Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/salCqEdbjNGvBoVeT83QxIdsCj4.roa
File: salCqEdbjNGvBoVeT83QxIdsCj4.roa (raw, json)
Hash identifier: MqdnuDWBq9/1kGzhMAq0LPHuslrFQ9ac7bq3Ht+coKE=
Subject key identifier: B1:A9:42:A8:47:5B:8C:D1:AF:06:85:5E:4F:CD:D0:C4:87:6C:0A:3E
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 01853D9B6F1EBDFB7812A1154BDB726A6AFF
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/salCqEdbjNGvBoVeT83QxIdsCj4.roa
Signing time: Fri 23 Dec 2022 06:11:14 +0000
ROA not before: Fri 23 Dec 2022 06:11:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24768
IP address blocks: 188.208.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3d:9b:6f:1e:bd:fb:78:12:a1:15:4b:db:72:6a:6a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Dec 23 06:11:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1a942a8475b8cd1af06855e4fcdd0c4876c0a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:3c:4b:62:cf:26:03:bf:c2:0f:9d:5b:a2:
7b:41:de:2c:57:cc:b5:0f:91:b6:a9:70:06:83:76:
d4:d7:3f:3f:56:e9:37:65:29:ec:32:ac:77:be:8c:
e3:33:71:05:82:8e:f1:9f:26:1a:7b:5f:af:da:e6:
0e:60:4a:d5:c2:98:55:cb:98:b5:ab:ea:bb:65:9b:
7e:2c:53:3d:48:ef:05:56:2e:c5:7b:c8:21:56:ee:
76:08:1b:ef:3f:8a:4d:87:62:b7:5a:b3:44:87:b1:
15:c8:86:f0:54:aa:05:7c:aa:bc:be:7e:c7:9b:a0:
a6:a9:46:03:bb:b9:0b:40:d7:81:a7:c6:64:be:72:
63:71:c5:4c:40:7b:4b:1a:24:e0:0d:22:ed:14:b2:
49:f4:e8:96:78:d6:0f:90:d2:ec:58:ab:7d:79:78:
ef:d2:89:b2:8d:1b:1d:81:80:84:88:2f:9a:64:c3:
24:1c:69:fd:d5:4b:9b:fb:91:4b:83:2a:63:48:de:
78:b6:af:d5:f7:4c:08:98:7b:a8:9f:87:53:59:b6:
83:7c:02:de:20:c9:6e:8b:62:7d:5a:69:dc:ec:93:
d2:30:53:03:78:51:d2:fc:4f:70:d4:e7:ca:1c:7c:
48:01:f4:dd:30:92:3c:11:46:d3:00:a2:6c:fb:c0:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A9:42:A8:47:5B:8C:D1:AF:06:85:5E:4F:CD:D0:C4:87:6C:0A:3E
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/salCqEdbjNGvBoVeT83QxIdsCj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:38:5b:f5:f2:f4:6e:c7:68:bc:97:6f:4e:2c:cb:a2:7c:27:
ec:ed:46:06:61:b2:07:0e:40:64:3a:cd:f5:6d:37:bf:6b:dd:
f3:5b:60:ef:de:6e:73:2f:a8:94:d6:dc:83:a8:cc:ab:42:cf:
f1:e5:e8:a2:0d:2f:7c:79:49:6e:bf:10:17:2a:2d:05:c9:78:
eb:22:d3:3d:4c:87:b5:64:c9:59:6b:63:c9:c8:3a:63:53:74:
42:01:61:5e:3e:31:9e:a5:2f:4e:d8:9c:19:d3:1c:53:f8:3b:
9e:c9:3f:56:51:f5:bc:d7:b5:b6:d7:ab:0e:ef:18:7f:9a:65:
47:dd:df:79:40:cb:bf:32:fd:ef:1b:89:72:1c:8e:c7:fd:2a:
d3:75:1c:24:47:e0:ff:16:d5:de:a2:76:61:3a:f7:c6:af:b6:
e1:39:bb:b7:13:32:05:9e:90:a8:bf:e5:2f:67:6d:d4:a9:22:
77:e8:f4:e7:a9:fa:eb:8f:a1:cf:eb:6f:ed:47:83:92:0f:77:
57:c1:9e:6f:f4:b3:0a:d1:21:c8:fd:bf:28:af:e8:53:a8:d9:
ad:b1:51:9b:29:41:d3:0b:da:f4:6c:a8:2d:06:ec:60:56:2a:
5d:f1:1f:68:42:03:0c:7f:c5:e4:a7:ef:26:8e:7c:e4:0a:06:
da:69:34:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYU9m28evft4EqEVS9tyamr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMjkwZGIyZjcyOTA1ZjBkYjYyNmIwMDViYWNmMDg4Nzhk
MTdiYWMwHhcNMjIxMjIzMDYxMTE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWE5NDJhODQ3NWI4Y2QxYWYwNjg1NWU0ZmNkZDBjNDg3NmMwYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyQ8S2LPJgO/wg+dW6J7Qd4sV8y1
D5G2qXAGg3bU1z8/Vuk3ZSnsMqx3vozjM3EFgo7xnyYae1+v2uYOYErVwphVy5i1
q+q7ZZt+LFM9SO8FVi7Fe8ghVu52CBvvP4pNh2K3WrNEh7EVyIbwVKoFfKq8vn7H
m6CmqUYDu7kLQNeBp8ZkvnJjccVMQHtLGiTgDSLtFLJJ9OiWeNYPkNLsWKt9eXjv
0omyjRsdgYCEiC+aZMMkHGn91Uub+5FLgypjSN54tq/V90wImHuon4dTWbaDfALe
IMlui2J9Wmnc7JPSMFMDeFHS/E9w1OfKHHxIAfTdMJI8EUbTAKJs+8D4dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGpQqhHW4zRrwaFXk/N0MSHbAo+MB8GA1UdIwQY
MBaAFMopDbL3KQXw22JrAFus8Ih40XusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt
N2Y0MzViZjU1MDFjLzEvc2FsQ3FFZGJqTkd2Qm9WZVQ4M1F4SWRzQ2o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj
LzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNCPMA0G
CSqGSIb3DQEBCwUAA4IBAQA/OFv18vRux2i8l29OLMuifCfs7UYGYbIHDkBkOs31
bTe/a93zW2Dv3m5zL6iU1tyDqMyrQs/x5eiiDS98eUluvxAXKi0FyXjrItM9TIe1
ZMlZa2PJyDpjU3RCAWFePjGepS9O2JwZ0xxT+DueyT9WUfW817W216sO7xh/mmVH
3d95QMu/Mv3vG4lyHI7H/SrTdRwkR+D/FtXeonZhOvfGr7bhObu3EzIFnpCov+Uv
Z23UqSJ36PTnqfrrj6HP62/tR4OSD3dXwZ5v9LMK0SHI/b8or+hTqNmtsVGbKUHT
C9r0bKgtBuxgVipd8R9oQgMMf8Xkp+8mjnzkCgbaaTT7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:01 2024 by rpki-client on console-fra.rpki-client.org