Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/1-Jl0nP3UmcRBwDDXs-SJ7xlsqsk.roa
File: 1-Jl0nP3UmcRBwDDXs-SJ7xlsqsk.roa (raw, json)
Hash identifier: K4QYwsuIRzTmllgmbX45oYbv3q6RnIN7kt4eUZSy2hU=
Subject key identifier: F8:99:74:9C:FD:D4:99:C4:41:C0:30:D7:B3:E4:89:EF:19:6C:AA:C9
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 08DD04E0
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/1-Jl0nP3UmcRBwDDXs-SJ7xlsqsk.roa
Signing time: Sat 01 Jan 2022 15:02:48 +0000
ROA not before: Sat 01 Jan 2022 15:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212586
IP address blocks: 79.174.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148702432 (0x8dd04e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Jan 1 15:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f899749cfdd499c441c030d7b3e489ef196caac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:55:a2:c9:a7:54:e1:c6:12:20:fe:d2:c4:
ab:7f:8c:5b:1d:4f:24:05:31:0c:ed:63:50:9c:ba:
c9:ff:f7:e5:70:49:64:26:f8:6e:5a:ab:4b:f2:dc:
2d:84:50:6e:e9:93:53:75:a1:ba:82:90:05:eb:78:
9e:49:19:14:5e:56:59:51:ee:3e:c8:a1:28:4e:42:
17:a0:40:c5:10:d3:aa:d5:32:cf:7f:d7:0e:eb:0f:
32:31:39:38:29:d8:5d:eb:ea:cb:90:4a:8a:75:4a:
b6:2a:b7:dc:17:d4:5a:85:bb:45:65:40:16:70:a1:
79:5b:9c:94:ed:09:df:27:8d:1e:48:3e:48:83:96:
d6:05:6d:be:a5:9b:34:ba:36:73:26:39:aa:22:5e:
e7:53:c0:ba:b1:bf:20:c4:d2:fe:72:b1:c9:51:53:
d6:2d:f4:5d:cd:38:e9:51:6a:cc:fa:50:8a:5d:4d:
5e:1f:24:4f:b8:8e:7b:df:a9:8a:fa:a5:46:d4:88:
00:b5:fc:3a:ad:32:b3:8d:e5:f1:f0:55:88:20:4e:
48:82:b5:38:fa:de:83:cc:21:5d:31:f9:29:ae:a9:
49:0d:27:86:b9:47:1c:4e:c8:32:69:23:a1:aa:1e:
45:ab:c4:99:2e:bc:25:df:64:4c:4f:86:52:50:b6:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:99:74:9C:FD:D4:99:C4:41:C0:30:D7:B3:E4:89:EF:19:6C:AA:C9
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/1-Jl0nP3UmcRBwDDXs-SJ7xlsqsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.0.0/22
Signature Algorithm: sha256WithRSAEncryption
76:8e:0b:71:c6:dc:d8:f4:58:6d:e4:4c:83:f5:0e:56:5b:dc:
25:0a:b4:14:cb:05:e4:49:52:b3:cd:d6:47:c3:00:2d:c5:24:
9f:66:6d:5c:ec:2d:70:79:d0:18:f4:bd:f5:f9:95:aa:50:f3:
2e:4c:d2:d8:cf:4a:fa:eb:f5:3b:6b:fb:03:c9:d3:0a:11:bb:
2a:c2:02:24:1d:97:42:43:e0:a9:4e:cb:0a:91:8e:6f:07:35:
6c:39:11:3f:74:d7:d4:64:b7:fe:fa:f0:f4:69:5c:99:41:13:
62:64:68:2c:67:ee:fc:55:32:89:5a:5b:1c:3c:bf:5f:e7:ab:
12:55:13:4e:46:40:db:a0:d5:5e:84:2b:88:8b:69:90:02:59:
5b:1a:63:43:91:11:62:bd:f5:6a:8a:42:7b:85:d0:8f:f8:8a:
04:bf:3b:a2:05:ff:ef:74:cf:e8:f9:50:d0:d1:6a:8c:30:92:
9e:08:b4:07:ec:af:4f:cf:25:72:f3:6f:1b:41:05:cc:30:10:
75:e4:16:f7:fa:f3:2c:7a:9d:f7:b8:63:09:8c:f3:5b:11:98:
43:cf:88:4a:52:27:a6:6e:82:4e:5a:34:4c:b2:94:e4:81:5a:
77:ed:7e:df:ce:ba:03:fb:1d:95:5e:cc:94:ae:18:3a:eb:d4:
fd:b7:53:7f
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECN0E4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NDhkYzNiOTIzYzc3MzhmOWE1OGVlODBiNDliY2QwYzVlN2RjZmZhMB4XDTIyMDEw
MTE1MDI0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjg5OTc0OWNmZGQ0
OTljNDQxYzAzMGQ3YjNlNDg5ZWYxOTZjYWFjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMngVaLJp1ThxhIg/tLEq3+MWx1PJAUxDO1jUJy6yf/35XBJ
ZCb4blqrS/LcLYRQbumTU3WhuoKQBet4nkkZFF5WWVHuPsihKE5CF6BAxRDTqtUy
z3/XDusPMjE5OCnYXevqy5BKinVKtiq33BfUWoW7RWVAFnCheVuclO0J3yeNHkg+
SIOW1gVtvqWbNLo2cyY5qiJe51PAurG/IMTS/nKxyVFT1i30Xc046VFqzPpQil1N
Xh8kT7iOe9+pivqlRtSIALX8Oq0ys43l8fBViCBOSIK1OPreg8whXTH5Ka6pSQ0n
hrlHHE7IMmkjoaoeRavEmS68Jd9kTE+GUlC2tekCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT4mXSc/dSZxEHAMNez5InvGWyqyTAfBgNVHSMEGDAWgBQEjcO5I8dzj5pY
7oC0m80MXn3P+jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JJM0R1U1BIYzQtYVdPNkF0SnZOREY1OXpfby5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjQvZjhjMDE4LWI5MGYtNGY4OS1hM2Y0LTJlYzg3MTQ2NTU5OS8x
LzEtSmwwblAzVW1jUkJ3RERYcy1TSjd4bHNxc2sucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0
L2Y4YzAxOC1iOTBmLTRmODktYTNmNC0yZWM4NzE0NjU1OTkvMS9CSTNEdVNQSGM0
LWFXTzZBdEp2TkRGNTl6X28uY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJPrgAwDQYJKoZIhvcNAQELBQAD
ggEBAHaOC3HG3Nj0WG3kTIP1DlZb3CUKtBTLBeRJUrPN1kfDAC3FJJ9mbVzsLXB5
0Bj0vfX5lapQ8y5M0tjPSvrr9Ttr+wPJ0woRuyrCAiQdl0JD4KlOywqRjm8HNWw5
ET9019Rkt/768PRpXJlBE2JkaCxn7vxVMolaWxw8v1/nqxJVE05GQNug1V6EK4iL
aZACWVsaY0OREWK99WqKQnuF0I/4igS/O6IF/+90z+j5UNDRaowwkp4ItAfsr0/P
JXLzbxtBBcwwEHXkFvf68yx6nfe4YwmM81sRmEPPiEpSJ6Zugk5aNEyylOSBWnft
ft/OugP7HZVezJSuGDrr1P23U38=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:07 2023 by rpki-client on console.sobornost.net