Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qy1hXaMvMLz-hASzL3VzmYU93Vc.roa
File: qy1hXaMvMLz-hASzL3VzmYU93Vc.roa (raw, json)
Hash identifier: ddzMAMi6vAm044Y7+jCgB12t/JxScR0l6xNdAyHVtTg=
Subject key identifier: AB:2D:61:5D:A3:2F:30:BC:FE:84:04:B3:2F:75:73:99:85:3D:DD:57
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14CE4BA3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qy1hXaMvMLz-hASzL3VzmYU93Vc.roa
Signing time: Tue 03 May 2022 03:24:40 +0000
ROA not before: Tue 03 May 2022 03:24:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34078
IP address blocks: 188.214.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349064099 (0x14ce4ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 3 03:24:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab2d615da32f30bcfe8404b32f757399853ddd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:e5:6b:ff:19:24:ad:5e:6e:02:f9:90:f2:
54:f3:0f:41:0c:10:93:09:09:de:8d:50:86:2d:8b:
d4:6d:51:a6:6b:94:52:c2:f0:0b:44:d3:a0:08:a6:
08:7c:6c:80:df:d0:f9:f9:54:d3:20:7b:fb:71:5d:
c5:15:70:35:20:ff:18:c7:53:55:bf:ef:49:2e:62:
f6:ac:8f:4a:73:3f:7b:ad:b6:a4:1f:87:0d:2b:b0:
be:9b:bf:e0:38:26:88:1a:0c:83:ae:4c:ea:30:34:
f0:70:65:4c:df:14:c3:da:a2:c5:73:9c:75:bf:9f:
b1:0f:16:b5:f8:07:e4:aa:22:89:58:04:84:14:a1:
fa:27:ff:86:f8:72:79:dc:a7:c3:79:9c:3a:0b:95:
d3:22:95:5e:4f:e2:a6:ba:84:ec:bb:ec:b0:bc:52:
11:db:54:10:20:ba:52:4c:ec:8b:f7:cd:94:a8:33:
2f:2d:89:41:66:1d:9e:88:bf:d0:5a:01:f0:8b:c7:
2d:b1:d4:71:b9:d9:f8:ae:22:de:d1:8c:8d:9c:e3:
9d:1d:c7:1a:1c:49:18:d2:32:10:95:a0:78:9f:aa:
ab:5b:af:07:b8:26:2d:4c:46:5c:ab:33:75:98:20:
c0:71:46:09:a9:71:05:d7:59:24:b2:7e:b1:cb:ab:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:61:5D:A3:2F:30:BC:FE:84:04:B3:2F:75:73:99:85:3D:DD:57
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qy1hXaMvMLz-hASzL3VzmYU93Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.238.0/23
Signature Algorithm: sha256WithRSAEncryption
44:33:dc:cf:7f:3a:1d:57:fe:aa:7c:13:6d:23:83:72:98:3a:
ee:99:16:6c:22:72:9a:80:d0:19:25:04:1f:19:de:44:03:e6:
57:61:c3:b7:24:35:c7:2b:c5:6d:93:5a:af:3c:c0:b4:19:fa:
0e:e5:a6:a3:67:0e:0e:a8:e3:73:ec:c1:d5:9b:05:71:7a:50:
4e:f9:6d:77:32:c0:d6:d6:b6:b3:79:91:01:fb:ac:ed:52:21:
8f:a0:eb:f2:a2:35:23:26:0b:a6:75:ce:71:f3:89:b7:86:f2:
e3:34:ad:23:c0:00:39:c2:b6:a3:ba:e2:e6:7e:73:e9:f4:c2:
ab:d3:93:51:f1:02:45:2d:56:b8:aa:92:70:f1:ae:00:15:a0:
f5:2e:d7:6d:82:0f:8d:a1:a8:eb:53:a0:a5:eb:a5:9f:77:46:
e5:c6:b4:42:87:c7:49:85:23:89:00:89:52:8b:4e:52:f0:62:
2c:e3:ce:a2:77:d8:b8:ad:36:e3:db:22:7d:a0:ef:75:ca:aa:
e8:98:6c:4f:ce:da:73:ad:16:4f:37:3b:6e:c1:bc:d3:0d:48:
7c:3b:96:89:a2:e1:f4:12:54:9b:89:c2:9d:3d:00:f3:c2:f2:
e4:9b:6f:4f:66:b1:84:dd:bb:1d:c6:4c:2a:11:bf:8b:55:da:
75:b0:87:05
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFM5LozANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDUw
MzAzMjQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWIyZDYxNWRhMzJm
MzBiY2ZlODQwNGIzMmY3NTczOTk4NTNkZGQ1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALEt5Wv/GSStXm4C+ZDyVPMPQQwQkwkJ3o1Qhi2L1G1RpmuU
UsLwC0TToAimCHxsgN/Q+flU0yB7+3FdxRVwNSD/GMdTVb/vSS5i9qyPSnM/e622
pB+HDSuwvpu/4DgmiBoMg65M6jA08HBlTN8Uw9qixXOcdb+fsQ8WtfgH5KoiiVgE
hBSh+if/hvhyedynw3mcOguV0yKVXk/iprqE7LvssLxSEdtUECC6Ukzsi/fNlKgz
Ly2JQWYdnoi/0FoB8IvHLbHUcbnZ+K4i3tGMjZzjnR3HGhxJGNIyEJWgeJ+qq1uv
B7gmLUxGXKszdZggwHFGCalxBddZJLJ+scurDLsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSrLWFdoy8wvP6EBLMvdXOZhT3dVzAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L3F5MWhYYU12TUx6LWhBU3pMM1Z6bVlVOTNWYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbzW7jANBgkqhkiG9w0BAQsFAAOC
AQEARDPcz386HVf+qnwTbSODcpg67pkWbCJymoDQGSUEHxneRAPmV2HDtyQ1xyvF
bZNarzzAtBn6DuWmo2cODqjjc+zB1ZsFcXpQTvltdzLA1ta2s3mRAfus7VIhj6Dr
8qI1IyYLpnXOcfOJt4by4zStI8AAOcK2o7ri5n5z6fTCq9OTUfECRS1WuKqScPGu
ABWg9S7XbYIPjaGo61Ogpeuln3dG5ca0QofHSYUjiQCJUotOUvBiLOPOonfYuK02
49sifaDvdcqq6JhsT87ac60WTzc7bsG80w1IfDuWiaLh9BJUm4nCnT0A88Ly5Jtv
T2axhN27HcZMKhG/i1XadbCHBQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:16 2024 by rpki-client on console-ams.rpki-client.org