Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kXLJmGk-1y_rhsUss_-h0VBo7EQ.roa
File: kXLJmGk-1y_rhsUss_-h0VBo7EQ.roa (raw, json)
Hash identifier: qb1dpXmaQ5RD63fFAsi70MtZI0JPwHHWW7TdBxzpryE=
Subject key identifier: 91:72:C9:98:69:3E:D7:2F:EB:86:C5:2C:B3:FF:A1:D1:50:68:EC:44
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B19ADD7
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kXLJmGk-1y_rhsUss_-h0VBo7EQ.roa
Signing time: Sat 01 Jan 2022 13:58:13 +0000
ROA not before: Sat 01 Jan 2022 13:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207555
IP address blocks: 188.114.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723103191 (0x2b19add7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9172c998693ed72feb86c52cb3ffa1d15068ec44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:07:b4:42:3e:89:76:c9:e8:54:89:3a:10:53:
d7:48:47:a2:5a:70:8a:c1:2e:c2:02:5c:a5:d8:0f:
16:7a:b9:56:0b:e8:b7:12:77:07:38:02:13:ae:dd:
78:99:79:73:51:66:6d:af:3d:31:d1:32:c7:a1:a3:
e4:21:f6:64:1c:5f:17:40:2f:77:58:0f:11:dc:e6:
24:cd:77:50:56:83:12:fd:d3:ce:3c:a2:f0:90:6c:
d9:d4:81:04:27:f3:73:d9:6a:3f:d4:18:73:ed:28:
04:01:4e:d6:e0:f3:84:9b:46:c3:4c:d9:e6:69:bf:
68:c0:c7:23:a3:cb:59:77:15:7a:47:f0:25:1f:68:
47:b5:6a:db:15:89:f2:1a:59:b7:70:8b:c8:3c:84:
25:4e:c3:43:72:93:7b:81:cf:74:76:a5:63:86:03:
10:ce:f6:35:4e:f3:f6:a3:06:6c:32:24:3a:dd:4e:
8d:bb:bb:6e:82:a6:89:ec:37:d6:b2:eb:0f:be:bc:
4d:85:aa:14:b1:17:3f:e7:cf:20:f6:55:2d:12:a5:
fe:03:db:08:da:15:fd:d2:ef:9c:ee:c2:21:ee:c9:
33:64:3d:34:0c:82:85:8d:81:ab:03:d3:16:c4:83:
87:89:c2:54:b5:74:08:39:70:af:da:ee:39:f5:a2:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:72:C9:98:69:3E:D7:2F:EB:86:C5:2C:B3:FF:A1:D1:50:68:EC:44
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kXLJmGk-1y_rhsUss_-h0VBo7EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a6:b7:34:e4:8c:67:54:ea:05:62:26:7e:fd:75:4c:b5:16:
c6:9e:19:3e:ef:d7:fa:c3:46:99:69:d0:04:ed:88:8c:b9:79:
6f:2a:ab:de:28:54:99:d4:78:69:55:22:22:47:ee:e4:33:6d:
a2:fe:0e:34:aa:f5:3f:52:12:7c:01:fc:e3:05:27:88:b2:4c:
af:6d:83:c9:50:99:e8:1f:29:d0:44:37:a5:14:a7:fe:a3:05:
f5:5a:18:c7:a9:55:8e:43:50:5f:b0:5c:59:e0:97:58:ac:66:
19:27:39:47:06:76:aa:e8:a6:c1:34:72:23:1d:26:49:2e:d2:
b3:0a:12:ce:c2:73:7c:e7:1a:48:d8:73:1f:35:6e:be:8c:36:
74:5d:85:98:a9:15:71:84:71:4e:19:ab:53:5d:61:5b:07:a9:
f0:84:59:1e:24:4d:ea:6a:bc:a8:de:c2:97:c6:c1:95:3e:3c:
61:12:b4:db:16:08:28:5d:62:9a:f7:63:ec:3e:ae:c0:b6:97:
52:d3:7c:b0:a0:8b:f2:40:dd:2b:94:0a:a8:b7:8a:3f:78:65:
8c:60:bd:57:5e:24:df:97:e7:9f:48:f4:00:c4:99:d7:4d:7c:
ca:92:c5:a9:05:c2:a8:08:53:46:cc:b0:63:1e:aa:66:f1:80:
13:bb:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org