Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/AjJob7OjCM95Kj3yG8fZkAsgz4Q.roa
File: AjJob7OjCM95Kj3yG8fZkAsgz4Q.roa (raw, json)
Hash identifier: Gq64WIcgz4HA/oK/mUMYdoicMiJSPJywKiPn1oqEBpw=
Subject key identifier: 02:32:68:6F:B3:A3:08:CF:79:2A:3D:F2:1B:C7:D9:90:0B:20:CF:84
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 01856F5476E359C43E0A7631F125F5F490DF
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/AjJob7OjCM95Kj3yG8fZkAsgz4Q.roa
Signing time: Sun 01 Jan 2023 21:54:44 +0000
ROA not before: Sun 01 Jan 2023 21:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205721
IP address blocks: 185.208.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:76:e3:59:c4:3e:0a:76:31:f1:25:f5:f4:90:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 1 21:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0232686fb3a308cf792a3df21bc7d9900b20cf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a3:97:30:50:df:86:81:61:27:98:30:94:00:
ce:0d:36:20:26:c4:fe:32:51:73:e2:ff:2f:cc:7c:
7f:8b:35:d6:d5:8f:cf:2c:31:78:fc:ec:0b:44:56:
77:2d:9a:5d:72:23:29:a7:79:36:e4:45:35:96:97:
d7:e5:41:58:b6:aa:11:b9:2b:dd:54:09:83:71:b9:
50:b8:ef:4f:81:96:f9:01:d0:85:96:a9:cb:da:b8:
34:a7:fd:af:d1:1a:9f:fc:69:d9:0c:3f:00:85:c8:
da:3a:07:9d:82:ef:68:4a:1c:a8:9d:38:8f:44:0e:
15:a3:c6:44:dd:80:8c:8b:3e:33:74:d0:54:3b:c1:
6e:0a:ca:bf:70:b3:d9:24:30:a5:3b:44:9e:7c:7a:
0d:9d:14:f7:dd:a5:ad:7d:dc:0e:02:4a:cc:ce:e6:
47:0c:79:e8:0b:52:c9:1d:3b:2d:7f:bd:c8:58:94:
e9:15:36:3e:d7:53:58:c9:e6:16:e1:35:e7:4d:86:
90:16:37:66:23:53:13:d1:2a:85:1e:c0:9b:4c:39:
53:1a:d3:7d:c9:9e:30:84:cd:0a:d6:f8:92:57:6e:
2c:b8:f2:54:aa:9f:72:16:fc:de:a0:81:c6:4f:0c:
3f:9e:bb:c6:b7:d9:63:a6:c6:18:5b:fc:b2:f0:e0:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:32:68:6F:B3:A3:08:CF:79:2A:3D:F2:1B:C7:D9:90:0B:20:CF:84
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/AjJob7OjCM95Kj3yG8fZkAsgz4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.80.0/22
Signature Algorithm: sha256WithRSAEncryption
77:cf:4b:d7:0b:c8:ae:82:d8:ea:7e:62:88:e0:30:35:96:14:
09:cb:85:95:39:93:94:88:df:6b:67:2e:96:c6:ad:31:9b:6b:
8a:29:cf:0e:1d:46:f9:0c:cc:ca:58:d3:1c:dd:23:e9:2c:e8:
73:65:17:4f:a9:84:40:96:b7:98:88:19:d5:70:4b:66:83:db:
8b:58:8b:c8:0a:ab:91:4b:e2:f4:24:a4:b5:99:62:4a:c3:32:
e8:54:72:a7:19:ac:9c:f0:56:bc:cb:bb:5b:76:85:af:75:75:
8f:61:26:8a:a9:ae:c0:dd:d2:64:ea:97:ff:ee:0c:b6:b5:62:
b7:a1:b4:98:53:b0:29:a0:b8:0b:fa:55:18:d6:54:ec:fd:89:
9d:11:65:74:f2:ef:15:3b:c4:0b:0e:e3:cd:5b:24:0d:36:52:
b3:03:23:4b:2f:88:10:67:12:2b:6d:39:78:73:0f:2d:75:06:
f0:10:c4:53:8d:b1:1a:34:74:2e:52:6e:d8:83:6e:b8:cb:f6:
7b:80:a3:ca:c9:58:05:0e:8d:5d:ec:46:e3:c0:00:ba:8b:83:
a5:72:2e:4d:ff:ba:df:d4:6d:4d:58:49:57:ed:70:5a:ea:64:
d3:08:e9:50:cf:fc:fa:44:db:cf:b1:7d:a8:52:d9:55:b9:ea:
d6:6b:54:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvVHbjWcQ+CnYx8SX19JDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5MGY1ZjMxZjIzOGRmM2U4ZjNiZGZjYzA1NzUxY2My
ZjE5MmMwHhcNMjMwMTAxMjE1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjMyNjg2ZmIzYTMwOGNmNzkyYTNkZjIxYmM3ZDk5MDBiMjBjZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqOXMFDfhoFhJ5gwlADODTYgJsT+
MlFz4v8vzHx/izXW1Y/PLDF4/OwLRFZ3LZpdciMpp3k25EU1lpfX5UFYtqoRuSvd
VAmDcblQuO9PgZb5AdCFlqnL2rg0p/2v0Rqf/GnZDD8AhcjaOgedgu9oShyonTiP
RA4Vo8ZE3YCMiz4zdNBUO8FuCsq/cLPZJDClO0SefHoNnRT33aWtfdwOAkrMzuZH
DHnoC1LJHTstf73IWJTpFTY+11NYyeYW4TXnTYaQFjdmI1MT0SqFHsCbTDlTGtN9
yZ4whM0K1viSV24suPJUqp9yFvzeoIHGTww/nrvGt9ljpsYYW/yy8OATCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAIyaG+zowjPeSo98hvH2ZALIM+EMB8GA1UdIwQY
MBaAFCcCkPXzHyON8+jzvfzAV1HMLxksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAt
YjE0Y2M5MWM3NzZjLzEvQWpKb2I3T2pDTTk1S2ozeUc4ZlprQXNnejRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAtYjE0Y2M5MWM3NzZj
LzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudBQMA0G
CSqGSIb3DQEBCwUAA4IBAQB3z0vXC8iugtjqfmKI4DA1lhQJy4WVOZOUiN9rZy6W
xq0xm2uKKc8OHUb5DMzKWNMc3SPpLOhzZRdPqYRAlreYiBnVcEtmg9uLWIvICquR
S+L0JKS1mWJKwzLoVHKnGayc8Fa8y7tbdoWvdXWPYSaKqa7A3dJk6pf/7gy2tWK3
obSYU7ApoLgL+lUY1lTs/YmdEWV08u8VO8QLDuPNWyQNNlKzAyNLL4gQZxIrbTl4
cw8tdQbwEMRTjbEaNHQuUm7Yg264y/Z7gKPKyVgFDo1d7EbjwAC6i4Olci5N/7rf
1G1NWElX7XBa6mTTCOlQz/z6RNvPsX2oUtlVuerWa1Qd
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:06 2025 by rpki-client