Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/PJJeRoKp_3SS8GZdjTRhxxovpOw.roa
File: PJJeRoKp_3SS8GZdjTRhxxovpOw.roa (raw, json)
Hash identifier: deKXwicQmG7r3Lyr1zDb7e0hJvyhoOJji+2Z8ZIYDio=
Subject key identifier: 3C:92:5E:46:82:A9:FF:74:92:F0:66:5D:8D:34:61:C7:1A:2F:A4:EC
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 0A66CCB8
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/PJJeRoKp_3SS8GZdjTRhxxovpOw.roa
Signing time: Sat 01 Jan 2022 15:58:00 +0000
ROA not before: Sat 01 Jan 2022 15:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25091
IP address blocks: 185.247.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174509240 (0xa66ccb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Jan 1 15:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c925e4682a9ff7492f0665d8d3461c71a2fa4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:74:c1:8a:05:72:d5:ce:cf:95:8a:dd:72:
86:ff:ed:34:3a:3e:1a:c5:b7:a7:92:d2:f4:38:90:
bb:d1:af:1d:a6:08:e5:33:4e:6c:50:1d:58:17:28:
9a:18:f2:66:be:00:d6:1c:28:41:8b:41:5f:fb:0a:
1e:15:0a:5a:88:26:9e:be:a4:df:3b:fe:7a:27:d7:
b4:73:d5:69:97:5d:16:a3:d7:4f:00:c2:13:ee:e4:
8f:3f:1f:7c:72:2e:eb:27:cc:02:0c:d1:37:ef:6f:
31:6b:38:24:b6:2d:e9:3c:9c:85:6e:61:19:c6:95:
d0:40:fd:1b:f3:7f:5a:4f:3b:9d:3a:45:76:3b:ed:
1d:4b:e3:a6:31:40:03:fd:b4:6f:dd:a7:ee:32:6f:
df:1e:bb:d0:15:21:27:92:f6:4f:3c:75:8a:1c:e2:
b4:1b:fb:65:99:7c:7d:97:c7:e8:5a:77:05:56:eb:
e8:79:f6:d4:97:bf:37:22:0c:e6:68:8c:0b:35:6e:
96:a8:0d:6a:b9:4f:e9:cb:64:d0:bd:ae:5c:a6:32:
1f:3d:2f:99:1f:fb:66:0e:8e:d7:58:7a:be:fd:09:
0c:ed:c3:8d:73:b9:bc:3d:20:bb:55:38:19:25:f6:
ec:ce:dd:58:10:e4:4e:49:21:4a:2d:a8:ba:93:89:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:92:5E:46:82:A9:FF:74:92:F0:66:5D:8D:34:61:C7:1A:2F:A4:EC
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/PJJeRoKp_3SS8GZdjTRhxxovpOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.76.0/22
Signature Algorithm: sha256WithRSAEncryption
37:82:74:ed:8a:b2:47:61:66:79:5d:70:d6:fb:3c:42:80:33:
55:0d:ef:0c:1f:41:48:2f:57:da:8e:dd:86:e0:42:79:48:3c:
56:c9:aa:68:df:cf:c0:31:1e:a8:88:2a:d4:d3:b0:7f:30:dc:
f9:de:c8:b6:30:ce:71:ff:fe:d3:51:2d:b6:a8:10:22:bd:85:
b3:aa:d0:ab:50:76:cb:96:bc:79:78:40:03:4a:3a:85:61:db:
46:40:03:19:bf:c7:5c:d4:44:c3:b9:0d:66:4a:72:76:e1:af:
c4:31:c9:3c:ef:0f:5e:f7:59:1c:8e:33:51:b2:f2:8e:50:21:
a8:07:b9:10:fe:a2:06:57:36:a9:23:06:99:a3:39:fa:20:ec:
64:6a:6d:6f:77:fd:37:c8:8f:79:05:b2:9d:0f:a2:b0:74:4f:
36:b0:41:88:80:ce:5e:2a:c0:c4:8d:d8:16:bf:c7:3f:af:f4:
15:8b:82:30:15:c7:fa:a0:0d:b4:93:55:d0:3e:d1:bc:96:08:
91:58:16:29:5b:4c:12:65:2b:96:cb:f3:02:08:9a:64:b3:36:
e1:0e:0f:68:64:21:b2:10:91:60:bd:c8:b2:8d:ca:bb:8e:36:
96:70:9c:71:af:aa:e6:c5:62:f9:60:19:0d:06:83:03:63:2a:
42:a4:81:fc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECmbMuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTk0Y2FjZGQ5MzVlNDVjZjcxYzYxNjc4MGExYjFkNGFhNjhjN2I1MB4XDTIyMDEw
MTE1NTgwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2M5MjVlNDY4MmE5
ZmY3NDkyZjA2NjVkOGQzNDYxYzcxYTJmYTRlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKs6dMGKBXLVzs+Vit1yhv/tNDo+GsW3p5LS9DiQu9GvHaYI
5TNObFAdWBcomhjyZr4A1hwoQYtBX/sKHhUKWogmnr6k3zv+eifXtHPVaZddFqPX
TwDCE+7kjz8ffHIu6yfMAgzRN+9vMWs4JLYt6TychW5hGcaV0ED9G/N/Wk87nTpF
djvtHUvjpjFAA/20b92n7jJv3x670BUhJ5L2Tzx1ihzitBv7ZZl8fZfH6Fp3BVbr
6Hn21Je/NyIM5miMCzVulqgNarlP6ctk0L2uXKYyHz0vmR/7Zg6O11h6vv0JDO3D
jXO5vD0gu1U4GSX27M7dWBDkTkkhSi2oupOJhBkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ8kl5Ggqn/dJLwZl2NNGHHGi+k7DAfBgNVHSMEGDAWgBQ1lMrN2TXkXPcc
YWeAobHUqmjHtTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05aVEt6ZGsxNUZ6M0hHRm5nS0d4MUtwb3g3VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjUvNWNiMjQ1LTQyYTItNDk4Zi1iN2IyLTRhYmRjMmJiOWZhMy8x
L1BKSmVSb0twXzNTUzhHWmRqVFJoeHhvdnBPdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUv
NWNiMjQ1LTQyYTItNDk4Zi1iN2IyLTRhYmRjMmJiOWZhMy8xL05aVEt6ZGsxNUZ6
M0hHRm5nS0d4MUtwb3g3VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn3TDANBgkqhkiG9w0BAQsFAAOC
AQEAN4J07YqyR2FmeV1w1vs8QoAzVQ3vDB9BSC9X2o7dhuBCeUg8VsmqaN/PwDEe
qIgq1NOwfzDc+d7ItjDOcf/+01EttqgQIr2Fs6rQq1B2y5a8eXhAA0o6hWHbRkAD
Gb/HXNREw7kNZkpyduGvxDHJPO8PXvdZHI4zUbLyjlAhqAe5EP6iBlc2qSMGmaM5
+iDsZGptb3f9N8iPeQWynQ+isHRPNrBBiIDOXirAxI3YFr/HP6/0FYuCMBXH+qAN
tJNV0D7RvJYIkVgWKVtMEmUrlsvzAgiaZLM24Q4PaGQhshCRYL3Iso3Ku442lnCc
ca+q5sVi+WAZDQaDA2MqQqSB/A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:18 2025 by rpki-client