Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/aFAqqbgZme2TQ1ty_0mOL5Mubwc.roa
File: aFAqqbgZme2TQ1ty_0mOL5Mubwc.roa (raw, json)
Hash identifier: YF0pDQSXNdSSu7hi8+8tYAjTp158ZVYkGl277hBx1hk=
Subject key identifier: 68:50:2A:A9:B8:19:99:ED:93:43:5B:72:FF:49:8E:2F:93:2E:6F:07
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AFE607C
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/aFAqqbgZme2TQ1ty_0mOL5Mubwc.roa
Signing time: Sat 01 Jan 2022 13:57:59 +0000
ROA not before: Sat 01 Jan 2022 13:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198881
IP address blocks: 188.114.80.0/22 maxlen: 22
178.16.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721313916 (0x2afe607c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68502aa9b81999ed93435b72ff498e2f932e6f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:0f:2c:ed:05:1d:0e:91:d4:38:f6:1e:48:
cc:b6:64:99:88:9b:3c:80:91:89:20:28:17:e8:55:
a0:9d:2d:9e:b2:4c:d5:b1:d9:fb:0e:87:86:55:8f:
ae:21:49:41:d3:8a:cb:dc:93:56:5c:36:6a:13:1d:
cc:8a:68:43:2b:5d:e4:a1:22:72:0e:58:3d:63:88:
af:b7:ea:d0:8c:85:2b:ae:21:d4:9a:cb:bb:1a:39:
7e:cd:ba:94:97:fc:c7:01:8f:66:c2:17:50:e2:36:
0f:ed:8d:64:85:d6:7c:b6:73:19:31:2b:e0:1b:5b:
ea:7e:ff:81:c7:d8:f5:d4:01:31:46:ce:5a:72:95:
b8:f5:6e:3e:99:ac:16:e8:5d:5f:e8:54:12:f7:5d:
e2:56:eb:bb:5e:cd:74:f1:1c:d2:1a:fa:97:40:b7:
45:8b:c7:c1:6b:b9:7c:23:ee:af:7f:ed:c2:13:29:
32:d3:49:35:86:ce:f5:99:fb:38:4e:96:f0:71:86:
8c:12:c5:d4:90:48:e3:2b:1f:3f:91:6d:93:51:ae:
f8:35:d9:32:d6:44:cc:d8:e7:0d:d7:97:a1:1c:2f:
a1:eb:af:dd:72:de:f1:41:9f:f5:42:d6:16:19:d7:
55:ee:d2:fa:87:0a:7e:cb:fb:61:45:c2:56:2e:4a:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:50:2A:A9:B8:19:99:ED:93:43:5B:72:FF:49:8E:2F:93:2E:6F:07
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/aFAqqbgZme2TQ1ty_0mOL5Mubwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.117.0/24
188.114.80.0/22
Signature Algorithm: sha256WithRSAEncryption
04:86:d7:e4:32:1d:b5:37:d3:11:b1:7a:e8:39:ba:f2:88:43:
04:43:ba:d0:65:3b:d0:ab:4a:28:65:d8:49:89:27:14:20:56:
06:2a:aa:19:27:75:ed:ad:c8:5d:46:2c:45:3f:27:1b:60:07:
f2:81:90:ab:d1:53:8c:d8:fe:2f:06:ed:34:68:53:88:8b:26:
46:98:ca:e7:cd:ee:e1:50:44:e1:81:94:7f:f1:7c:fe:21:08:
2a:1a:0d:dc:0b:52:c7:dd:44:bc:48:4a:ff:89:18:a4:6e:96:
85:84:46:de:ff:ba:72:3c:8e:7d:2a:40:0a:06:dd:c1:69:fc:
9d:f3:1a:11:e2:ff:c2:36:35:57:f0:05:8e:2b:2a:30:7f:8a:
90:35:13:74:6b:2d:06:e9:8b:bc:af:9f:8e:ce:74:5e:78:ff:
f2:64:3f:aa:3f:ed:be:9a:6d:9f:a8:62:d1:5e:42:18:9f:e5:
1a:19:d6:70:31:23:28:0b:af:a1:f2:7c:53:49:39:a2:54:2a:
49:ca:b2:84:f4:c0:6f:b0:ad:34:16:31:39:71:b3:5e:4c:11:
91:c1:b6:2c:bd:5e:67:c3:07:64:fc:c4:c4:d6:54:b3:87:f8:
5e:91:8c:35:6a:55:8a:51:12:6c:4c:a9:50:12:2a:51:42:d2:
d2:86:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org