Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/jpXFZAC1KqoNzNwHHK-ngoNiw-M.roa
File: jpXFZAC1KqoNzNwHHK-ngoNiw-M.roa (raw, json)
Hash identifier: agGJ0HRzX7NW0Tbml+ukeH+WtHb5tXBg4h28HmMuU8c=
Subject key identifier: 8E:95:C5:64:00:B5:2A:AA:0D:CC:DC:07:1C:AF:A7:82:83:62:C3:E3
Certificate issuer: /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial: 01E8BC9E
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/jpXFZAC1KqoNzNwHHK-ngoNiw-M.roa
Signing time: Fri 01 Apr 2022 08:42:07 +0000
ROA not before: Fri 01 Apr 2022 08:42:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 80.73.247.0/24 maxlen: 24
2a11:1680:1::/48 maxlen: 48
2a11:1680:4::/48 maxlen: 48
2a11:1680:2::/48 maxlen: 48
2a11:1680:5::/48 maxlen: 48
2a11:1680::/48 maxlen: 48
2a11:1680:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32029854 (0x1e8bc9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Validity
Not Before: Apr 1 08:42:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e95c56400b52aaa0dccdc071cafa7828362c3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:c5:0a:9f:44:38:4c:38:51:c2:55:7f:58:
99:b8:62:9a:fe:71:de:6b:d7:0d:5b:b8:a6:fd:d4:
d6:53:68:0c:dc:2c:86:22:dc:63:ed:9e:82:01:e7:
ca:19:ef:52:76:8d:ea:bd:e8:64:c2:a9:36:42:a1:
0e:e9:86:6d:05:38:3a:ce:b8:34:89:aa:54:96:02:
40:77:8f:f4:54:8f:01:28:86:09:0f:d1:cb:d8:7d:
8b:e5:e1:f8:9b:85:45:ee:96:42:0d:5c:27:79:8a:
7f:22:29:79:f0:2f:8f:ff:1e:58:c7:8e:f8:4b:da:
21:e6:7f:8e:ec:a9:1c:16:eb:ae:16:f5:7c:61:7d:
61:4a:9f:62:6d:28:af:de:bd:3d:d8:4e:6b:05:ff:
af:1e:f5:00:56:4e:20:9f:cd:1c:8c:55:ab:d1:fe:
68:00:e4:aa:15:28:4b:b0:3c:2e:8b:44:6f:4a:01:
e3:af:2e:3a:27:74:f7:17:e1:60:a9:a5:dc:38:8b:
4b:9b:6e:82:a4:ad:89:99:4b:5b:a7:bb:0d:6f:d2:
d4:91:a4:9a:1a:bf:83:90:e4:15:61:bd:e6:c5:0d:
58:d2:01:e6:f8:05:58:28:fc:93:c1:21:6f:06:8a:
72:75:e6:37:2d:15:bd:01:3d:41:30:88:bd:a7:1b:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:95:C5:64:00:B5:2A:AA:0D:CC:DC:07:1C:AF:A7:82:83:62:C3:E3
X509v3 Authority Key Identifier:
keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/jpXFZAC1KqoNzNwHHK-ngoNiw-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.247.0/24
IPv6:
2a11:1680::-2a11:1680:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:6a:e3:8c:22:32:45:82:c8:81:cf:cb:3c:6f:17:dc:39:70:
3f:47:2a:88:b2:bd:ca:a9:8d:f6:08:d0:4c:52:c0:a4:42:72:
c1:eb:1c:67:7f:6c:d8:a5:0c:0f:ba:7e:46:5d:09:c2:bc:e3:
a5:28:9d:e6:3f:46:c9:a7:f0:23:9f:3d:f7:b9:92:3c:f6:84:
69:d9:bb:85:d2:f2:bd:43:4f:3f:5b:6d:10:af:e1:19:f2:cb:
f2:6d:1e:79:cd:89:31:dd:21:e7:48:fa:e1:0f:6b:1d:ff:46:
ff:6e:07:e9:0d:81:8f:33:4b:bc:04:5f:34:00:67:2a:34:26:
f0:17:7b:8c:08:fd:2d:20:e3:25:15:c2:c5:50:f2:8c:e1:25:
c0:87:88:50:3f:43:0f:ec:e4:6b:ec:6c:1b:da:fd:52:30:72:
8d:89:1b:7b:51:07:98:5a:36:d5:7a:c9:1a:65:41:dc:a3:78:
c2:fb:46:10:9d:59:47:77:f3:34:f5:85:50:e7:ec:e3:60:86:
5b:3b:f6:22:bd:79:ca:af:d1:8e:1b:a7:a9:4a:7c:2b:23:5c:
c1:c9:4b:dc:84:b1:d8:97:71:58:b2:b8:3c:c7:80:27:0d:c9:
d3:d7:5a:9e:54:74:9a:8b:0d:e6:42:b2:55:4c:03:7b:83:57:
02:fa:b5:fc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEAei8njANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZDkyYmMwNDVhYjljYzlmMDE3ZThiZjdmZmU0MjNkYTgwNGE2MTRmMB4XDTIyMDQw
MTA4NDIwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGU5NWM1NjQwMGI1
MmFhYTBkY2NkYzA3MWNhZmE3ODI4MzYyYzNlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM8mxQqfRDhMOFHCVX9Ymbhimv5x3mvXDVu4pv3U1lNoDNws
hiLcY+2eggHnyhnvUnaN6r3oZMKpNkKhDumGbQU4Os64NImqVJYCQHeP9FSPASiG
CQ/Ry9h9i+Xh+JuFRe6WQg1cJ3mKfyIpefAvj/8eWMeO+EvaIeZ/juypHBbrrhb1
fGF9YUqfYm0or969PdhOawX/rx71AFZOIJ/NHIxVq9H+aADkqhUoS7A8LotEb0oB
468uOid09xfhYKml3DiLS5tugqStiZlLW6e7DW/S1JGkmhq/g5DkFWG95sUNWNIB
5vgFWCj8k8EhbwaKcnXmNy0VvQE9QTCIvacbXg0CAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBSOlcVkALUqqg3M3Accr6eCg2LD4zAfBgNVHSMEGDAWgBQ9krwEWrnMnwF+
i/f/5CPagEphTzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BaSzhCRnE1eko4QmZvdjNfLVFqMm9CS1lVOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDMvMzYyNmRjLTIyMWYtNGI5YS1iYjY4LTNlMzgxMmZmYTE0Ny8x
L2pwWEZaQUMxS3FvTnpOd0hISy1uZ29OaXctTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMv
MzYyNmRjLTIyMWYtNGI5YS1iYjY4LTNlMzgxMmZmYTE0Ny8xL1BaSzhCRnE1eko4
QmZvdjNfLVFqMm9CS1lVOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEwBgMEAFBJ9zAYBAIAAjASMBADBQcqERaA
AwcBKhEWgAAEMA0GCSqGSIb3DQEBCwUAA4IBAQAVauOMIjJFgsiBz8s8bxfcOXA/
RyqIsr3KqY32CNBMUsCkQnLB6xxnf2zYpQwPun5GXQnCvOOlKJ3mP0bJp/Ajnz33
uZI89oRp2buF0vK9Q08/W20Qr+EZ8svybR55zYkx3SHnSPrhD2sd/0b/bgfpDYGP
M0u8BF80AGcqNCbwF3uMCP0tIOMlFcLFUPKM4SXAh4hQP0MP7ORr7Gwb2v1SMHKN
iRt7UQeYWjbVeskaZUHco3jC+0YQnVlHd/M09YVQ5+zjYIZbO/YivXnKr9GOG6ep
SnwrI1zByUvchLHYl3FYsrg8x4AnDcnT11qeVHSaiw3mQrJVTAN7g1cC+rX8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:07 2024 by rpki-client on console-fra.rpki-client.org