Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/0qkTbUIf6twuZreAgFeMatwsL3o.roa
File: 0qkTbUIf6twuZreAgFeMatwsL3o.roa (raw, json)
Hash identifier: mjjrzOXj7c4lGk5wp8a3fAoNdcxOcACG0b40jVpN1lo=
Subject key identifier: D2:A9:13:6D:42:1F:EA:DC:2E:66:B7:80:80:57:8C:6A:DC:2C:2F:7A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B1C7CD0
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/0qkTbUIf6twuZreAgFeMatwsL3o.roa
Signing time: Sat 01 Jan 2022 13:58:14 +0000
ROA not before: Sat 01 Jan 2022 13:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207854
IP address blocks: 188.114.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723287248 (0x2b1c7cd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2a9136d421feadc2e66b78080578c6adc2c2f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:e3:d2:11:da:1e:ce:fa:30:25:34:75:0d:
88:41:39:15:32:c5:da:79:2e:92:8e:64:68:df:e1:
ac:56:90:82:4e:06:be:3d:6a:bb:10:ae:bd:5f:04:
b4:f1:72:fe:e4:3f:28:93:0f:f4:f1:b8:77:4f:c6:
83:88:d9:3e:a6:cb:c8:70:5a:79:15:20:23:2b:b0:
e2:a1:54:0c:bb:81:9d:ae:1f:64:0f:3d:50:a4:2f:
a7:97:50:2b:83:71:88:bb:bc:5f:bb:e3:fa:25:97:
16:be:68:e1:15:e4:16:e7:77:19:f2:53:f1:6b:25:
47:5f:55:55:e4:a1:81:63:56:1a:2a:64:4e:87:79:
f9:25:aa:4a:bb:93:e1:e2:30:67:c1:76:9f:78:0d:
35:4f:b1:3d:71:9f:18:05:b7:73:6f:81:65:05:b9:
fc:44:56:57:54:31:96:74:c8:ac:85:e6:8e:8c:87:
f4:2f:c9:6d:e0:56:ad:ef:f6:0b:1a:a1:b9:fe:50:
73:02:78:65:ed:10:62:43:dc:5b:1f:d2:9b:39:a9:
83:9b:70:5d:32:06:8e:f8:af:19:05:3b:21:10:35:
3e:f6:f2:66:35:ff:7b:5e:57:61:82:3c:84:49:7a:
25:52:b5:56:0f:64:45:3c:50:0a:3f:41:ce:eb:44:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A9:13:6D:42:1F:EA:DC:2E:66:B7:80:80:57:8C:6A:DC:2C:2F:7A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/0qkTbUIf6twuZreAgFeMatwsL3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.65.0/24
Signature Algorithm: sha256WithRSAEncryption
79:69:1c:39:26:aa:b6:e0:9c:e3:fa:f9:08:44:a9:e6:95:5f:
f7:58:1c:7e:9b:8d:33:1b:36:f2:85:4f:d4:27:cd:7a:88:9c:
b7:2f:79:73:4f:79:73:d1:f0:c4:10:d2:40:86:d0:22:89:27:
06:df:9f:67:97:89:c7:85:e3:24:f2:f1:bd:d1:9a:40:9e:eb:
58:b6:ee:31:04:74:24:6e:a0:1c:c4:f6:34:31:82:1e:7c:61:
b4:06:ba:64:e4:61:6b:c5:60:05:c2:6a:5f:c3:31:9a:bd:cf:
f7:ff:1b:71:ff:b8:0e:ac:65:e4:64:5c:ed:e5:f5:b6:f8:b1:
a3:90:f4:61:72:89:cf:71:e1:ec:f5:96:f1:f7:39:c0:8f:f7:
a1:2e:3c:83:1c:81:b8:5e:15:c2:44:fe:e5:ed:65:11:57:66:
ca:ad:4f:87:e1:ae:4a:59:6c:4d:ea:09:d0:3c:39:b2:ca:fc:
23:90:30:49:aa:f6:e5:bc:81:37:be:a3:8c:c3:27:c8:6a:e9:
6f:c0:c0:94:14:81:27:94:e8:30:86:fa:9a:f0:5c:50:ee:87:
8f:a9:be:ee:14:ed:ed:c8:2a:f9:41:9d:f6:63:f4:3e:6c:84:
d5:04:35:e3:fd:77:2d:fe:84:cd:dc:af:a3:c2:2e:5b:1c:4e:
27:e1:c1:ae
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKxx80DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
MTEzNTgxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDJhOTEzNmQ0MjFm
ZWFkYzJlNjZiNzgwODA1NzhjNmFkYzJjMmY3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8I49IR2h7O+jAlNHUNiEE5FTLF2nkuko5kaN/hrFaQgk4G
vj1quxCuvV8EtPFy/uQ/KJMP9PG4d0/Gg4jZPqbLyHBaeRUgIyuw4qFUDLuBna4f
ZA89UKQvp5dQK4NxiLu8X7vj+iWXFr5o4RXkFud3GfJT8WslR19VVeShgWNWGipk
Tod5+SWqSruT4eIwZ8F2n3gNNU+xPXGfGAW3c2+BZQW5/ERWV1QxlnTIrIXmjoyH
9C/JbeBWre/2Cxqhuf5QcwJ4Ze0QYkPcWx/Smzmpg5twXTIGjvivGQU7IRA1Pvby
ZjX/e15XYYI8hEl6JVK1Vg9kRTxQCj9BzutENvsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTSqRNtQh/q3C5mt4CAV4xq3CwvejAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
LzBxa1RiVUlmNnR3dVpyZUFnRmVNYXR3c0wzby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALxyQTANBgkqhkiG9w0BAQsFAAOC
AQEAeWkcOSaqtuCc4/r5CESp5pVf91gcfpuNMxs28oVP1CfNeoicty95c095c9Hw
xBDSQIbQIoknBt+fZ5eJx4XjJPLxvdGaQJ7rWLbuMQR0JG6gHMT2NDGCHnxhtAa6
ZORha8VgBcJqX8Mxmr3P9/8bcf+4Dqxl5GRc7eX1tvixo5D0YXKJz3Hh7PWW8fc5
wI/3oS48gxyBuF4VwkT+5e1lEVdmyq1Ph+GuSllsTeoJ0Dw5ssr8I5AwSar25byB
N76jjMMnyGrpb8DAlBSBJ5ToMIb6mvBcUO6Hj6m+7hTt7cgq+UGd9mP0PmyE1QQ1
4/13Lf6Ezdyvo8IuWxxOJ+HBrg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org