Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/2tjMpf8dEWj72YI9PSXqVDHmWdc.roa
File: 2tjMpf8dEWj72YI9PSXqVDHmWdc.roa (raw, json)
Hash identifier: PlQ9egSBSlMO/AQC2chUBC/p7Hc9ygsLb3sA+C7+fs0=
Subject key identifier: DA:D8:CC:A5:FF:1D:11:68:FB:D9:82:3D:3D:25:EA:54:31:E6:59:D7
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 034AD7EA
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/2tjMpf8dEWj72YI9PSXqVDHmWdc.roa
Signing time: Sat 01 Jan 2022 10:53:48 +0000
ROA not before: Sat 01 Jan 2022 10:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 194.115.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55236586 (0x34ad7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Jan 1 10:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dad8cca5ff1d1168fbd9823d3d25ea5431e659d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:32:05:5e:3f:99:b9:45:de:36:66:f3:d0:
b4:3d:9b:df:27:30:71:96:a7:14:e5:e5:69:18:af:
78:dc:94:2f:d2:4f:1a:6e:9f:cf:bd:2d:9c:d9:6f:
c7:13:50:73:29:1e:e8:cb:3d:b3:91:a7:76:c4:d4:
14:50:1a:9d:59:80:48:f8:49:ff:66:15:48:64:99:
fa:6f:94:da:1d:db:46:7d:02:91:5a:c9:8c:58:ca:
4f:4b:e6:ab:df:84:36:b2:8c:f4:ea:9f:6c:b5:c6:
d5:94:31:1a:d4:b4:fc:e4:a1:a2:13:4f:e7:3a:ea:
b8:4c:ef:70:68:b9:73:83:5b:f0:65:28:4d:f5:13:
89:3a:72:c1:a1:32:a8:35:50:74:ee:2d:00:df:bf:
1d:35:15:eb:d3:93:ad:56:90:42:d0:df:a7:70:51:
2a:ba:77:94:27:f5:9e:dd:4f:af:0a:5d:bf:bf:a8:
7b:cf:30:46:71:85:7a:ff:52:e1:d9:16:e8:4f:86:
38:5e:54:9f:96:d2:a4:42:ec:50:a3:71:74:4f:e6:
93:54:9e:ad:30:74:d8:ea:fc:4b:25:1a:df:21:73:
30:d4:9f:4f:64:22:60:79:5f:76:f5:3d:00:a7:0b:
1b:b2:fe:4d:54:81:d0:1c:f0:ef:4d:2e:d4:12:ce:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D8:CC:A5:FF:1D:11:68:FB:D9:82:3D:3D:25:EA:54:31:E6:59:D7
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/2tjMpf8dEWj72YI9PSXqVDHmWdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.182.0/23
Signature Algorithm: sha256WithRSAEncryption
40:1e:36:1d:34:5b:f6:de:3c:bc:c4:ef:1f:b7:37:b6:fd:0b:
00:0a:0d:11:79:4f:db:59:50:99:4a:f4:99:6c:41:16:cd:b2:
a0:fb:d1:d9:fa:a2:89:5a:0b:91:59:57:7f:14:72:c6:26:41:
6d:f1:5f:7c:9f:f4:8d:9e:c4:5c:4f:1a:12:dd:8f:bd:e8:04:
92:44:b2:5a:fb:fe:d5:5d:22:42:e9:c0:dc:ed:14:a3:0d:9e:
b3:41:a1:5b:65:fe:db:d6:b1:be:9c:9e:f2:fe:6c:67:93:1a:
50:f8:57:6f:ac:3d:80:b6:ac:f0:8a:44:47:40:af:ac:f0:a0:
b7:6e:78:1c:59:55:8c:9b:4a:c4:02:1e:aa:70:72:e3:2f:23:
ed:55:2d:49:5e:86:3d:39:b4:e4:80:06:53:69:99:db:ac:98:
87:43:19:38:89:db:b6:da:3a:10:c9:4f:76:4b:70:c3:e5:7f:
b8:88:e0:b5:c7:63:13:b3:80:d0:18:fd:f3:d9:d5:83:98:6a:
0e:d3:21:b0:b4:6f:90:51:46:2e:64:61:ea:04:26:36:3a:60:
0f:e3:4e:60:e8:77:33:f7:73:61:5b:80:8d:2d:5c:1a:8e:49:
51:4a:2c:89:c5:e4:ef:93:02:0c:10:6b:15:84:7c:59:16:a4:
7b:cc:90:20
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA0rX6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YmZmYzlhOTgzMjY2N2FjMGQ2ZDFlMjQwNjU1MDUzM2MzYjU1NjE4MB4XDTIyMDEw
MTEwNTM0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGFkOGNjYTVmZjFk
MTE2OGZiZDk4MjNkM2QyNWVhNTQzMWU2NTlkNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMdmMgVeP5m5Rd42ZvPQtD2b3ycwcZanFOXlaRiveNyUL9JP
Gm6fz70tnNlvxxNQcyke6Ms9s5GndsTUFFAanVmASPhJ/2YVSGSZ+m+U2h3bRn0C
kVrJjFjKT0vmq9+ENrKM9OqfbLXG1ZQxGtS0/OShohNP5zrquEzvcGi5c4Nb8GUo
TfUTiTpywaEyqDVQdO4tAN+/HTUV69OTrVaQQtDfp3BRKrp3lCf1nt1Prwpdv7+o
e88wRnGFev9S4dkW6E+GOF5Un5bSpELsUKNxdE/mk1SerTB02Or8SyUa3yFzMNSf
T2QiYHlfdvU9AKcLG7L+TVSB0Bzw700u1BLOACsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTa2Myl/x0RaPvZgj09JepUMeZZ1zAfBgNVHSMEGDAWgBS7/8mpgyZnrA1t
HiQGVQUzw7VWGDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VfX0pxWU1tWjZ3TmJSNGtCbFVGTThPMVZoZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmIvZmUxYjI4LTE1MTktNDA1NS1iMGZiLTc0OTdlNWE4ZjExYi8x
LzJ0ak1wZjhkRVdqNzJZSTlQU1hxVkRIbVdkYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIv
ZmUxYjI4LTE1MTktNDA1NS1iMGZiLTc0OTdlNWE4ZjExYi8xL3VfX0pxWU1tWjZ3
TmJSNGtCbFVGTThPMVZoZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcJztjANBgkqhkiG9w0BAQsFAAOC
AQEAQB42HTRb9t48vMTvH7c3tv0LAAoNEXlP21lQmUr0mWxBFs2yoPvR2fqiiVoL
kVlXfxRyxiZBbfFffJ/0jZ7EXE8aEt2PvegEkkSyWvv+1V0iQunA3O0Uow2es0Gh
W2X+29axvpye8v5sZ5MaUPhXb6w9gLas8IpER0CvrPCgt254HFlVjJtKxAIeqnBy
4y8j7VUtSV6GPTm05IAGU2mZ26yYh0MZOInbtto6EMlPdktww+V/uIjgtcdjE7OA
0Bj989nVg5hqDtMhsLRvkFFGLmRh6gQmNjpgD+NOYOh3M/dzYVuAjS1cGo5JUUos
icXk75MCDBBrFYR8WRake8yQIA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:41 2024 by rpki-client on console-fra.rpki-client.org