Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/tRaurUr3uC4mEoMSgC5-TM5YeRw.roa
File: tRaurUr3uC4mEoMSgC5-TM5YeRw.roa (raw, json)
Hash identifier: 4xY1xQ4XAkpEkIa+WSL7Y0HVcOnKf92mnsK3WAo1UJw=
Subject key identifier: B5:16:AE:AD:4A:F7:B8:2E:26:12:83:12:80:2E:7E:4C:CE:58:79:1C
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 01A21D
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/tRaurUr3uC4mEoMSgC5-TM5YeRw.roa
Signing time: Fri 22 Apr 2022 07:32:52 +0000
ROA not before: Fri 22 Apr 2022 07:32:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34353
IP address blocks: 194.88.248.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107037 (0x1a21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Apr 22 07:32:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b516aead4af7b82e26128312802e7e4cce58791c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:c0:2b:4b:8a:c3:ca:3c:fe:c7:42:59:33:
0d:81:2d:52:ec:e2:f4:30:7d:0c:7b:d9:60:18:41:
02:ab:a4:73:e1:60:48:48:20:c0:3d:d2:82:fc:ca:
20:ac:c3:25:ee:a4:c3:23:13:08:60:c1:f2:b4:ff:
41:7d:30:f6:b1:a7:0b:66:5a:8c:12:a7:77:aa:8b:
15:bc:cf:0d:cf:cd:49:e7:e4:3c:ca:e3:d6:1e:ef:
10:14:6f:8d:16:e9:d5:c7:9a:07:4a:2b:bb:7c:77:
2b:1f:e6:b4:54:58:99:34:90:dc:d5:ef:1a:9c:7c:
40:64:f0:90:d5:e9:3d:3f:0b:ce:40:84:95:2f:66:
17:f0:44:f7:e8:76:7c:67:fd:6a:15:7b:fe:ab:75:
be:5d:e7:e8:07:ab:ad:8c:8c:d9:58:7f:d8:e8:e4:
6b:cd:5e:da:62:43:fa:93:1c:6b:5b:52:9c:2f:e4:
62:e2:ef:54:a1:75:3d:78:c9:05:54:87:44:3e:e8:
fc:14:b0:b2:ec:fa:ca:37:19:74:60:ff:3b:2a:5a:
65:c4:4d:07:1d:00:7a:7f:94:01:b2:a3:13:22:99:
af:bc:c6:71:7e:63:ef:35:85:46:c6:74:70:d0:bf:
4c:1c:77:53:fe:97:06:55:70:ba:27:28:aa:a4:05:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:16:AE:AD:4A:F7:B8:2E:26:12:83:12:80:2E:7E:4C:CE:58:79:1C
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/tRaurUr3uC4mEoMSgC5-TM5YeRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.248.0/23
Signature Algorithm: sha256WithRSAEncryption
66:d5:4a:f7:53:0d:c7:76:2b:8b:95:be:05:64:27:dd:59:be:
0b:8f:a5:79:72:16:48:f5:53:20:47:72:65:2c:f7:47:e7:ba:
e0:af:99:09:77:cb:0e:a8:c4:65:ee:05:37:2f:8c:e3:55:1c:
f3:68:8b:1a:21:d4:e7:79:d9:37:0e:7f:00:74:2c:d9:4f:02:
5a:45:d5:c1:9c:56:37:cd:7b:01:a1:0e:81:3f:58:d6:9b:c2:
15:d9:8c:ef:f5:34:f3:e1:20:d7:b6:2c:4c:2a:31:a3:fa:7e:
1e:95:16:ec:33:26:49:db:40:1f:73:4b:19:f1:22:89:12:3c:
bc:7a:e8:06:64:99:3d:6a:74:96:ba:b5:d6:50:bc:8b:c7:b9:
4b:1d:30:fe:85:3a:11:1e:a1:8d:6d:83:4b:0c:9e:43:42:6f:
e5:fc:86:28:3e:e4:5b:54:cb:e3:f3:27:a9:08:33:48:eb:25:
8c:47:f0:7a:1a:59:2f:02:0f:1f:1e:1c:58:7d:42:39:39:89:
65:b7:49:52:f7:18:3a:cf:51:ff:3b:90:c8:2e:2f:85:7a:54:
c2:6c:ed:5e:02:f1:7d:bc:31:fd:b3:17:52:97:d7:a8:02:65:
7d:4a:42:ba:4b:5b:0f:48:54:37:93:29:15:3a:2d:37:b0:1f:
64:4e:5c:d1
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAaIdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg3
Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdiY2VmMzQwHhcNMjIwNDIy
MDczMjUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiNTE2YWVhZDRhZjdi
ODJlMjYxMjgzMTI4MDJlN2U0Y2NlNTg3OTFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxcDAK0uKw8o8/sdCWTMNgS1S7OL0MH0Me9lgGEECq6Rz4WBI
SCDAPdKC/MogrMMl7qTDIxMIYMHytP9BfTD2sacLZlqMEqd3qosVvM8Nz81J5+Q8
yuPWHu8QFG+NFunVx5oHSiu7fHcrH+a0VFiZNJDc1e8anHxAZPCQ1ek9PwvOQISV
L2YX8ET36HZ8Z/1qFXv+q3W+XefoB6utjIzZWH/Y6ORrzV7aYkP6kxxrW1KcL+Ri
4u9UoXU9eMkFVIdEPuj8FLCy7PrKNxl0YP87KlplxE0HHQB6f5QBsqMTIpmvvMZx
fmPvNYVGxnRw0L9MHHdT/pcGVXC6JyiqpAU/GQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFLUWrq1K97guJhKDEoAufkzOWHkcMB8GA1UdIwQYMBaAFIe5duKquSMkjugO
5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBiLzEv
dFJhdXJVcjN1QzRtRW9NU2dDNS1UTTVZZVJ3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85
MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNP
NkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwlj4MA0GCSqGSIb3DQEBCwUAA4IB
AQBm1Ur3Uw3HdiuLlb4FZCfdWb4Lj6V5chZI9VMgR3JlLPdH57rgr5kJd8sOqMRl
7gU3L4zjVRzzaIsaIdTnedk3Dn8AdCzZTwJaRdXBnFY3zXsBoQ6BP1jWm8IV2Yzv
9TTz4SDXtixMKjGj+n4elRbsMyZJ20Afc0sZ8SKJEjy8eugGZJk9anSWurXWULyL
x7lLHTD+hToRHqGNbYNLDJ5DQm/l/IYoPuRbVMvj8yepCDNI6yWMR/B6GlkvAg8f
HhxYfUI5OYllt0lS9xg6z1H/O5DILi+FelTCbO1eAvF9vDH9sxdSl9eoAmV9SkK6
S1sPSFQ3kykVOi03sB9kTlzR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:09 2024 by rpki-client on console-ams.rpki-client.org