Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/vB8Ln1gEsuacqmotDxnIHNIdwB4.roa
File: vB8Ln1gEsuacqmotDxnIHNIdwB4.roa (raw, json)
Hash identifier: EXeUKkT0uEl7+2SztMN89No+xGhJ8EgvDzU5ase6FCI=
Subject key identifier: BC:1F:0B:9F:58:04:B2:E6:9C:AA:6A:2D:0F:19:C8:1C:D2:1D:C0:1E
Certificate issuer: /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial: 01845105446C3018090F549442786C56ED50
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/vB8Ln1gEsuacqmotDxnIHNIdwB4.roa
Signing time: Mon 07 Nov 2022 07:36:50 +0000
ROA not before: Mon 07 Nov 2022 07:36:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34574
IP address blocks: 188.64.144.0/24 maxlen: 24
188.64.144.0/23 maxlen: 23
188.64.145.0/24 maxlen: 24
188.64.147.0/24 maxlen: 24
2a00:1120::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:05:44:6c:30:18:09:0f:54:94:42:78:6c:56:ed:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Validity
Not Before: Nov 7 07:36:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc1f0b9f5804b2e69caa6a2d0f19c81cd21dc01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:53:a0:bc:a3:6c:6c:00:5e:3a:54:0b:ce:
7f:07:b5:61:5e:61:6c:3c:60:78:0e:ec:fc:2c:50:
48:b7:5f:36:a2:be:b8:56:3d:3f:be:77:04:92:5c:
60:49:57:19:00:f6:b6:ca:bd:7e:71:33:e6:83:5e:
45:ac:72:70:71:5f:bf:3d:47:e2:fe:db:88:e9:21:
5a:24:ed:3a:f5:3f:d0:18:0a:b8:04:bc:9a:60:b7:
32:5c:ff:66:12:f5:6e:7f:59:97:9e:d4:37:5c:25:
aa:d1:da:6d:a6:d3:3b:d0:b4:74:14:62:f6:18:a4:
4b:3c:82:09:86:07:ae:39:39:9f:f7:14:10:75:5c:
b9:d7:1e:71:70:9e:7f:04:89:b3:9a:4d:a3:2f:73:
1e:24:e7:d7:84:28:39:a3:12:73:d8:d5:b2:7b:b1:
86:4e:5c:61:57:b7:8d:1f:7f:f3:26:e4:96:1e:7d:
cb:57:73:4f:38:83:8a:83:d4:1d:d0:88:e1:e4:7b:
1f:81:b1:c0:a2:08:7c:91:6b:56:71:48:b8:5f:15:
3e:e6:d4:8e:c1:0a:d3:28:3f:e3:3c:36:d9:57:f1:
b8:8e:23:a4:f5:77:c0:6e:d0:25:2a:ba:b0:80:83:
4d:26:e9:c9:53:bf:1e:04:59:78:3e:72:10:93:3a:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:0B:9F:58:04:B2:E6:9C:AA:6A:2D:0F:19:C8:1C:D2:1D:C0:1E
X509v3 Authority Key Identifier:
keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/vB8Ln1gEsuacqmotDxnIHNIdwB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.144.0/23
188.64.147.0/24
IPv6:
2a00:1120::/32
Signature Algorithm: sha256WithRSAEncryption
3f:da:62:ca:d4:fb:08:a3:0c:f1:71:29:dc:63:71:d2:c5:0b:
3f:db:7d:3c:0c:eb:97:1b:2f:07:22:09:ed:8e:bc:1c:59:50:
4b:98:f2:65:4c:96:a6:b8:09:a9:6c:ae:5d:c2:13:57:0a:56:
b8:fc:33:b6:92:6c:1f:b3:bf:19:df:c3:86:20:d0:83:0e:2c:
a1:9b:73:8b:b3:aa:86:b2:82:9a:b1:ee:d6:26:37:b1:3c:5a:
96:96:5d:8c:44:0a:f2:60:40:c1:b7:b3:84:9c:62:63:70:4a:
a9:e5:16:13:ba:7e:17:56:41:bd:a5:2e:73:ab:43:d2:18:4b:
e4:76:22:d1:b6:ee:92:58:45:e6:74:b9:2c:e4:7d:c9:99:18:
81:35:ad:8b:1f:f1:ef:b8:41:79:b6:cb:a8:df:6a:76:78:37:
a7:c5:ea:97:86:aa:5e:79:33:20:eb:7f:f2:ca:a9:20:4f:04:
69:46:90:9e:57:4b:a8:71:83:1a:8b:5c:0e:a4:34:d4:8d:d9:
11:df:23:ff:73:f9:de:3c:6f:c9:8e:93:41:83:31:ae:57:45:
20:b8:19:d9:01:e5:27:b8:d4:35:55:cb:94:fd:a7:d3:16:0d:
de:01:3e:46:29:c9:bf:c1:1a:ff:54:a3:f9:e6:f8:0c:bf:ad:
fc:a2:81:cd
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYRRBURsMBgJD1SUQnhsVu1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OWY0ZjcxNDNiNDA2NzgwNWNiYTlhNDBmNjM5NzMyZWU3
ZDQyZTUwHhcNMjIxMTA3MDczNjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzFmMGI5ZjU4MDRiMmU2OWNhYTZhMmQwZjE5YzgxY2QyMWRjMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkFToLyjbGwAXjpUC85/B7VhXmFs
PGB4Duz8LFBIt182or64Vj0/vncEklxgSVcZAPa2yr1+cTPmg15FrHJwcV+/PUfi
/tuI6SFaJO069T/QGAq4BLyaYLcyXP9mEvVuf1mXntQ3XCWq0dptptM70LR0FGL2
GKRLPIIJhgeuOTmf9xQQdVy51x5xcJ5/BImzmk2jL3MeJOfXhCg5oxJz2NWye7GG
TlxhV7eNH3/zJuSWHn3LV3NPOIOKg9Qd0Ijh5HsfgbHAogh8kWtWcUi4XxU+5tSO
wQrTKD/jPDbZV/G4jiOk9XfAbtAlKrqwgINNJunJU78eBFl4PnIQkzrs1wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLwfC59YBLLmnKpqLQ8ZyBzSHcAeMB8GA1UdIwQY
MBaAFCafT3FDtAZ4BcuppA9jlzLufULlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jOTA4NjAtODEzOC00MzNjLWIyNGYt
OTJjNzgwY2EzMjYwLzEvdkI4TG4xZ0VzdWFjcW1vdER4bklITklkd0I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jOTA4NjAtODEzOC00MzNjLWIyNGYtOTJjNzgwY2EzMjYw
LzEvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBvECQAwQA
vECTMA0EAgACMAcDBQAqABEgMA0GCSqGSIb3DQEBCwUAA4IBAQA/2mLK1PsIowzx
cSncY3HSxQs/2308DOuXGy8HIgntjrwcWVBLmPJlTJamuAmpbK5dwhNXCla4/DO2
kmwfs78Z38OGINCDDiyhm3OLs6qGsoKase7WJjexPFqWll2MRAryYEDBt7OEnGJj
cEqp5RYTun4XVkG9pS5zq0PSGEvkdiLRtu6SWEXmdLks5H3JmRiBNa2LH/HvuEF5
tsuo32p2eDenxeqXhqpeeTMg63/yyqkgTwRpRpCeV0uocYMai1wOpDTUjdkR3yP/
c/nePG/JjpNBgzGuV0UguBnZAeUnuNQ1VcuU/afTFg3eAT5GKcm/wRr/VKP55vgM
v638ooHN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org