Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/fqoc4KglZOLlsVpdcMZ6nfNcwEY.roa
File: fqoc4KglZOLlsVpdcMZ6nfNcwEY.roa (raw, json)
Hash identifier: 3Eb4xiJQxkBm4mY7C3V969nVnwVXODeZT97IGWUCzmk=
Subject key identifier: 7E:AA:1C:E0:A8:25:64:E2:E5:B1:5A:5D:70:C6:7A:9D:F3:5C:C0:46
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 08778CB0
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/fqoc4KglZOLlsVpdcMZ6nfNcwEY.roa
Signing time: Sat 01 Jan 2022 00:53:33 +0000
ROA not before: Sat 01 Jan 2022 00:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204967
IP address blocks: 88.119.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142052528 (0x8778cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 1 00:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eaa1ce0a82564e2e5b15a5d70c67a9df35cc046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:0a:76:a0:6c:ef:5c:17:32:62:9b:06:a5:
61:eb:7e:73:7b:81:ea:ad:b4:7f:01:d4:d0:c6:55:
a5:ae:c5:dc:38:51:1d:61:39:23:d5:96:e2:51:a2:
71:33:8d:94:39:ee:13:b7:62:ed:e5:16:4c:e2:3d:
c3:c8:e3:c0:2f:f2:1f:2a:7d:ad:f7:1b:1e:af:27:
63:da:f1:26:07:b0:dc:4b:60:33:f2:11:46:2e:be:
3f:a8:b4:21:9f:ef:57:9d:a1:55:33:01:42:1f:1c:
ae:7a:c5:4c:7d:95:7d:29:41:bf:a7:c7:c7:68:48:
0b:e3:5d:f3:56:79:34:cc:c1:16:2f:f5:6d:b0:11:
d6:d3:b3:6f:a3:6f:fd:8c:cd:15:03:85:45:bc:29:
01:21:c1:9b:41:e9:42:1d:de:b4:fe:8c:77:ce:6a:
e6:3f:45:86:5f:2c:44:52:52:9c:3e:4a:c0:ef:ec:
49:0d:ab:39:36:ff:a7:d3:72:55:f0:de:f3:02:1b:
97:68:2a:64:9c:d1:d7:c1:2a:cb:87:c2:78:6f:24:
cb:fc:92:3a:8f:98:15:e2:69:49:1f:20:3e:e6:d6:
a9:02:ca:15:3d:3f:ca:2b:06:bb:ab:66:7a:9b:f8:
f6:71:90:a9:b9:11:31:51:9d:e9:a5:da:e3:3c:39:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AA:1C:E0:A8:25:64:E2:E5:B1:5A:5D:70:C6:7A:9D:F3:5C:C0:46
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/fqoc4KglZOLlsVpdcMZ6nfNcwEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.119.182.0/24
Signature Algorithm: sha256WithRSAEncryption
05:40:5f:73:cd:b7:24:6f:48:62:58:74:61:86:c8:2c:7a:fe:
86:59:df:6b:29:66:e1:64:31:07:1a:6c:22:99:0c:eb:29:ea:
91:ba:f3:58:39:10:03:1d:ed:4e:ba:e1:b4:5a:64:b5:07:d0:
82:5d:c4:77:b8:19:44:94:ff:73:55:03:bc:b5:da:49:3d:b6:
4b:d0:f2:af:ca:f4:14:ee:c5:6a:d0:65:23:91:75:4b:ed:e9:
45:be:4c:74:db:06:30:02:39:c4:3b:b5:f3:99:42:8e:21:77:
34:4e:da:fa:6a:27:a9:c4:b5:30:6b:84:c3:73:98:6f:fd:8a:
7c:79:c4:06:a6:e7:3c:d7:7f:56:81:b4:83:a5:3e:bb:c7:d4:
0f:12:28:ab:75:fd:2e:4a:54:51:ca:ff:e4:55:61:29:6a:41:
ab:8c:19:2f:a3:18:93:97:e4:fa:3e:b0:cb:11:bb:17:4f:cc:
69:00:2b:4d:a5:7d:20:1a:1f:b2:50:f9:7c:04:f6:d3:31:ef:
6e:bf:06:29:af:56:05:f8:7b:0b:b4:29:c5:b4:1a:a6:2a:dc:
a0:89:74:f9:2b:5d:ec:df:f8:5c:75:90:3e:a0:95:57:0f:c2:
fb:15:18:a8:14:41:c2:2d:8a:eb:5c:6e:4a:2a:b5:f4:ea:6f:
2b:b5:af:cc
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECHeMsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
Yjk4NzI0NDYxMWI1MjMwNTM2NzQ0YjZhODlmMDQ0ZjMyZjQ2MmVhMB4XDTIyMDEw
MTAwNTMzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2VhYTFjZTBhODI1
NjRlMmU1YjE1YTVkNzBjNjdhOWRmMzVjYzA0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMWfCnagbO9cFzJimwalYet+c3uB6q20fwHU0MZVpa7F3DhR
HWE5I9WW4lGicTONlDnuE7di7eUWTOI9w8jjwC/yHyp9rfcbHq8nY9rxJgew3Etg
M/IRRi6+P6i0IZ/vV52hVTMBQh8crnrFTH2VfSlBv6fHx2hIC+Nd81Z5NMzBFi/1
bbAR1tOzb6Nv/YzNFQOFRbwpASHBm0HpQh3etP6Md85q5j9Fhl8sRFJSnD5KwO/s
SQ2rOTb/p9NyVfDe8wIbl2gqZJzR18Eqy4fCeG8ky/ySOo+YFeJpSR8gPubWqQLK
FT0/yisGu6tmepv49nGQqbkRMVGd6aXa4zw5xnECAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBR+qhzgqCVk4uWxWl1wxnqd81zARjAfBgNVHSMEGDAWgBT7mHJEYRtSMFNn
RLaonwRPMvRi6jAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3YWEv
MS9mcW9jNEtnbFpPTGxzVnBkY01aNm5mTmN3RVkucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0
LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3YWEvMS8xLTVoeVJHRWJV
akJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWHe2MA0GCSqGSIb3DQEBCwUA
A4IBAQAFQF9zzbckb0hiWHRhhsgsev6GWd9rKWbhZDEHGmwimQzrKeqRuvNYORAD
He1OuuG0WmS1B9CCXcR3uBlElP9zVQO8tdpJPbZL0PKvyvQU7sVq0GUjkXVL7elF
vkx02wYwAjnEO7XzmUKOIXc0Ttr6aiepxLUwa4TDc5hv/Yp8ecQGpuc8139WgbSD
pT67x9QPEiirdf0uSlRRyv/kVWEpakGrjBkvoxiTl+T6PrDLEbsXT8xpACtNpX0g
Gh+yUPl8BPbTMe9uvwYpr1YF+HsLtCnFtBqmKtygiXT5K13s3/hcdZA+oJVXD8L7
FRioFEHCLYrrXG5KKrX06m8rta/M
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org