Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/yOg0MXEDCm9FdB-JyAD938J7Ipg.roa
File: yOg0MXEDCm9FdB-JyAD938J7Ipg.roa (raw, json)
Hash identifier: LIK4cWthtZCvQgQbVQe6UPjz//40rPWqYsQQz/yw6OM=
Subject key identifier: C8:E8:34:31:71:03:0A:6F:45:74:1F:89:C8:00:FD:DF:C2:7B:22:98
Certificate issuer: /CN=58833dec655e1a88733a17a2df3da0985ab660d5
Certificate serial: 1CA1465E
Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/yOg0MXEDCm9FdB-JyAD938J7Ipg.roa
Signing time: Sat 01 Jan 2022 10:03:04 +0000
ROA not before: Sat 01 Jan 2022 10:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51355
IP address blocks: 185.88.252.0/23 maxlen: 23
185.88.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480331358 (0x1ca1465e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5
Validity
Not Before: Jan 1 10:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8e8343171030a6f45741f89c800fddfc27b2298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:d2:b2:5f:2c:7b:ed:9f:ec:25:46:6b:2d:
47:f9:b2:e8:82:50:77:95:ab:08:ac:1b:fb:23:f4:
da:e9:ef:58:ea:51:40:02:1e:eb:86:1c:45:ac:f5:
83:ff:02:5b:e4:ee:c1:73:b6:52:8e:4d:f6:4a:99:
68:d2:f2:3d:50:5c:2b:19:51:aa:10:8b:c8:f7:29:
18:e2:bb:18:28:33:90:35:ed:88:15:9b:cd:48:e0:
3e:41:9d:10:9e:b0:46:ca:a4:f7:56:5c:92:e7:dc:
58:01:21:90:60:de:2b:4a:b4:c3:86:32:54:e4:82:
21:7f:d1:c4:26:13:c5:37:cb:3a:e4:f1:26:a7:96:
8c:08:0e:51:51:cc:07:4b:95:fa:f5:1e:a5:e4:3a:
fc:81:52:6e:c0:2f:fe:34:52:02:6c:b3:11:df:3c:
ae:dc:a7:db:5f:27:89:4b:62:34:42:9b:02:2f:8a:
ee:00:93:fa:8d:4f:c8:ac:e0:91:1b:94:bd:2c:bd:
88:10:95:c8:e2:ce:96:89:c1:07:f7:34:16:9f:5a:
f9:44:89:bc:eb:b0:09:31:c5:67:72:bc:ee:f1:b9:
ef:fb:5e:49:af:00:41:80:5b:c2:75:d0:bb:07:af:
ec:7d:64:f2:25:18:00:b1:99:61:c4:f3:d9:44:9b:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E8:34:31:71:03:0A:6F:45:74:1F:89:C8:00:FD:DF:C2:7B:22:98
X509v3 Authority Key Identifier:
keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/yOg0MXEDCm9FdB-JyAD938J7Ipg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:fc:2f:ee:d9:be:53:97:1a:10:5a:b7:b8:25:c4:84:78:71:
a8:0b:ef:6a:e6:55:7e:47:12:63:60:81:be:64:a7:64:8f:02:
3f:6d:7d:68:88:73:9e:14:07:4b:49:83:65:5c:a1:70:6e:9e:
87:ac:b0:3d:ee:a5:49:5c:23:76:83:b0:8b:02:09:0d:76:86:
e9:46:ae:9c:c2:f5:cc:4f:a6:f2:05:03:ce:a8:e3:f4:5b:56:
37:b2:2b:2a:c9:91:58:e4:45:22:09:24:56:78:12:2d:f3:48:
b7:82:c5:c5:d9:e7:e5:f6:1c:c8:c6:e5:81:99:90:58:4f:a5:
c1:37:ed:60:50:a8:66:b3:5c:04:74:98:c8:34:90:5a:d9:b2:
8f:68:1d:fa:d7:91:70:8a:1f:b9:be:d9:37:03:4b:fc:d7:fe:
d6:98:10:7a:72:8d:74:96:e5:cd:99:38:74:c2:84:29:fa:92:
0f:f8:03:40:19:e2:7f:8c:ed:92:36:20:01:f7:a5:df:b3:a4:
78:94:07:96:63:c6:ea:79:92:ee:ea:57:72:a6:8d:6e:0f:4d:
bd:ed:69:53:11:03:da:09:32:0d:8b:bc:95:ef:8b:49:8f:f2:
ff:bf:e6:e6:43:18:41:c4:7d:61:c7:b3:07:c1:7b:5e:11:bc:
99:e6:d0:82
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHKFGXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODgzM2RlYzY1NWUxYTg4NzMzYTE3YTJkZjNkYTA5ODVhYjY2MGQ1MB4XDTIyMDEw
MTEwMDMwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzhlODM0MzE3MTAz
MGE2ZjQ1NzQxZjg5YzgwMGZkZGZjMjdiMjI5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhg0rJfLHvtn+wlRmstR/my6IJQd5WrCKwb+yP02unvWOpR
QAIe64YcRaz1g/8CW+TuwXO2Uo5N9kqZaNLyPVBcKxlRqhCLyPcpGOK7GCgzkDXt
iBWbzUjgPkGdEJ6wRsqk91ZckufcWAEhkGDeK0q0w4YyVOSCIX/RxCYTxTfLOuTx
JqeWjAgOUVHMB0uV+vUepeQ6/IFSbsAv/jRSAmyzEd88rtyn218niUtiNEKbAi+K
7gCT+o1PyKzgkRuUvSy9iBCVyOLOlonBB/c0Fp9a+USJvOuwCTHFZ3K87vG57/te
Sa8AQYBbwnXQuwev7H1k8iUYALGZYcTz2USbs8UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTI6DQxcQMKb0V0H4nIAP3fwnsimDAfBgNVHSMEGDAWgBRYgz3sZV4aiHM6
F6LfPaCYWrZg1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJTTk3R1ZlR29oek9oZWkzejJnbUZxMllOVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvMGI1OGE4LTY1NTMtNGYwNy1iMGI3LTJmZmFlZDA0NzM4YS8x
L3lPZzBNWEVEQ205RmRCLUp5QUQ5MzhKN0lwZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
MGI1OGE4LTY1NTMtNGYwNy1iMGI3LTJmZmFlZDA0NzM4YS8xL1dJTTk3R1ZlR29o
ek9oZWkzejJnbUZxMllOVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlY/DANBgkqhkiG9w0BAQsFAAOC
AQEAevwv7tm+U5caEFq3uCXEhHhxqAvvauZVfkcSY2CBvmSnZI8CP219aIhznhQH
S0mDZVyhcG6eh6ywPe6lSVwjdoOwiwIJDXaG6UaunML1zE+m8gUDzqjj9FtWN7Ir
KsmRWORFIgkkVngSLfNIt4LFxdnn5fYcyMblgZmQWE+lwTftYFCoZrNcBHSYyDSQ
Wtmyj2gd+teRcIofub7ZNwNL/Nf+1pgQenKNdJblzZk4dMKEKfqSD/gDQBnif4zt
kjYgAfel37OkeJQHlmPG6nmS7upXcqaNbg9Nve1pUxED2gkyDYu8le+LSY/y/7/m
5kMYQcR9YcezB8F7XhG8mebQgg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:39 2024 by rpki-client on console-fra.rpki-client.org