Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/SJvK5uyk-L4GpIM5AiT0-jqqrr8.roa
File: SJvK5uyk-L4GpIM5AiT0-jqqrr8.roa (raw, json)
Hash identifier: mec7da6mZs8QnN5ZF2CdMnAiyHLtYliufTOh0MWxy+8=
Subject key identifier: 48:9B:CA:E6:EC:A4:F8:BE:06:A4:83:39:02:24:F4:FA:3A:AA:AE:BF
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03440B92
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/SJvK5uyk-L4GpIM5AiT0-jqqrr8.roa
Signing time: Tue 08 Mar 2022 16:36:42 +0000
ROA not before: Tue 08 Mar 2022 16:36:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396073
IP address blocks: 185.64.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54791058 (0x3440b92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 8 16:36:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=489bcae6eca4f8be06a483390224f4fa3aaaaebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:da:82:15:bb:17:fc:f5:71:80:02:d5:30:
47:02:ec:08:6b:f8:2a:0b:fa:4f:63:94:fd:8a:30:
1f:93:d4:ab:d7:94:b3:7b:20:e5:65:d1:e8:18:49:
62:d9:54:62:3a:68:da:ab:0e:4c:19:b8:d0:2d:a2:
3e:e0:82:ce:7e:53:c7:a0:03:1c:76:a4:cf:10:9f:
5c:6f:70:1a:d3:15:d2:33:13:42:45:e0:66:f0:50:
7e:b1:49:d2:97:c1:e1:72:92:08:c0:c6:3c:04:3e:
c2:68:f9:ab:e2:26:51:17:e5:fd:1c:ea:30:be:e3:
e9:5c:06:21:0c:86:c9:46:2a:aa:d4:82:da:d5:c6:
e5:6e:9e:75:3e:40:ab:7e:0e:82:5d:42:3e:f1:a0:
3e:38:d6:2c:b9:a2:45:67:51:b2:05:5c:d5:95:8b:
dc:24:7d:02:9a:0d:d5:70:0e:00:fb:77:20:cd:fa:
64:ca:f1:d6:b3:10:69:37:97:b9:97:23:e8:d1:16:
38:d1:1d:18:4f:3a:36:1a:07:a9:51:ae:16:46:4b:
cd:6a:f5:6a:93:ac:e3:5f:54:27:64:07:ee:87:38:
b5:2b:ec:7d:df:13:ca:9d:c6:d6:6f:0a:4f:de:08:
38:c5:79:aa:88:a0:d9:1f:cb:9c:d6:12:69:c1:39:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:CA:E6:EC:A4:F8:BE:06:A4:83:39:02:24:F4:FA:3A:AA:AE:BF
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/SJvK5uyk-L4GpIM5AiT0-jqqrr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:9b:aa:a1:5f:9f:56:cc:60:26:a5:16:1c:b5:37:63:cf:0b:
b6:9b:6d:48:aa:8e:ab:ac:f7:b8:91:28:51:09:34:14:2f:6e:
dd:9b:ed:a9:06:b7:d0:d9:f4:d5:7a:5d:6d:b2:4a:2e:1c:57:
a8:2b:fc:9a:25:07:94:d0:95:23:ab:8f:0f:92:6a:84:0a:9d:
1f:e6:8d:d2:7d:1d:92:39:d8:94:0e:85:06:29:5a:34:c3:f4:
b1:aa:d0:99:54:68:31:ea:d2:31:d7:19:2c:25:8e:33:58:24:
99:0a:17:03:3a:53:cf:05:c1:72:5b:9d:54:e4:d1:eb:df:2d:
36:b9:e0:58:be:06:15:21:94:52:bb:af:28:ec:8d:ec:a9:60:
a7:04:d6:fd:60:b7:f1:0b:2b:df:6a:8b:e3:ef:ac:c8:a5:fe:
bb:42:65:e0:86:1b:2a:90:d1:42:31:d6:ce:9d:43:7f:3a:75:
45:95:3b:c4:15:fa:44:27:4f:ec:90:53:ec:c5:51:7e:63:7d:
23:95:b1:24:db:60:7c:c9:72:5b:b4:b0:34:6d:fe:d2:d8:32:
28:34:ed:d1:b8:64:f5:28:ee:9a:2f:99:5a:fc:c1:a9:21:fa:
f5:ea:8a:4b:25:d8:2f:66:38:da:03:41:ec:7c:23:21:23:14:
90:12:cb:ed
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA0QLkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YTAwZTk4MTk1MzA2MTk3MmM4OTZiZDZkMjc3MzhkMDgzYWFkYjBlMB4XDTIyMDMw
ODE2MzY0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDg5YmNhZTZlY2E0
ZjhiZTA2YTQ4MzM5MDIyNGY0ZmEzYWFhYWViZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK052oIVuxf89XGAAtUwRwLsCGv4Kgv6T2OU/YowH5PUq9eU
s3sg5WXR6BhJYtlUYjpo2qsOTBm40C2iPuCCzn5Tx6ADHHakzxCfXG9wGtMV0jMT
QkXgZvBQfrFJ0pfB4XKSCMDGPAQ+wmj5q+ImURfl/RzqML7j6VwGIQyGyUYqqtSC
2tXG5W6edT5Aq34Ogl1CPvGgPjjWLLmiRWdRsgVc1ZWL3CR9ApoN1XAOAPt3IM36
ZMrx1rMQaTeXuZcj6NEWONEdGE86NhoHqVGuFkZLzWr1apOs419UJ2QH7oc4tSvs
fd8Typ3G1m8KT94IOMV5qoig2R/LnNYSacE5W98CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRIm8rm7KT4vgakgzkCJPT6OqquvzAfBgNVHSMEGDAWgBTaAOmBlTBhlyyJ
a9bSdzjQg6rbDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJnRHBnWlV3WVpjc2lXdlcwbmM0MElPcTJ3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmYvODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8x
L1NKdks1dXlrLUw0R3BJTTVBaVQwLWpxcXJyOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYv
ODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8xLzJnRHBnWlV3WVpj
c2lXdlcwbmM0MElPcTJ3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlAZDANBgkqhkiG9w0BAQsFAAOC
AQEAXpuqoV+fVsxgJqUWHLU3Y88LtpttSKqOq6z3uJEoUQk0FC9u3ZvtqQa30Nn0
1XpdbbJKLhxXqCv8miUHlNCVI6uPD5JqhAqdH+aN0n0dkjnYlA6FBilaNMP0sarQ
mVRoMerSMdcZLCWOM1gkmQoXAzpTzwXBcludVOTR698tNrngWL4GFSGUUruvKOyN
7KlgpwTW/WC38Qsr32qL4++syKX+u0Jl4IYbKpDRQjHWzp1Dfzp1RZU7xBX6RCdP
7JBT7MVRfmN9I5WxJNtgfMlyW7SwNG3+0tgyKDTt0bhk9Sjumi+ZWvzBqSH69eqK
SyXYL2Y42gNB7HwjISMUkBLL7Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org