Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/jaOkXwQ_eutYr89TMBKGJLudbLU.roa
File: jaOkXwQ_eutYr89TMBKGJLudbLU.roa (raw, json)
Hash identifier: ceJkCajre6VJAbZAeVW4LG2LNCuHIeFyGjWeMSntgdc=
Subject key identifier: 8D:A3:A4:5F:04:3F:7A:EB:58:AF:CF:53:30:12:86:24:BB:9D:6C:B5
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 0183175EAA15844904BE3F0F91D63D70C9B4
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/jaOkXwQ_eutYr89TMBKGJLudbLU.roa
Signing time: Wed 07 Sep 2022 09:53:43 +0000
ROA not before: Wed 07 Sep 2022 09:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50710
IP address blocks: 78.109.237.0/24 maxlen: 24
78.109.236.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.100.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:5e:aa:15:84:49:04:be:3f:0f:91:d6:3d:70:c9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Sep 7 09:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8da3a45f043f7aeb58afcf5330128624bb9d6cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:7f:d4:96:ac:88:20:7c:a6:bb:5c:44:e3:
20:77:37:a3:72:26:d6:1d:49:31:9c:91:21:34:1f:
71:07:0c:bb:f7:e7:b8:f1:f4:9f:78:cf:e8:2d:1c:
da:73:5b:51:b0:8e:fc:88:22:19:c7:56:ed:f2:84:
d9:3f:bf:d4:ee:c0:10:5b:22:74:64:61:e4:10:a0:
a6:c9:7a:6f:b4:de:b0:d1:3c:93:8a:19:7d:ed:6b:
9a:32:4f:db:ac:64:d0:68:95:55:bd:1f:1f:3a:be:
7d:ac:d9:a5:44:6a:e4:b1:f0:3f:5a:a3:47:8e:52:
59:14:7c:2d:d3:46:c6:ba:35:91:4e:f4:4c:16:9c:
3d:47:75:b3:cd:44:14:8d:84:49:5e:14:8c:8e:de:
3f:6b:c0:c3:e5:37:5d:01:ee:76:c6:1c:1d:04:73:
ff:8c:0b:7e:ac:01:a8:e6:4d:99:0d:f1:d7:76:78:
8a:bc:9a:19:74:a5:c4:73:55:7e:a1:0e:b0:e0:24:
91:ea:c5:f0:4d:39:f9:3f:3e:ab:43:82:d3:43:9b:
59:fb:0e:a0:f4:8c:8f:e6:c4:fa:46:f4:33:9c:85:
05:b5:35:bf:87:dd:2b:44:8a:48:aa:db:9b:33:ff:
c8:db:56:7a:00:c8:ec:33:06:8a:99:52:54:c8:9d:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A3:A4:5F:04:3F:7A:EB:58:AF:CF:53:30:12:86:24:BB:9D:6C:B5
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/jaOkXwQ_eutYr89TMBKGJLudbLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.236.0-78.109.238.255
185.52.100.0/23
Signature Algorithm: sha256WithRSAEncryption
09:f6:b7:78:96:5e:ee:e6:30:15:02:e4:26:c0:43:64:8d:74:
71:9f:61:ef:f9:86:30:f8:62:b8:8d:50:93:59:bd:0e:e3:38:
a7:ec:6c:a4:7c:34:44:32:34:a9:5f:7c:42:13:8c:36:bb:12:
3b:57:f2:40:d9:3d:dc:96:49:c9:a9:04:d7:9b:0a:04:0f:03:
b1:87:a6:82:34:f6:57:36:12:eb:ba:a2:0e:aa:4f:8e:a8:d6:
dc:93:50:52:22:66:d7:2d:a5:85:31:8b:b8:25:16:31:28:11:
f6:53:3b:41:a0:e9:9f:4d:4d:ae:e7:f4:29:d5:d7:c9:1d:23:
b1:56:c3:d7:1a:f8:47:92:b5:a4:ef:28:37:1b:13:9c:c4:96:
7f:f5:d8:56:49:5f:08:cf:ca:45:4c:1f:a9:7d:97:92:d7:65:
a6:25:db:f0:07:1b:39:57:46:a0:32:ef:3a:45:64:87:9c:e3:
27:a3:4b:9d:f4:e6:76:97:c4:ed:6a:60:73:2a:e9:0e:8f:3b:
fe:ba:7f:a9:51:d1:59:ac:ae:0e:5f:b6:8d:73:71:e4:fe:62:
26:c8:0a:9a:54:5c:3d:c6:b0:97:f3:a4:23:46:fd:fb:53:9d:
c0:b2:1b:9e:4d:07:3f:d4:a9:1f:78:5a:f5:de:2d:55:a3:d7:
88:4e:ad:8f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYMXXqoVhEkEvj8PkdY9cMm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi
MmY0NjYwHhcNMjIwOTA3MDk1MzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGEzYTQ1ZjA0M2Y3YWViNThhZmNmNTMzMDEyODYyNGJiOWQ2Y2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8F/1JasiCB8prtcROMgdzejcibW
HUkxnJEhNB9xBwy79+e48fSfeM/oLRzac1tRsI78iCIZx1bt8oTZP7/U7sAQWyJ0
ZGHkEKCmyXpvtN6w0TyTihl97WuaMk/brGTQaJVVvR8fOr59rNmlRGrksfA/WqNH
jlJZFHwt00bGujWRTvRMFpw9R3WzzUQUjYRJXhSMjt4/a8DD5TddAe52xhwdBHP/
jAt+rAGo5k2ZDfHXdniKvJoZdKXEc1V+oQ6w4CSR6sXwTTn5Pz6rQ4LTQ5tZ+w6g
9IyP5sT6RvQznIUFtTW/h90rRIpIqtubM//I21Z6AMjsMwaKmVJUyJ0AJQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFI2jpF8EP3rrWK/PUzAShiS7nWy1MB8GA1UdIwQY
MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1
LWZkMTY3YWQ5MmE5ZC8xL2phT2tYd1FfZXV0WXI4OVRNQktHSkx1ZGJMVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1LWZkMTY3YWQ5MmE5
ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQwDAMEAk5t
7AMEAE5t7gMEAbk0ZDANBgkqhkiG9w0BAQsFAAOCAQEACfa3eJZe7uYwFQLkJsBD
ZI10cZ9h7/mGMPhiuI1Qk1m9DuM4p+xspHw0RDI0qV98QhOMNrsSO1fyQNk93JZJ
yakE15sKBA8DsYemgjT2VzYS67qiDqpPjqjW3JNQUiJm1y2lhTGLuCUWMSgR9lM7
QaDpn01Nruf0KdXXyR0jsVbD1xr4R5K1pO8oNxsTnMSWf/XYVklfCM/KRUwfqX2X
ktdlpiXb8AcbOVdGoDLvOkVkh5zjJ6NLnfTmdpfE7WpgcyrpDo87/rp/qVHRWayu
Dl+2jXNx5P5iJsgKmlRcPcawl/OkI0b9+1OdwLIbnk0HP9SpH3ha9d4tVaPXiE6t
jw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:32 2024 by rpki-client on console-fra.rpki-client.org