Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/b-rsvHHRtxoQhiL_KSBSwjPaWcY.roa
File: b-rsvHHRtxoQhiL_KSBSwjPaWcY.roa (raw, json)
Hash identifier: /GSFkyJRK1ITeh7qyynsGy9BSF/mO4bQpJeicL81giE=
Subject key identifier: 6F:EA:EC:BC:71:D1:B7:1A:10:86:22:FF:29:20:52:C2:33:DA:59:C6
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 0183D5809397A028B64DF5B2C2300CC0649E
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/b-rsvHHRtxoQhiL_KSBSwjPaWcY.roa
Signing time: Fri 14 Oct 2022 07:58:36 +0000
ROA not before: Fri 14 Oct 2022 07:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44143
IP address blocks: 188.120.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:80:93:97:a0:28:b6:4d:f5:b2:c2:30:0c:c0:64:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Oct 14 07:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6feaecbc71d1b71a108622ff292052c233da59c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e7:80:e5:24:ef:32:8d:5e:65:0b:f5:04:dc:
8b:96:1f:3f:81:96:cc:ca:59:db:97:55:a8:7c:ba:
e5:d1:cb:df:cb:c4:79:39:ac:a5:db:a6:51:0d:20:
33:7d:f2:73:a4:c8:f7:44:70:aa:a2:9b:dd:f8:d7:
68:5c:50:15:92:8a:76:84:0d:09:01:65:5f:86:9f:
d5:f6:ea:b2:35:71:06:34:14:3d:fc:8c:a3:4f:62:
7d:e2:a8:d6:88:d1:61:07:61:55:3e:1c:30:74:1f:
d2:e3:bb:4b:d5:2b:bb:fc:d0:b1:cb:79:c1:0b:98:
10:72:10:d5:25:3b:32:52:25:ff:b7:5e:8f:56:6e:
43:5a:55:a3:1c:39:1f:29:38:c7:c4:0e:ea:6e:85:
46:68:ec:bf:8c:85:41:c9:8d:e2:a6:81:4d:e5:98:
e6:b8:06:da:a6:53:ae:15:e4:59:6d:51:d5:24:c0:
b7:cc:e1:d5:1c:1d:d7:e8:dc:d5:7f:65:74:98:49:
86:87:ca:82:28:1c:86:08:6e:72:ec:43:8f:51:84:
d9:59:39:71:d9:57:c9:a2:e1:d1:39:ce:e8:86:b6:
8f:ba:69:63:b6:58:65:55:10:f6:a4:9a:a0:c9:ba:
70:8f:99:ab:60:36:68:a2:c1:46:e2:a0:5e:0b:27:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EA:EC:BC:71:D1:B7:1A:10:86:22:FF:29:20:52:C2:33:DA:59:C6
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/b-rsvHHRtxoQhiL_KSBSwjPaWcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.120.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b7:8c:df:81:64:ba:02:32:c6:7a:a0:42:6e:4b:38:e8:08:
91:12:c1:27:61:bc:49:eb:e2:ca:24:86:27:92:c4:40:25:fa:
6c:70:95:5a:9e:9e:54:9e:f2:c7:67:78:6b:2a:8d:4c:32:80:
16:92:08:ce:b6:38:ab:56:6d:81:cc:6c:65:d0:ea:90:db:98:
6e:ff:37:6f:4c:12:10:57:1f:54:e9:4f:42:38:df:c8:00:97:
c8:72:35:d4:d5:b3:d1:13:51:9c:a7:bc:60:66:ec:e1:e2:38:
60:ee:e3:12:53:f3:98:b2:77:0f:b9:af:8c:09:6e:ea:01:68:
fd:d0:a9:4d:77:0c:29:2f:11:27:39:63:ba:bc:8a:e9:02:9c:
d2:ff:60:65:48:b7:e1:60:6b:a7:a1:df:4d:5f:03:f1:c2:34:
bb:a7:4f:ed:32:b4:49:a1:94:1e:94:47:ad:1e:38:fa:97:50:
16:9e:8e:a3:e7:bb:c4:c5:5b:b5:7c:5b:af:f3:a1:c6:9c:4b:
aa:fc:e9:e7:d8:d1:aa:12:47:6c:fc:4b:35:d5:18:81:f2:fb:
03:e8:71:de:7d:0b:9b:74:d3:db:5b:fc:e1:e5:9b:d7:df:4a:
0b:af:3c:27:26:7d:3c:ac:3d:5b:90:42:a6:cd:ed:75:1f:7d:
71:ce:ab:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPVgJOXoCi2TfWywjAMwGSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjA4ODNhYWU0OTFlNWZiNzczYTkyNjQwMTlmZjRmODg4
ZDVjYTUwHhcNMjIxMDE0MDc1ODM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmVhZWNiYzcxZDFiNzFhMTA4NjIyZmYyOTIwNTJjMjMzZGE1OWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOeA5STvMo1eZQv1BNyLlh8/gZbM
ylnbl1WofLrl0cvfy8R5Oayl26ZRDSAzffJzpMj3RHCqopvd+NdoXFAVkop2hA0J
AWVfhp/V9uqyNXEGNBQ9/IyjT2J94qjWiNFhB2FVPhwwdB/S47tL1Su7/NCxy3nB
C5gQchDVJTsyUiX/t16PVm5DWlWjHDkfKTjHxA7qboVGaOy/jIVByY3ipoFN5Zjm
uAbaplOuFeRZbVHVJMC3zOHVHB3X6NzVf2V0mEmGh8qCKByGCG5y7EOPUYTZWTlx
2VfJouHROc7ohraPumljtlhlVRD2pJqgybpwj5mrYDZoosFG4qBeCydpawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/q7Lxx0bcaEIYi/ykgUsIz2lnGMB8GA1UdIwQY
MBaAFG5giDquSR5ft3OpJkAZ/0+IjVylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAt
YjU2MDJkM2RhOGE2LzEvYi1yc3ZISFJ0eG9RaGlMX0tTQlN3alBhV2NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAtYjU2MDJkM2RhOGE2
LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHhxMA0G
CSqGSIb3DQEBCwUAA4IBAQBst4zfgWS6AjLGeqBCbks46AiREsEnYbxJ6+LKJIYn
ksRAJfpscJVanp5UnvLHZ3hrKo1MMoAWkgjOtjirVm2BzGxl0OqQ25hu/zdvTBIQ
Vx9U6U9CON/IAJfIcjXU1bPRE1Gcp7xgZuzh4jhg7uMSU/OYsncPua+MCW7qAWj9
0KlNdwwpLxEnOWO6vIrpApzS/2BlSLfhYGunod9NXwPxwjS7p0/tMrRJoZQelEet
Hjj6l1AWno6j57vExVu1fFuv86HGnEuq/Onn2NGqEkds/Es11RiB8vsD6HHefQub
dNPbW/zh5ZvX30oLrzwnJn08rD1bkEKmze11H31xzqvJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:27 2024 by rpki-client on console-fra.rpki-client.org