Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/JoxUwl0c9BRsz0ImJVwoj0RoWT4.roa
File: JoxUwl0c9BRsz0ImJVwoj0RoWT4.roa (raw, json)
Hash identifier: r4XzwkHV9eLxVNFGGWkB9smXEpGhVgsy/k3MjJEMTyA=
Subject key identifier: 26:8C:54:C2:5D:1C:F4:14:6C:CF:42:26:25:5C:28:8F:44:68:59:3E
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 01831C815C4D848224A0EC7AB688BB9F164A
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/JoxUwl0c9BRsz0ImJVwoj0RoWT4.roa
Signing time: Thu 08 Sep 2022 09:49:43 +0000
ROA not before: Thu 08 Sep 2022 09:49:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213098
IP address blocks: 188.72.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:81:5c:4d:84:82:24:a0:ec:7a:b6:88:bb:9f:16:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Sep 8 09:49:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=268c54c25d1cf4146ccf4226255c288f4468593e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:5e:53:81:2b:73:95:b1:60:ca:41:d4:6e:
f5:e5:37:1d:1b:10:c5:48:ae:9e:c7:c9:18:af:e5:
56:0d:46:b8:6e:e0:fa:91:bb:2d:49:1f:c8:b0:71:
e9:56:b0:dc:e3:61:23:6a:22:d7:c5:ff:76:11:3a:
25:0f:04:aa:69:1d:bd:b4:05:9e:3f:b7:aa:d2:8a:
8f:b0:6e:ea:68:e3:f5:78:f3:51:ec:e5:c0:99:a8:
00:ec:08:6a:94:37:0a:ba:7e:81:44:15:a0:28:c3:
3a:d5:c0:cc:6c:04:0a:f3:eb:fc:c5:89:97:cd:05:
c0:6b:91:8b:2d:fe:5d:01:0d:a3:d3:f2:5d:2e:87:
03:29:44:d7:4f:7b:83:78:0d:8e:71:df:48:e7:f8:
ab:c4:70:dc:fe:11:00:7b:32:9a:c0:7b:38:00:5e:
c8:32:b7:0b:b1:ed:70:0f:05:03:2f:de:14:ff:f9:
4b:a8:d4:51:f8:4a:8e:ed:f6:05:e3:12:b0:c5:ef:
6e:35:2a:35:ac:45:a1:02:c3:cb:eb:0a:27:70:be:
57:ab:4a:0c:1a:1f:61:62:24:6e:14:6f:c1:01:17:
5e:ab:7a:87:30:f6:50:ed:88:ac:b4:1a:51:12:78:
64:b0:f7:99:36:94:ff:47:8d:51:a8:1c:88:c6:59:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8C:54:C2:5D:1C:F4:14:6C:CF:42:26:25:5C:28:8F:44:68:59:3E
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/JoxUwl0c9BRsz0ImJVwoj0RoWT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.43.0/24
Signature Algorithm: sha256WithRSAEncryption
66:24:08:e1:cf:0c:1e:c3:bb:43:0d:d0:46:0e:68:af:1c:23:
c6:56:44:fa:70:96:21:a7:a3:d6:3d:83:69:a7:23:e5:02:b6:
00:90:42:9f:f6:06:c5:53:78:10:92:ca:15:eb:ea:5f:5c:c9:
29:db:df:bd:9f:ae:a1:e7:33:9f:76:6c:a9:79:65:47:aa:cc:
4e:0f:55:2d:92:de:2a:61:fe:c7:42:e2:e0:7a:b6:5e:f7:c9:
6c:4d:e0:d9:74:4a:41:e3:97:6b:f8:cc:7b:f1:ba:da:76:f2:
58:de:58:f2:51:1b:d3:68:1d:bf:79:40:c4:b8:b3:5f:b2:fe:
b2:1c:b5:13:c0:b6:91:0d:c9:66:35:33:0a:aa:dc:19:0e:fe:
db:18:b6:93:21:81:4b:5b:73:3d:c8:f8:1e:d5:53:6b:fc:09:
e5:67:c9:db:f9:76:a3:99:f1:15:3b:b0:1d:99:12:3e:94:37:
ac:c9:9c:5d:f7:74:e9:53:e7:ee:0b:8e:ca:37:3c:f8:58:24:
7c:f7:60:9a:34:57:c9:7b:d9:2d:f1:39:fa:e1:93:63:2f:20:
f1:4e:73:d6:69:9b:58:a9:8a:6b:c9:34:bb:a1:07:ea:83:32:
d2:9c:9a:b5:d4:a3:5a:83:c1:c7:2b:4d:77:10:ea:05:6e:de:
aa:a3:57:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMcgVxNhIIkoOx6toi7nxZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTBiMjFjODlhMzAyYmU5ZGMwMzg3MGMwOThmMjMyODAz
MDRiMGYwHhcNMjIwOTA4MDk0OTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjhjNTRjMjVkMWNmNDE0NmNjZjQyMjYyNTVjMjg4ZjQ0Njg1OTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbFeU4Erc5WxYMpB1G715TcdGxDF
SK6ex8kYr+VWDUa4buD6kbstSR/IsHHpVrDc42EjaiLXxf92ETolDwSqaR29tAWe
P7eq0oqPsG7qaOP1ePNR7OXAmagA7AhqlDcKun6BRBWgKMM61cDMbAQK8+v8xYmX
zQXAa5GLLf5dAQ2j0/JdLocDKUTXT3uDeA2Ocd9I5/irxHDc/hEAezKawHs4AF7I
MrcLse1wDwUDL94U//lLqNRR+EqO7fYF4xKwxe9uNSo1rEWhAsPL6woncL5Xq0oM
Gh9hYiRuFG/BARdeq3qHMPZQ7YistBpREnhksPeZNpT/R41RqByIxlmPnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaMVMJdHPQUbM9CJiVcKI9EaFk+MB8GA1UdIwQY
MBaAFE7gshyJowK+ncA4cMCY8jKAMEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVDeUhJbWpBcjZkd0Rod3dKanlNb0F3U3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYTI3OGItMTI0Ni00OGUzLTlhMDUt
NTA5NjExYjU5YzRhLzEvSm94VXdsMGM5QlJzejBJbUpWd29qMFJvV1Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mYTI3OGItMTI0Ni00OGUzLTlhMDUtNTA5NjExYjU5YzRh
LzEvVHVDeUhJbWpBcjZkd0Rod3dKanlNb0F3U3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEgrMA0G
CSqGSIb3DQEBCwUAA4IBAQBmJAjhzwwew7tDDdBGDmivHCPGVkT6cJYhp6PWPYNp
pyPlArYAkEKf9gbFU3gQksoV6+pfXMkp29+9n66h5zOfdmypeWVHqsxOD1Utkt4q
Yf7HQuLgerZe98lsTeDZdEpB45dr+Mx78bradvJY3ljyURvTaB2/eUDEuLNfsv6y
HLUTwLaRDclmNTMKqtwZDv7bGLaTIYFLW3M9yPge1VNr/AnlZ8nb+XajmfEVO7Ad
mRI+lDesyZxd93TpU+fuC47KNzz4WCR892CaNFfJe9kt8Tn64ZNjLyDxTnPWaZtY
qYpryTS7oQfqgzLSnJq11KNag8HHK013EOoFbt6qo1fv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:58 2024 by rpki-client on console-fra.rpki-client.org