Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AsRqIrsFTHVDZLKRTrSfoXVT-CU.roa
File: AsRqIrsFTHVDZLKRTrSfoXVT-CU.roa (raw, json)
Hash identifier: 9lTy39O+q78k+DckrXUO+FBq6MMZekh7XBKGyE3TWfs=
Subject key identifier: 02:C4:6A:22:BB:05:4C:75:43:64:B2:91:4E:B4:9F:A1:75:53:F8:25
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10799AF8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AsRqIrsFTHVDZLKRTrSfoXVT-CU.roa
Signing time: Sat 01 Jan 2022 09:04:44 +0000
ROA not before: Sat 01 Jan 2022 09:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50200
IP address blocks: 185.238.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276404984 (0x10799af8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02c46a22bb054c754364b2914eb49fa17553f825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:e3:b1:28:19:f3:07:2c:9e:3c:d4:73:16:
08:60:ad:f5:2e:85:7c:11:cd:45:53:3e:ba:b5:0b:
5d:ea:88:e8:34:c0:28:93:3a:a5:15:d1:01:e2:de:
75:cd:09:f4:3d:63:a0:bf:3f:f4:42:14:36:bd:e2:
db:db:ec:52:f9:6d:80:c3:36:92:2c:46:6d:a4:fc:
22:42:0a:e9:e4:39:7a:71:9b:45:11:91:91:d3:16:
f5:42:4d:42:26:f9:f5:43:1d:bd:96:13:ec:24:a6:
24:f8:fa:29:25:a5:e1:59:59:e9:03:98:b4:76:e1:
6a:bf:1f:fa:3a:e9:11:00:30:12:f7:67:5b:11:c2:
00:ee:1d:11:bc:2c:2f:e2:13:73:d0:24:d1:67:87:
90:34:1e:46:94:94:62:41:a7:48:8c:5b:d5:b1:c0:
a6:52:93:1c:9a:4a:c5:c8:85:48:8e:46:dd:37:dc:
b7:5b:98:13:53:f5:2d:fd:e1:0e:64:39:44:e2:41:
71:2a:13:9b:70:9e:79:24:98:c0:ab:7b:a7:2f:44:
ec:6e:5b:0a:2e:e5:62:62:8f:ef:e7:cc:71:de:00:
93:e1:80:87:8f:67:d8:37:37:a5:71:a9:52:b6:ed:
7b:26:e2:56:92:3b:c3:ce:9c:a4:db:52:69:e4:d3:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C4:6A:22:BB:05:4C:75:43:64:B2:91:4E:B4:9F:A1:75:53:F8:25
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AsRqIrsFTHVDZLKRTrSfoXVT-CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.188.0/22
Signature Algorithm: sha256WithRSAEncryption
01:f0:86:d2:7e:85:7b:30:81:db:81:35:03:11:8a:69:9c:63:
b6:3b:dc:de:d3:9e:a6:9c:7a:f5:ba:0e:e6:57:62:42:05:77:
75:51:b4:03:a8:6f:ad:bc:f5:d8:33:1a:00:34:db:04:55:1e:
cb:2b:77:20:65:03:df:b3:2a:07:8f:d6:d6:b5:9e:52:02:a2:
df:63:c3:95:5f:ed:60:19:23:df:ea:f5:d4:1b:cc:73:f7:f7:
ad:cc:29:a7:c9:6e:9f:3d:90:be:56:82:31:92:2b:c7:6f:27:
e6:2c:f3:3e:18:94:9d:db:c0:af:c7:80:66:57:7e:32:54:f2:
1e:1b:2b:de:6a:80:98:72:7c:ec:76:0c:ee:37:fb:f4:ff:bd:
f4:d2:3d:92:8a:43:c8:51:a3:f2:9a:5d:1f:45:9f:87:62:60:
b0:8a:eb:5f:96:24:ad:71:3a:c2:ea:62:ec:22:3d:21:01:30:
c8:82:32:f4:2c:24:a7:b9:77:97:d8:e4:dd:45:8d:a0:e0:b0:
d2:6b:dd:c3:f9:1e:09:89:25:d7:cf:d9:c6:3a:74:34:28:a6:
aa:26:77:11:14:f6:78:19:f7:7e:92:a6:00:0d:0c:4c:c7:2a:
a1:d2:0e:dd:7f:e1:a9:f2:be:f3:08:01:44:14:ff:d2:b2:4c:
5c:07:f0:1a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEHma+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDQ0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDJjNDZhMjJiYjA1
NGM3NTQzNjRiMjkxNGViNDlmYTE3NTUzZjgyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKv047EoGfMHLJ481HMWCGCt9S6FfBHNRVM+urULXeqI6DTA
KJM6pRXRAeLedc0J9D1joL8/9EIUNr3i29vsUvltgMM2kixGbaT8IkIK6eQ5enGb
RRGRkdMW9UJNQib59UMdvZYT7CSmJPj6KSWl4VlZ6QOYtHbhar8f+jrpEQAwEvdn
WxHCAO4dEbwsL+ITc9Ak0WeHkDQeRpSUYkGnSIxb1bHAplKTHJpKxciFSI5G3Tfc
t1uYE1P1Lf3hDmQ5ROJBcSoTm3CeeSSYwKt7py9E7G5bCi7lYmKP7+fMcd4Ak+GA
h49n2Dc3pXGpUrbteybiVpI7w86cpNtSaeTTqn8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQCxGoiuwVMdUNkspFOtJ+hdVP4JTAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L0FzUnFJcnNGVEhWRFpMS1JUclNmb1hWVC1DVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnuvDANBgkqhkiG9w0BAQsFAAOC
AQEAAfCG0n6FezCB24E1AxGKaZxjtjvc3tOeppx69boO5ldiQgV3dVG0A6hvrbz1
2DMaADTbBFUeyyt3IGUD37MqB4/W1rWeUgKi32PDlV/tYBkj3+r11BvMc/f3rcwp
p8lunz2QvlaCMZIrx28n5izzPhiUndvAr8eAZld+MlTyHhsr3mqAmHJ87HYM7jf7
9P+99NI9kopDyFGj8ppdH0Wfh2JgsIrrX5YkrXE6wupi7CI9IQEwyIIy9Cwkp7l3
l9jk3UWNoOCw0mvdw/keCYkl18/Zxjp0NCimqiZ3ERT2eBn3fpKmAA0MTMcqodIO
3X/hqfK+8wgBRBT/0rJMXAfwGg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:14 2023 by rpki-client on console-fra.rpki-client.org