Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/j800CMDPXRaj_scYnr2LBGGToM4.roa
File: j800CMDPXRaj_scYnr2LBGGToM4.roa (raw, json)
Hash identifier: d+WlDhKwLo3/m88FROTDLwpc/X/vLarEP0ieOYL/gZc=
Subject key identifier: 8F:CD:34:08:C0:CF:5D:16:A3:FE:C7:18:9E:BD:8B:04:61:93:A0:CE
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 09E157B8
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/j800CMDPXRaj_scYnr2LBGGToM4.roa
Signing time: Sat 01 Jan 2022 01:51:53 +0000
ROA not before: Sat 01 Jan 2022 01:51:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15757
IP address blocks: 94.124.224.0/21 maxlen: 23
185.165.200.0/22 maxlen: 24
217.17.160.0/19 maxlen: 19
82.114.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165763000 (0x9e157b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Jan 1 01:51:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fcd3408c0cf5d16a3fec7189ebd8b046193a0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:e8:89:c7:f5:aa:f7:c6:94:a9:ef:58:87:
ec:99:d7:16:3e:ce:e5:84:62:94:a0:fe:3d:d2:42:
59:8b:73:c3:a6:71:e0:2d:ca:f7:e6:94:29:bf:08:
71:1d:de:9e:5c:0d:14:da:d4:ec:51:b7:5b:63:e9:
02:0b:83:9b:c3:d6:88:0d:7c:56:6b:47:7a:71:94:
66:17:49:8c:3d:07:80:01:ec:a9:12:05:50:54:71:
01:a6:47:5a:db:65:86:39:a3:6b:07:2d:df:18:cf:
72:cb:cf:be:6d:f7:53:bf:6c:62:7e:ce:c3:53:a0:
75:4a:53:8a:44:47:8d:f8:34:54:06:a7:0f:01:89:
17:7d:87:b7:1e:85:41:cc:a6:f5:a5:4c:23:a6:86:
6d:64:17:05:7c:1e:2b:2c:23:b8:5d:ea:f1:e1:96:
cc:86:9b:80:19:66:64:a4:9e:96:2b:08:05:d3:2d:
f3:2b:bc:35:c9:4f:b4:9c:e7:1b:05:d3:39:ac:fe:
74:53:51:07:f8:a1:06:d0:a2:ed:9b:5c:fa:1f:da:
da:11:0a:11:48:b9:af:8f:24:48:7c:7d:67:b9:cd:
00:29:7b:9e:b7:e1:ec:cc:70:c4:c7:e6:2a:0d:22:
c5:5e:fe:05:43:6d:e4:af:41:71:5a:9e:67:69:92:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CD:34:08:C0:CF:5D:16:A3:FE:C7:18:9E:BD:8B:04:61:93:A0:CE
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/j800CMDPXRaj_scYnr2LBGGToM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.114.128.0/19
94.124.224.0/21
185.165.200.0/22
217.17.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:98:c0:b2:9c:24:e2:32:03:df:0c:83:03:22:b4:f7:68:e0:
7d:c1:c7:35:a8:5d:64:d3:35:5a:4e:53:50:c9:5b:2a:ee:86:
cc:22:7c:f3:87:f2:76:2e:74:51:e0:fd:c7:22:78:f7:18:59:
45:6c:3f:1f:4e:5a:86:d4:30:33:dd:37:75:e8:62:94:4b:c9:
2a:2b:a2:e5:b1:f0:8b:9f:e1:35:36:56:2a:c4:f7:b8:0c:65:
69:ef:e4:6a:c4:fa:68:4b:94:9c:6c:86:d1:38:a9:89:57:74:
ee:3d:30:a3:ac:b3:08:22:21:88:e7:00:44:52:d4:a1:bb:f9:
c5:15:5d:61:77:c6:8b:0c:8a:9b:11:46:04:80:06:26:01:00:
e6:01:ef:fd:56:f9:9e:54:d4:22:e9:ea:c2:67:d0:27:24:fe:
c7:fa:e2:f3:49:46:a4:f7:29:7e:aa:be:81:88:45:bb:84:3b:
99:17:28:32:95:ac:69:c5:1e:40:40:d6:ee:76:20:91:c2:e2:
58:78:4f:b9:69:bf:87:01:ae:9c:e8:b7:58:3a:39:ef:14:b2:
b2:34:13:4b:d9:e8:b4:77:d8:44:d2:b5:28:15:94:0d:ef:d8:
79:c4:73:ae:50:12:b9:44:34:c3:66:42:9f:70:77:4a:b2:a4:
c2:4a:6f:b2
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECeFXuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YTQ5ZWVhZjI0MzQyYzNiMmM2MzJjOWU0ODQ2MzEzOGRlMmRjMDBiMB4XDTIyMDEw
MTAxNTE1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGZjZDM0MDhjMGNm
NWQxNmEzZmVjNzE4OWViZDhiMDQ2MTkzYTBjZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlu6InH9ar3xpSp71iH7JnXFj7O5YRilKD+PdJCWYtzw6Zx
4C3K9+aUKb8IcR3enlwNFNrU7FG3W2PpAguDm8PWiA18VmtHenGUZhdJjD0HgAHs
qRIFUFRxAaZHWttlhjmjawct3xjPcsvPvm33U79sYn7Ow1OgdUpTikRHjfg0VAan
DwGJF32Htx6FQcym9aVMI6aGbWQXBXweKywjuF3q8eGWzIabgBlmZKSelisIBdMt
8yu8NclPtJznGwXTOaz+dFNRB/ihBtCi7Ztc+h/a2hEKEUi5r48kSHx9Z7nNACl7
nrfh7MxwxMfmKg0ixV7+BUNt5K9BcVqeZ2mS0tMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSPzTQIwM9dFqP+xxievYsEYZOgzjAfBgNVHSMEGDAWgBR6Se6vJDQsOyxj
LJ5IRjE43i3ACzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VrbnVyeVEwTERzc1l5eWVTRVl4T040dHdBcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmMvNjNiOGFhLTcyMmYtNDAwOS1hZGE3LWY5YjYwNzExNDUzYy8x
L2o4MDBDTURQWFJhal9zY1lucjJMQkdHVG9NNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMv
NjNiOGFhLTcyMmYtNDAwOS1hZGE3LWY5YjYwNzExNDUzYy8xL2VrbnVyeVEwTERz
c1l5eWVTRVl4T040dHdBcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEBVJygAMEA1584AMEArmlyAMEBdkR
oDANBgkqhkiG9w0BAQsFAAOCAQEAW5jAspwk4jID3wyDAyK092jgfcHHNahdZNM1
Wk5TUMlbKu6GzCJ884fydi50UeD9xyJ49xhZRWw/H05ahtQwM903dehilEvJKiui
5bHwi5/hNTZWKsT3uAxlae/kasT6aEuUnGyG0TipiVd07j0wo6yzCCIhiOcARFLU
obv5xRVdYXfGiwyKmxFGBIAGJgEA5gHv/Vb5nlTUIunqwmfQJyT+x/ri80lGpPcp
fqq+gYhFu4Q7mRcoMpWsacUeQEDW7nYgkcLiWHhPuWm/hwGunOi3WDo57xSysjQT
S9notHfYRNK1KBWUDe/YecRzrlASuUQ0w2ZCn3B3SrKkwkpvsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:45 2024 by rpki-client on console-fra.rpki-client.org