Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YX9zJq2fi6wOP2XBJSyZY_ztMpc.roa
File: YX9zJq2fi6wOP2XBJSyZY_ztMpc.roa (raw, json)
Hash identifier: KtWKMQS8zvxqrVYNMfDTlDejjXV0G8fwqJ6enXo6S1s=
Subject key identifier: 61:7F:73:26:AD:9F:8B:AC:0E:3F:65:C1:25:2C:99:63:FC:ED:32:97
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 37E3F1DF
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YX9zJq2fi6wOP2XBJSyZY_ztMpc.roa
Signing time: Thu 31 Mar 2022 03:14:21 +0000
ROA not before: Thu 31 Mar 2022 03:14:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197684
IP address blocks: 188.130.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937685471 (0x37e3f1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Mar 31 03:14:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=617f7326ad9f8bac0e3f65c1252c9963fced3297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:32:8b:69:e5:dd:57:1d:bf:38:a1:d3:1b:
82:3d:25:23:6a:d5:1d:2c:c3:f4:6b:87:da:9e:09:
ff:c4:52:f0:63:8b:44:9f:21:df:91:27:1b:97:be:
0f:50:da:cd:84:7b:71:10:d7:a9:c3:93:e3:d5:81:
29:ee:74:06:64:b8:4c:93:24:fd:a7:78:9c:01:a7:
51:12:8d:a4:3a:d2:9c:fd:70:cc:3e:e3:b1:fb:bc:
3b:d3:26:bf:b1:10:d7:75:5a:9c:20:cb:c0:0a:14:
ad:cd:0f:c6:f9:49:8c:14:24:4c:77:a6:e9:26:09:
fa:22:07:ad:a2:76:a9:c2:e4:88:2a:3f:c5:b6:3f:
65:4f:a0:12:e5:c8:fe:ce:aa:83:dc:1d:39:7b:d0:
ee:da:9a:0b:86:96:87:08:ae:c9:6e:7a:2f:bd:ff:
25:1c:f3:6a:96:69:8c:d3:52:8d:84:1a:c5:c3:c2:
02:bf:d3:0e:a5:b6:02:c4:7d:13:7d:91:6f:5c:7e:
88:45:54:9b:58:a0:dd:bd:75:7e:54:78:f2:e1:d6:
c4:05:1d:68:6a:8e:92:68:da:bd:fb:0e:62:3b:14:
3b:b3:3a:8b:4c:e6:87:04:ea:25:f3:51:96:76:27:
90:c7:bd:72:01:16:b1:95:e1:10:96:fc:b0:20:21:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7F:73:26:AD:9F:8B:AC:0E:3F:65:C1:25:2C:99:63:FC:ED:32:97
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YX9zJq2fi6wOP2XBJSyZY_ztMpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.246.0/24
Signature Algorithm: sha256WithRSAEncryption
09:67:a6:6d:ad:ab:5a:f5:2d:b5:c3:9e:7b:ea:7e:a8:0c:77:
93:43:4f:79:57:04:f0:0f:77:d8:aa:e5:98:4b:5d:90:16:f5:
3e:1f:cd:93:c2:20:c0:c3:20:bc:c7:f3:48:0c:57:cb:19:35:
3f:af:46:80:2e:2d:06:e1:33:e4:84:08:cc:6d:97:42:d4:de:
19:d1:38:d7:9a:26:ca:d4:df:1e:05:50:ff:d2:a9:d1:87:87:
a1:c1:0a:b6:45:df:22:f2:32:84:c3:d5:bc:cc:dd:f7:d9:8d:
f5:4d:e7:04:1d:c4:93:89:59:ea:e2:84:a7:85:73:16:9f:fd:
2d:75:56:75:50:70:53:3b:68:3a:cf:66:ed:5e:fd:65:53:4b:
38:a4:f2:5b:db:70:9e:7e:28:cb:a5:1d:cb:bf:f4:a6:14:31:
fe:f3:c1:03:d5:e8:a0:79:67:e8:76:a3:a3:4f:99:0e:86:f6:
43:aa:f2:fc:f4:76:21:e5:91:7d:f1:68:53:7e:d1:7f:5b:7f:
a5:f8:cb:83:f1:db:52:79:15:cd:c1:7a:4d:be:dc:1f:66:b9:
03:a7:56:12:d1:c7:37:3d:08:d6:8f:8e:6d:ff:4f:14:99:16:
1f:e6:2b:7c:cb:11:0f:7a:89:32:6e:f1:8c:46:12:f0:2f:24:
62:bd:3e:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN+Px3zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ODViODU3NzA2ZGFjNTRlMjBjYTBkMTFiZDY0MTZjYjYzNDIwM2I0MB4XDTIyMDMz
MTAzMTQyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjE3ZjczMjZhZDlm
OGJhYzBlM2Y2NWMxMjUyYzk5NjNmY2VkMzI5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANe5Motp5d1XHb84odMbgj0lI2rVHSzD9GuH2p4J/8RS8GOL
RJ8h35EnG5e+D1DazYR7cRDXqcOT49WBKe50BmS4TJMk/ad4nAGnURKNpDrSnP1w
zD7jsfu8O9Mmv7EQ13VanCDLwAoUrc0PxvlJjBQkTHem6SYJ+iIHraJ2qcLkiCo/
xbY/ZU+gEuXI/s6qg9wdOXvQ7tqaC4aWhwiuyW56L73/JRzzapZpjNNSjYQaxcPC
Ar/TDqW2AsR9E32Rb1x+iEVUm1ig3b11flR48uHWxAUdaGqOkmjavfsOYjsUO7M6
i0zmhwTqJfNRlnYnkMe9cgEWsZXhEJb8sCAh4N8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRhf3MmrZ+LrA4/ZcElLJlj/O0ylzAfBgNVHSMEGDAWgBSIW4V3BtrFTiDK
DRG9ZBbLY0IDtDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lGdUZkd2JheFU0Z3lnMFJ2V1FXeTJOQ0E3US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMzIxY2RjLTIxNDMtNGI1Yy05NzMzLTE2Njk5Yzk2ZGQ1ZS8x
L1lYOXpKcTJmaTZ3T1AyWEJKU3laWV96dE1wYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MzIxY2RjLTIxNDMtNGI1Yy05NzMzLTE2Njk5Yzk2ZGQ1ZS8xL2lGdUZkd2JheFU0
Z3lnMFJ2V1FXeTJOQ0E3US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALyC9jANBgkqhkiG9w0BAQsFAAOC
AQEACWemba2rWvUttcOee+p+qAx3k0NPeVcE8A932KrlmEtdkBb1Ph/Nk8IgwMMg
vMfzSAxXyxk1P69GgC4tBuEz5IQIzG2XQtTeGdE415omytTfHgVQ/9Kp0YeHocEK
tkXfIvIyhMPVvMzd99mN9U3nBB3Ek4lZ6uKEp4VzFp/9LXVWdVBwUztoOs9m7V79
ZVNLOKTyW9twnn4oy6Udy7/0phQx/vPBA9XooHln6Hajo0+ZDob2Q6ry/PR2IeWR
ffFoU37Rf1t/pfjLg/HbUnkVzcF6Tb7cH2a5A6dWEtHHNz0I1o+Obf9PFJkWH+Yr
fMsRD3qJMm7xjEYS8C8kYr0+JQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org