Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Jj9mbm2Jq59xCFmI7jixx34K19Q.roa
File: Jj9mbm2Jq59xCFmI7jixx34K19Q.roa (raw, json)
Hash identifier: dEqy+gkn9hBuR5ljEEN4IiS2TeqChKkLkzWStVl4nsw=
Subject key identifier: 26:3F:66:6E:6D:89:AB:9F:71:08:59:88:EE:38:B1:C7:7E:0A:D7:D4
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B11483C
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Jj9mbm2Jq59xCFmI7jixx34K19Q.roa
Signing time: Sat 01 Jan 2022 13:58:07 +0000
ROA not before: Sat 01 Jan 2022 13:58:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203369
IP address blocks: 188.114.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722552892 (0x2b11483c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=263f666e6d89ab9f71085988ee38b1c77e0ad7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e9:3d:f7:b4:d8:d8:fc:6b:18:c6:4c:1c:8d:
b5:f1:9f:6e:68:de:f7:20:6b:c9:00:a4:dd:08:a8:
3d:b8:9c:7b:0e:90:04:a0:2b:59:33:31:d3:78:67:
58:c8:00:fd:5d:3e:1f:ca:8c:25:df:af:39:27:a3:
c7:59:73:b6:29:9b:ab:d8:e7:e1:a1:e5:47:34:27:
23:c0:4a:06:49:f3:08:b5:c2:27:cd:e2:a0:df:77:
4e:ae:5f:a5:aa:f1:95:01:ea:fb:03:9d:15:7b:42:
0c:f4:5e:bb:d2:82:9f:51:3c:4d:2c:43:89:de:5d:
3d:79:d3:8c:39:b4:b3:7a:c3:89:c2:2a:c6:f8:56:
13:1c:db:cd:94:c0:51:85:25:16:57:53:81:10:63:
b0:35:98:19:b6:d4:32:13:8e:19:3d:36:2c:18:15:
77:94:c9:f7:2a:04:3b:5a:e4:26:08:0b:0c:ac:0f:
b7:64:73:81:59:88:62:a4:f1:db:fe:27:c8:bd:46:
23:e3:9d:99:b2:d1:19:11:3f:24:e7:d2:e9:ec:b2:
00:49:ea:28:e7:d1:8a:74:fd:e5:30:a3:e4:05:f3:
cb:09:79:72:03:40:47:d4:17:15:2c:13:69:42:30:
68:10:9a:5a:96:26:14:60:76:08:a0:a1:a7:0b:ec:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:66:6E:6D:89:AB:9F:71:08:59:88:EE:38:B1:C7:7E:0A:D7:D4
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Jj9mbm2Jq59xCFmI7jixx34K19Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.67.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a4:a2:9b:83:53:fe:03:07:09:57:54:59:da:92:dc:11:7b:
90:f6:ba:70:45:34:22:fb:aa:c1:0d:a8:f5:8e:1f:cf:ca:80:
34:4d:9e:65:82:f1:d8:5f:19:20:7e:8c:68:1b:eb:2b:42:2a:
ba:ed:e0:6a:ff:38:a6:68:46:29:9c:85:ce:ea:1a:3d:82:e6:
2f:12:f8:9b:99:d6:d5:cd:0a:ed:1e:dc:de:5c:9b:bf:93:6d:
d6:30:da:0a:c3:0b:f8:88:e6:f5:fd:21:55:05:7c:ad:03:ee:
02:14:0e:c9:f0:1e:c8:51:9a:8e:88:d2:25:15:f4:62:a6:90:
65:c6:53:15:9c:e6:fc:4f:a2:0d:b6:f5:ea:9d:c7:e0:db:da:
fb:77:29:cd:fd:ef:e2:f6:ce:a0:8b:94:53:3b:27:d6:90:5b:
c7:28:02:bf:c7:1e:ab:d1:38:1b:43:0c:39:ff:2d:ef:22:06:
9c:94:26:09:97:4b:31:29:62:13:f4:ef:7c:de:90:0e:b6:a5:
bd:8a:23:68:a7:1d:cd:f8:e4:91:33:72:1e:3d:b3:2f:3a:e6:
4d:73:f7:10:a1:fb:36:ff:22:93:7b:5a:90:a7:5e:8b:39:82:
78:15:7d:9c:d0:4d:f3:18:02:a3:af:aa:67:e4:af:42:15:74:
c3:c9:c9:0d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKxFIPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
MTEzNTgwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjYzZjY2NmU2ZDg5
YWI5ZjcxMDg1OTg4ZWUzOGIxYzc3ZTBhZDdkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOjpPfe02Nj8axjGTByNtfGfbmje9yBryQCk3QioPbicew6Q
BKArWTMx03hnWMgA/V0+H8qMJd+vOSejx1lztimbq9jn4aHlRzQnI8BKBknzCLXC
J83ioN93Tq5fparxlQHq+wOdFXtCDPReu9KCn1E8TSxDid5dPXnTjDm0s3rDicIq
xvhWExzbzZTAUYUlFldTgRBjsDWYGbbUMhOOGT02LBgVd5TJ9yoEO1rkJggLDKwP
t2RzgVmIYqTx2/4nyL1GI+OdmbLRGRE/JOfS6eyyAEnqKOfRinT95TCj5AXzywl5
cgNAR9QXFSwTaUIwaBCaWpYmFGB2CKChpwvsZnMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQmP2ZubYmrn3EIWYjuOLHHfgrX1DAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
L0pqOW1ibTJKcTU5eENGbUk3aml4eDM0SzE5US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALxyQzANBgkqhkiG9w0BAQsFAAOC
AQEAH6Sim4NT/gMHCVdUWdqS3BF7kPa6cEU0IvuqwQ2o9Y4fz8qANE2eZYLx2F8Z
IH6MaBvrK0Iquu3gav84pmhGKZyFzuoaPYLmLxL4m5nW1c0K7R7c3lybv5Nt1jDa
CsML+Ijm9f0hVQV8rQPuAhQOyfAeyFGajojSJRX0YqaQZcZTFZzm/E+iDbb16p3H
4Nva+3cpzf3v4vbOoIuUUzsn1pBbxygCv8ceq9E4G0MMOf8t7yIGnJQmCZdLMSli
E/TvfN6QDralvYojaKcdzfjkkTNyHj2zLzrmTXP3EKH7Nv8ik3takKdeizmCeBV9
nNBN8xgCo6+qZ+SvQhV0w8nJDQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org