Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2kX1YDJzMYv0-msccqLurYPR6rE.roa
File: 2kX1YDJzMYv0-msccqLurYPR6rE.roa (raw, json)
Hash identifier: nngLECCIj/zxcBzsQbOq4fbY8QscDjrzNgAQWMsb4Gc=
Subject key identifier: DA:45:F5:60:32:73:31:8B:F4:FA:6B:1C:72:A2:EE:AD:83:D1:EA:B1
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0184629A31DEDFFB40A1E2742C2B04F6275A
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2kX1YDJzMYv0-msccqLurYPR6rE.roa
Signing time: Thu 10 Nov 2022 17:33:03 +0000
ROA not before: Thu 10 Nov 2022 17:33:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207451
IP address blocks: 188.130.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:9a:31:de:df:fb:40:a1:e2:74:2c:2b:04:f6:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 10 17:33:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da45f5603273318bf4fa6b1c72a2eead83d1eab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:e2:8c:ff:d2:a6:fc:f1:9f:96:80:a8:63:
fc:cf:51:1f:de:fd:88:08:c8:eb:f6:51:d4:7f:54:
57:e7:27:01:ff:bb:85:90:08:19:e8:1e:0c:b5:87:
81:39:ce:e3:a9:0c:81:b5:66:bb:70:05:01:43:9c:
cc:89:8f:01:f3:f7:dc:ef:39:6d:44:61:06:07:14:
8d:7e:08:3e:a1:1b:0f:cb:cb:ae:d6:a3:62:30:b1:
6f:3f:c6:ef:61:9d:a2:51:ee:de:cb:cc:77:66:58:
d0:f1:ca:6d:4e:e0:0f:48:f5:97:47:a4:5d:9e:d2:
5d:37:95:ae:37:ac:44:d5:df:5f:84:87:9d:84:28:
da:81:be:62:e4:ca:93:58:87:48:d0:44:2f:41:02:
0e:80:e2:49:3d:d9:27:64:10:8d:1a:a5:a0:aa:7a:
5b:cd:96:64:64:d7:a8:cf:87:d6:d7:28:08:6d:72:
39:5f:1e:2c:b3:8b:eb:e4:f2:5c:3b:d5:d6:51:13:
8c:a0:41:a5:4c:7b:2f:37:91:28:19:0f:d7:f7:29:
84:36:da:5e:ba:2d:fa:13:3e:38:07:ae:1c:94:e6:
23:61:fa:d4:0a:7c:24:53:f7:08:48:6d:d1:1e:f5:
0e:cc:53:72:59:a0:65:9f:56:e9:4f:79:6d:b0:69:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:45:F5:60:32:73:31:8B:F4:FA:6B:1C:72:A2:EE:AD:83:D1:EA:B1
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2kX1YDJzMYv0-msccqLurYPR6rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9b:31:97:af:21:d2:89:53:86:69:83:a1:80:54:f9:94:4f:
6c:f6:5a:da:a9:5f:ba:9b:f3:f4:d9:40:9f:f0:48:8c:c2:dc:
65:ed:1a:fc:0e:4f:a2:f4:3f:00:b5:16:b5:72:ba:e8:39:bc:
c5:c9:f4:44:aa:b0:3c:51:f8:40:eb:ae:42:28:42:ac:3a:57:
59:c9:55:3a:d3:65:4b:1b:05:ed:4f:3c:26:02:23:5c:54:29:
40:7e:21:4d:a8:e9:36:bf:b1:a6:15:7a:51:9f:50:8c:da:40:
06:40:78:3e:49:b2:96:99:29:6a:b6:28:bb:1c:98:a5:1e:9f:
7c:87:4f:6a:c6:8d:d3:09:e7:bc:7e:49:66:3f:56:8c:db:35:
a2:49:a3:fb:0b:b4:ff:33:24:92:cf:47:61:fc:9f:8d:b4:ba:
a1:bb:7d:57:a6:75:62:75:b7:53:d3:73:06:85:ab:a6:35:5b:
49:84:e5:f2:0c:97:2c:e8:52:46:ce:de:a9:56:b8:5e:0c:a0:
e4:16:78:31:4c:39:cd:e5:37:49:3c:ae:08:3e:8c:ce:23:69:
63:86:39:c5:45:76:0f:01:12:b1:a7:48:ba:67:c4:6a:e1:b9:
4e:81:f8:c9:ec:2e:a6:57:ee:10:a9:aa:1d:44:ab:d7:2c:b7:
1e:9f:57:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRimjHe3/tAoeJ0LCsE9idaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjIxMTEwMTczMzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTQ1ZjU2MDMyNzMzMThiZjRmYTZiMWM3MmEyZWVhZDgzZDFlYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh7ijP/Spvzxn5aAqGP8z1Ef3v2I
CMjr9lHUf1RX5ycB/7uFkAgZ6B4MtYeBOc7jqQyBtWa7cAUBQ5zMiY8B8/fc7zlt
RGEGBxSNfgg+oRsPy8uu1qNiMLFvP8bvYZ2iUe7ey8x3ZljQ8cptTuAPSPWXR6Rd
ntJdN5WuN6xE1d9fhIedhCjagb5i5MqTWIdI0EQvQQIOgOJJPdknZBCNGqWgqnpb
zZZkZNeoz4fW1ygIbXI5Xx4ss4vr5PJcO9XWUROMoEGlTHsvN5EoGQ/X9ymENtpe
ui36Ez44B64clOYjYfrUCnwkU/cISG3RHvUOzFNyWaBln1bpT3ltsGkcwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNpF9WAyczGL9PprHHKi7q2D0eqxMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvMmtYMVlESnpNWXYwLW1zY2NxTHVyWVBSNnJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvILoMA0G
CSqGSIb3DQEBCwUAA4IBAQBqmzGXryHSiVOGaYOhgFT5lE9s9lraqV+6m/P02UCf
8EiMwtxl7Rr8Dk+i9D8AtRa1crroObzFyfREqrA8UfhA665CKEKsOldZyVU602VL
GwXtTzwmAiNcVClAfiFNqOk2v7GmFXpRn1CM2kAGQHg+SbKWmSlqtii7HJilHp98
h09qxo3TCee8fklmP1aM2zWiSaP7C7T/MySSz0dh/J+NtLqhu31XpnVidbdT03MG
haumNVtJhOXyDJcs6FJGzt6pVrheDKDkFngxTDnN5TdJPK4IPozOI2ljhjnFRXYP
ARKxp0i6Z8Rq4blOgfjJ7C6mV+4QqaodRKvXLLcen1df
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org