Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tBlt9U-45IwR2YBJrFpx5K2YLb8.roa
File: tBlt9U-45IwR2YBJrFpx5K2YLb8.roa (raw, json)
Hash identifier: 33B6M4kTmKHbE3CT5MFcxoVCN3TTDzd5eyzlHDOc9fM=
Subject key identifier: B4:19:6D:F5:4F:B8:E4:8C:11:D9:80:49:AC:5A:71:E4:AD:98:2D:BF
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B183E78
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tBlt9U-45IwR2YBJrFpx5K2YLb8.roa
Signing time: Sat 01 Jan 2022 13:58:12 +0000
ROA not before: Sat 01 Jan 2022 13:58:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207033
IP address blocks: 188.114.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723009144 (0x2b183e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4196df54fb8e48c11d98049ac5a71e4ad982dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:d8:2a:74:a1:88:00:de:c9:42:da:86:b8:
8d:d7:c4:a0:e4:4d:34:1d:c2:56:f4:04:58:11:2f:
d3:29:fa:cb:af:6b:02:2c:97:18:eb:57:54:2a:c0:
3e:e5:97:f3:59:1d:c4:89:79:76:35:e6:08:a3:a1:
20:dc:01:e6:f7:1d:7f:75:e5:39:c7:55:6e:af:16:
78:80:10:db:d5:07:09:27:e6:ad:86:1c:8c:bf:c6:
d9:91:90:94:dc:17:61:62:f8:b2:f9:ca:ef:0d:f3:
f0:96:8a:f4:06:1e:19:a3:ab:3a:05:76:38:63:ec:
32:50:74:1d:13:84:a8:e1:16:71:64:65:04:52:9e:
71:d7:6e:f5:e8:78:dc:b6:24:df:c6:56:68:67:cc:
79:da:23:34:37:27:cc:1b:1e:cd:56:b5:cb:9d:52:
da:1f:46:15:a8:af:bb:59:74:c5:39:bc:e1:4f:4a:
f6:9d:7a:a4:89:10:a7:32:6a:d5:1b:29:6c:17:1d:
1b:55:ad:7d:1a:9f:ca:50:86:ee:14:bd:d1:64:85:
9e:e0:58:2e:81:55:71:2c:44:17:7d:5c:ea:81:b2:
ce:1e:23:63:1e:c7:0d:b6:b9:c2:9b:0a:e4:3a:97:
41:e3:63:70:36:7f:cd:17:54:a1:59:0b:8b:0e:58:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:19:6D:F5:4F:B8:E4:8C:11:D9:80:49:AC:5A:71:E4:AD:98:2D:BF
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tBlt9U-45IwR2YBJrFpx5K2YLb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ad:e6:1a:8d:6f:a0:ac:86:a2:e3:44:31:f7:9b:bf:03:57:
3c:5e:4b:a2:64:6b:69:01:1c:d6:e8:db:0d:fd:e3:d6:8a:2c:
ac:41:32:93:3a:42:b3:7b:0b:cd:c3:fc:54:f9:48:b0:d5:35:
5e:0a:e6:c9:8a:49:06:12:e3:05:3d:3c:f4:d2:1b:ee:b5:de:
f2:09:70:29:2e:2a:e7:76:6a:84:50:5b:22:dd:4e:19:86:7d:
c4:f4:ce:ef:09:18:19:5a:47:66:ee:76:19:d4:ca:49:13:4a:
c1:f7:30:48:4d:4e:76:43:4c:c8:cf:38:c4:c2:fc:31:e0:a5:
39:96:68:17:98:b1:8b:ac:74:ca:b1:c9:1d:7e:bf:50:f6:83:
d9:67:e6:a1:07:56:5e:84:9a:3b:73:f7:9c:7f:cd:01:37:bd:
5a:43:30:bb:98:b4:5c:56:c1:5c:38:ac:94:4e:07:07:da:6e:
fb:fb:0b:29:d3:f9:4b:b7:97:0e:ee:b8:45:c9:0d:79:8e:c2:
e8:2a:a0:29:d9:f2:60:1b:13:8a:72:fa:a6:37:ed:b9:6a:7a:
9f:67:74:17:3a:7b:aa:51:40:92:7f:3e:04:bb:1e:04:f3:ff:
89:c4:4c:52:92:69:44:0c:96:64:2b:b7:c9:d4:86:1a:6b:d1:
7b:10:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org