:12:a8:88:f8:3c:e7:59:ae:b3:37:22:20:38:78:48:
2b:cb:a6:67
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEGZU4izANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDQw
OTIyMjMzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGMzZmUzOTQ0OGVi
OGUwMmE0ZjZhMDlkMjE0OGZhOGJmZWZlNmNiYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjtGDywLhSVqM8O8beXLa+U5mLTygPyOsQ3GZAmakg8SYVH
gRdBHOMdI2KuOEXIDbQKSBcqfjbJdardrMrJ9pqRt+S5sx53JL1T3xu7KzteYN2A
Hplq90sanI16oaCRyrkesKDUEPXBHm8TuFmtviOlLfUfBXH1Nt7VZcNWjVvbpTZq
BCjkEyqpVU2ybyYpdeWR3psOfFgf8P2yiS4wAhiykV3Zm2+Lz24zrKurCy1zSDQ4
W90a5sKVJ2mKSBBP7sq0noOto08NC6svpwzouW/U+Q7y+kPSgyjP6HhRWtN2dv8y
UpDY8MQkoWsbeFZgAoltZdJP2QxJU7/utdVktg0CAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBSMP+OUSOuOAqT2oJ0hSPqL/v5sujAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2pEX2psRWpyamdLazlxQ2RJVWo2aV83LWJMby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEALl1FgMEALl6OgMEALmFwDAPBAIA
AjAJAwcAKgaCwgAAMA0GCSqGSIb3DQEBCwUAA4IBAQB/dJf9xrHcL9Z7719oaCTf
r4Mk40xbmRMTwDN+nCEjX/1vTwswSuD5kOmhzmoy6jmqGIZzzCvINW2CfiNIrlX7
iTL7uAe36GpWIrF/1PpBeOj3q+K3GV9PAZ7cDueDFIFMHCV6DxhzqL48Qs/4Lh4i
lWZahVEvoW4zc2AY2SekqJYMYCi2lXxk1BKFK7vW8kogi2VTEDZAU5EF4CIHjf+y
2l+AEc6XTzdY5nEvzalDFXrosyB+Khcqgrp8cEpx0AsEV77qzuADmMdfi1KOFkBq
RC9paPEcaPdYDvPuh3dPQl+FjO4Q2D5dyRIP3DcSqIj4POdZrrM3IiA4eEgry6Zn
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org