Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/g0JiIiUrzL3h1vjtRErTqQNo8lA.roa
File: g0JiIiUrzL3h1vjtRErTqQNo8lA.roa (raw, json)
Hash identifier: uTyjw8auytV79UBKBK1gNYwR2XGkOTqyyZAHIII0GbY=
Subject key identifier: 83:42:62:22:25:2B:CC:BD:E1:D6:F8:ED:44:4A:D3:A9:03:68:F2:50
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 370FCB1C
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/g0JiIiUrzL3h1vjtRErTqQNo8lA.roa
Signing time: Sat 01 Jan 2022 12:57:48 +0000
ROA not before: Sat 01 Jan 2022 12:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39484
IP address blocks: 89.106.32.0/19 maxlen: 19
185.239.192.0/22 maxlen: 22
2a02:13c8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923781916 (0x370fcb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Jan 1 12:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83426222252bccbde1d6f8ed444ad3a90368f250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:de:66:9a:f8:0c:c1:b9:7d:b8:d4:9b:c2:
71:4c:37:2d:4b:03:3e:19:fb:aa:9f:24:49:bb:72:
85:8d:a4:6a:f7:16:ee:f2:6e:c1:52:c1:7e:53:2d:
15:06:66:09:d1:1e:65:60:21:11:91:11:da:c1:a0:
8e:db:a1:da:67:bb:2e:84:be:92:f5:ee:e9:4b:9d:
8c:49:f8:a8:78:77:19:6c:b8:4f:ec:e1:b8:d5:e5:
66:b1:71:20:1d:a4:96:63:fd:17:52:88:7c:1e:5a:
33:1e:a7:40:e2:6e:6d:d1:3c:d2:ba:ec:91:7d:86:
d6:71:f3:be:8a:46:85:2f:23:36:9d:2e:43:01:07:
56:cc:78:b4:3c:4d:51:66:28:88:b9:30:18:f7:de:
db:ce:ec:cd:33:e5:a1:43:4d:71:55:f9:61:e0:82:
56:c1:a6:f9:4e:7d:6a:2e:33:bb:64:d1:e7:f3:c0:
7e:39:8d:59:78:63:b0:07:46:10:b8:21:a8:6e:e3:
dd:22:94:16:b7:d1:90:25:8d:83:4c:5b:3f:86:33:
88:bf:5b:5b:4c:5f:dd:a1:20:ff:b5:a7:ff:c8:20:
60:15:8b:4d:e5:41:61:f4:5b:e7:22:e9:8a:4d:d0:
df:84:b0:7e:2f:de:dd:81:5e:e6:be:78:53:4b:db:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:42:62:22:25:2B:CC:BD:E1:D6:F8:ED:44:4A:D3:A9:03:68:F2:50
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/g0JiIiUrzL3h1vjtRErTqQNo8lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.32.0/19
185.239.192.0/22
IPv6:
2a02:13c8::/32
Signature Algorithm: sha256WithRSAEncryption
04:b6:8a:c8:7d:b3:87:04:5a:61:f0:b9:63:73:c6:cd:7a:e4:
7f:98:da:8f:7e:57:b1:cf:c3:73:5e:23:e5:d1:15:b7:e8:ea:
9a:1e:37:16:fb:20:0d:56:6f:6d:8f:7e:0f:1b:da:88:a2:25:
3a:17:d8:a0:5b:0d:0c:96:8a:df:55:01:bd:cd:77:e4:8c:ba:
23:34:c4:c7:ba:57:e7:42:b0:d6:87:4f:27:22:1f:2c:33:02:
10:e9:e3:aa:f5:65:c4:ad:92:64:15:e4:57:7d:e8:5e:14:68:
b5:f3:ca:6b:8d:66:0f:70:d6:b5:05:69:a9:74:60:bf:07:62:
a0:c1:74:73:c3:2d:97:0e:51:2d:30:43:26:cf:c4:23:2e:f6:
b2:d4:9d:29:a7:c3:82:cd:f9:49:20:75:bc:46:07:c8:f8:d6:
f3:22:e1:60:34:17:6d:59:bf:ff:ce:53:fd:c0:ed:89:7f:e9:
94:27:eb:94:eb:fc:91:38:d2:63:22:83:dc:52:1e:0a:25:ee:
fe:9a:d1:2d:9d:f7:68:23:a4:51:75:55:70:c0:d7:26:6f:98:
07:69:27:02:2c:c3:36:e1:10:43:df:8c:73:c2:dd:e7:33:54:
93:98:6a:3e:71:29:ad:78:51:6c:18:24:16:41:de:ca:f0:7a:
1a:5f:b0:6e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIENw/LHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MjM5MTM1M2Y2ZTFmNTAyNTA0YTA4NjhlYmY4YWQwZGViYzlkYTc4MB4XDTIyMDEw
MTEyNTc0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODM0MjYyMjIyNTJi
Y2NiZGUxZDZmOGVkNDQ0YWQzYTkwMzY4ZjI1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK7m3maa+AzBuX241JvCcUw3LUsDPhn7qp8kSbtyhY2kavcW
7vJuwVLBflMtFQZmCdEeZWAhEZER2sGgjtuh2me7LoS+kvXu6UudjEn4qHh3GWy4
T+zhuNXlZrFxIB2klmP9F1KIfB5aMx6nQOJubdE80rrskX2G1nHzvopGhS8jNp0u
QwEHVsx4tDxNUWYoiLkwGPfe287szTPloUNNcVX5YeCCVsGm+U59ai4zu2TR5/PA
fjmNWXhjsAdGELghqG7j3SKUFrfRkCWNg0xbP4YziL9bW0xf3aEg/7Wn/8ggYBWL
TeVBYfRb5yLpik3Q34Swfi/e3YFe5r54U0vbFKECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSDQmIiJSvMveHW+O1EStOpA2jyUDAfBgNVHSMEGDAWgBSSORNT9uH1AlBK
CGjr+K0N68naeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tqa1RVX2JoOVFKUVNnaG82X2l0RGV2SjJuZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTIvMjI3NjcwLWZlNGQtNGJkNi1iZjI4LWIyNTQ1YjQwNGVlYy8x
L2cwSmlJaVVyekwzaDF2anRSRXJUcVFObzhsQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIv
MjI3NjcwLWZlNGQtNGJkNi1iZjI4LWIyNTQ1YjQwNGVlYy8xL2tqa1RVX2JoOVFK
UVNnaG82X2l0RGV2SjJuZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBVlqIAMEArnvwDANBAIAAjAHAwUA
KgITyDANBgkqhkiG9w0BAQsFAAOCAQEABLaKyH2zhwRaYfC5Y3PGzXrkf5jaj35X
sc/Dc14j5dEVt+jqmh43FvsgDVZvbY9+DxvaiKIlOhfYoFsNDJaK31UBvc135Iy6
IzTEx7pX50Kw1odPJyIfLDMCEOnjqvVlxK2SZBXkV33oXhRotfPKa41mD3DWtQVp
qXRgvwdioMF0c8Mtlw5RLTBDJs/EIy72stSdKafDgs35SSB1vEYHyPjW8yLhYDQX
bVm//85T/cDtiX/plCfrlOv8kTjSYyKD3FIeCiXu/prRLZ33aCOkUXVVcMDXJm+Y
B2knAizDNuEQQ9+Mc8Ld5zNUk5hqPnEprXhRbBgkFkHeyvB6Gl+wbg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:06 2023 by rpki-client on console-ams.rpki-client.org