Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/JC2szoUSl7YUiN4qbi3AWk2x-B0.roa
File: JC2szoUSl7YUiN4qbi3AWk2x-B0.roa (raw, json)
Hash identifier: eLkY3IwdT0FKpf/CdBo5yrT+QXOqhXUQSPcz2UZvCPo=
Subject key identifier: 24:2D:AC:CE:85:12:97:B6:14:88:DE:2A:6E:2D:C0:5A:4D:B1:F8:1D
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 018484C6FCBC919FF4F1797DD303432FE2AE
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/JC2szoUSl7YUiN4qbi3AWk2x-B0.roa
Signing time: Thu 17 Nov 2022 08:49:04 +0000
ROA not before: Thu 17 Nov 2022 08:49:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 37.143.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:84:c6:fc:bc:91:9f:f4:f1:79:7d:d3:03:43:2f:e2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Nov 17 08:49:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=242dacce851297b61488de2a6e2dc05a4db1f81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:24:bd:c4:6a:e7:4a:43:ab:f6:d5:ad:66:
d4:51:b2:db:39:0b:93:35:b0:89:2b:33:8c:45:58:
9e:85:ab:3b:f2:9e:e8:a3:78:a1:22:6b:35:90:2c:
00:67:98:4b:98:57:c8:8b:53:da:1e:ee:38:64:72:
08:a2:51:7d:00:25:64:04:10:b2:ae:39:c4:28:fe:
8f:b4:fa:9a:31:98:e8:7c:88:bf:4c:34:3c:af:bb:
73:0d:60:fe:28:ec:75:c3:a4:08:11:44:f4:e4:61:
c7:91:ce:1c:f1:30:62:21:1f:15:15:65:f1:8d:8a:
c0:5e:47:a9:cf:d7:32:92:a9:09:d6:a5:d3:bd:c6:
6d:f0:c1:bf:59:9e:61:a2:52:66:f1:70:d7:24:a0:
35:24:16:f3:d2:25:8d:1e:c9:03:34:07:0e:a4:0f:
b1:73:55:ed:54:e6:13:b3:7f:69:b2:60:ac:10:d4:
c7:6a:52:93:32:cf:32:4f:a4:a7:43:03:72:7f:6e:
18:21:ae:c2:a1:43:bd:fb:bc:a7:15:0a:90:90:6d:
6e:d8:b4:10:17:9b:5d:01:91:90:b5:88:c3:3b:4f:
45:69:7e:45:e5:90:3c:79:07:15:ed:52:02:3f:57:
77:f0:94:20:47:be:71:b7:04:f7:6f:f9:24:30:2c:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:AC:CE:85:12:97:B6:14:88:DE:2A:6E:2D:C0:5A:4D:B1:F8:1D
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/JC2szoUSl7YUiN4qbi3AWk2x-B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.4.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:61:cc:ed:c0:99:48:0e:b2:75:ad:63:b4:76:9a:91:bf:7c:
19:67:46:49:b7:12:ff:ee:8e:d7:7c:2e:8a:82:46:76:6d:7a:
44:e6:c2:bf:b7:72:b4:6c:c7:a3:3c:72:ae:1b:55:58:a8:5a:
90:03:ff:1b:d6:fa:02:27:1b:a0:45:a8:c8:23:04:5f:88:e3:
00:3a:92:4b:30:bb:83:3b:e0:eb:14:e7:5a:19:46:a4:da:72:
d6:04:ec:65:56:38:db:c0:a7:70:3b:ee:80:ac:95:73:b0:73:
d9:f0:f4:71:59:c3:b5:1f:66:48:22:ad:ef:b9:10:46:d9:79:
c8:69:e7:09:92:ee:5d:19:47:7a:1c:c8:c8:ee:71:e8:c5:fe:
a4:54:0c:2d:cf:2d:21:1f:77:92:39:81:23:6c:6f:fd:8b:ed:
6b:24:2f:43:9e:cb:79:6f:ee:99:b2:e0:25:8d:3d:b4:07:c5:
c7:ed:e9:e5:a2:a8:a4:a9:d2:f1:eb:f1:4e:70:7e:02:f1:69:
b1:72:b6:40:5e:9f:40:3d:dd:b8:5b:90:83:75:cf:ca:60:7c:
48:29:e5:c7:73:5d:8f:bf:56:c9:b7:f1:88:18:60:a1:08:22:
a2:f4:23:97:05:7c:fc:5f:b4:58:aa:58:08:6a:c7:49:6a:1f:
11:23:78:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSExvy8kZ/08Xl90wNDL+KuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh
M2Q0YjUwHhcNMjIxMTE3MDg0OTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDJkYWNjZTg1MTI5N2I2MTQ4OGRlMmE2ZTJkYzA1YTRkYjFmODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD4kvcRq50pDq/bVrWbUUbLbOQuT
NbCJKzOMRViehas78p7oo3ihIms1kCwAZ5hLmFfIi1PaHu44ZHIIolF9ACVkBBCy
rjnEKP6PtPqaMZjofIi/TDQ8r7tzDWD+KOx1w6QIEUT05GHHkc4c8TBiIR8VFWXx
jYrAXkepz9cykqkJ1qXTvcZt8MG/WZ5holJm8XDXJKA1JBbz0iWNHskDNAcOpA+x
c1XtVOYTs39psmCsENTHalKTMs8yT6SnQwNyf24YIa7CoUO9+7ynFQqQkG1u2LQQ
F5tdAZGQtYjDO09FaX5F5ZA8eQcV7VICP1d38JQgR75xtwT3b/kkMCwPHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQtrM6FEpe2FIjeKm4twFpNsfgdMB8GA1UdIwQY
MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt
MmUxYzBhZjRmYWE0LzEvSkMyc3pvVVNsN1lVaU40cWJpM0FXazJ4LUIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0
LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY8EMA0G
CSqGSIb3DQEBCwUAA4IBAQBaYcztwJlIDrJ1rWO0dpqRv3wZZ0ZJtxL/7o7XfC6K
gkZ2bXpE5sK/t3K0bMejPHKuG1VYqFqQA/8b1voCJxugRajIIwRfiOMAOpJLMLuD
O+DrFOdaGUak2nLWBOxlVjjbwKdwO+6ArJVzsHPZ8PRxWcO1H2ZIIq3vuRBG2XnI
aecJku5dGUd6HMjI7nHoxf6kVAwtzy0hH3eSOYEjbG/9i+1rJC9Dnst5b+6ZsuAl
jT20B8XH7enloqikqdLx6/FOcH4C8WmxcrZAXp9APd24W5CDdc/KYHxIKeXHc12P
v1bJt/GIGGChCCKi9COXBXz8X7RYqlgIasdJah8RI3i/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:41 2023 by rpki-client on console-fra.rpki-client.org