Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/1-_GG2tRj9oe6W9WRtvmWvSoSptU.roa
File: 1-_GG2tRj9oe6W9WRtvmWvSoSptU.roa (raw, json)
Hash identifier: fKALTVSx5G6Uf1E2wVHf+jIA9xZdMgAeH2at9ErMBLg=
Subject key identifier: FB:F1:86:DA:D4:63:F6:87:BA:5B:D5:91:B6:F9:96:BD:2A:12:A6:D5
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 111C7B3A
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/1-_GG2tRj9oe6W9WRtvmWvSoSptU.roa
Signing time: Sat 01 Jan 2022 14:04:44 +0000
ROA not before: Sat 01 Jan 2022 14:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50795
IP address blocks: 188.75.112.0/22 maxlen: 22
188.75.112.0/23 maxlen: 23
188.75.114.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287079226 (0x111c7b3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 14:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbf186dad463f687ba5bd591b6f996bd2a12a6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:6f:0e:4c:69:b8:92:43:be:bd:5d:1c:3e:
02:bb:9a:8f:56:11:73:4a:9e:32:0c:72:27:e1:0d:
d3:d9:e8:d6:20:99:07:4b:54:58:65:21:e4:81:88:
ae:9a:c3:df:99:99:9d:a5:97:23:85:d1:56:14:73:
17:8d:89:9d:30:c7:2b:a4:c2:29:ee:a0:10:b9:d0:
2f:3d:da:ab:f5:85:5c:2a:9d:94:3f:59:39:b6:7d:
08:8c:bf:71:54:65:1c:0c:13:6d:49:f4:42:e8:67:
fd:29:35:ce:3a:4b:59:dd:bb:4c:6a:f4:67:22:c0:
56:d8:77:b0:e6:af:a1:50:b5:58:ed:1f:68:66:2c:
de:8a:26:37:1d:2d:13:65:db:23:ab:ca:6d:19:a5:
3c:89:8c:f7:11:5d:a1:57:e1:d4:be:a1:2b:c3:43:
58:7b:36:59:ac:b7:f3:31:3e:9f:28:a9:6b:d5:88:
17:76:49:f8:88:3c:a9:b4:2a:a8:ef:59:6e:68:0d:
bd:d9:7c:b7:58:2d:c4:70:7c:fb:7e:46:3d:1a:b9:
53:d2:97:7a:3c:89:98:8e:c0:f7:2f:cd:57:42:96:
4b:3b:76:4d:d0:21:a2:09:cd:8c:80:d5:24:39:7b:
16:86:f7:f6:91:f8:df:3d:24:26:05:52:08:88:c8:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:86:DA:D4:63:F6:87:BA:5B:D5:91:B6:F9:96:BD:2A:12:A6:D5
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/1-_GG2tRj9oe6W9WRtvmWvSoSptU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.75.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:e5:41:5b:56:aa:9c:b6:7b:77:40:2b:cc:89:48:e0:7e:34:
2d:53:df:8f:c2:f8:50:af:60:ab:93:a0:ff:fd:07:86:da:a7:
22:5b:28:57:90:ed:00:45:24:73:62:5f:d2:fc:cf:c6:1f:05:
2b:c6:3a:b5:17:49:53:c4:51:2a:0b:59:c1:57:53:9b:d5:f2:
83:30:ed:8a:92:7a:12:8d:85:f5:f3:dd:ef:ba:8a:88:bb:b6:
24:f5:22:29:72:87:42:4b:d2:d3:cb:41:da:9a:9b:e4:ce:e2:
c1:f5:f9:ae:1f:3c:6f:ef:21:77:3f:5c:ec:7e:9f:37:de:0b:
c0:27:05:2f:16:c6:12:2a:51:c1:ae:f9:97:e5:c5:5d:40:15:
79:b0:3e:d7:4e:08:a7:50:26:ec:26:64:74:94:0a:db:6f:bd:
3a:87:e8:1c:e9:2b:56:4c:44:ff:00:40:b4:37:11:2d:0d:b2:
32:01:a5:ef:3c:c3:90:3a:b9:ca:67:ab:5d:55:4c:f2:8e:46:
e0:98:02:94:5c:77:21:89:1d:9a:9f:6c:54:c8:77:1e:f2:f5:
e6:9c:84:f9:24:a3:60:92:9f:97:bb:b2:b8:ba:54:05:10:d3:
e5:14:c1:fd:2b:ed:1b:6e:dc:d2:1a:b3:47:c9:9b:46:a7:c5:
03:70:f2:d0
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEERx7OjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjY5OGM0YjYxMmFmZWUyY2JiMWNkZDUwOWU0ZjAyNDZmYmI4MGUxMB4XDTIyMDEw
MTE0MDQ0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmJmMTg2ZGFkNDYz
ZjY4N2JhNWJkNTkxYjZmOTk2YmQyYTEyYTZkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhobw5MabiSQ769XRw+Aruaj1YRc0qeMgxyJ+EN09no1iCZ
B0tUWGUh5IGIrprD35mZnaWXI4XRVhRzF42JnTDHK6TCKe6gELnQLz3aq/WFXCqd
lD9ZObZ9CIy/cVRlHAwTbUn0Quhn/Sk1zjpLWd27TGr0ZyLAVth3sOavoVC1WO0f
aGYs3oomNx0tE2XbI6vKbRmlPImM9xFdoVfh1L6hK8NDWHs2Way38zE+nyipa9WI
F3ZJ+Ig8qbQqqO9ZbmgNvdl8t1gtxHB8+35GPRq5U9KXejyJmI7A9y/NV0KWSzt2
TdAhognNjIDVJDl7Fob39pH43z0kJgVSCIjIjOkCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT78Yba1GP2h7pb1ZG2+Za9KhKm1TAfBgNVHSMEGDAWgBRbaYxLYSr+4sux
zdUJ5PAkb7uA4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cybU1TMkVxX3VMTHNjM1ZDZVR3SkctN2dPRS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvYzE2ZjU1LWI0NGQtNDBjMy05ZGFjLWNjMmZhZmUzYThiNC8x
LzEtX0dHMnRSajlvZTZXOVdSdHZtV3ZTb1NwdFUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1
L2MxNmY1NS1iNDRkLTQwYzMtOWRhYy1jYzJmYWZlM2E4YjQvMS9XMm1NUzJFcV91
TExzYzNWQ2VUd0pHLTdnT0UuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK8S3AwDQYJKoZIhvcNAQELBQAD
ggEBADvlQVtWqpy2e3dAK8yJSOB+NC1T34/C+FCvYKuToP/9B4bapyJbKFeQ7QBF
JHNiX9L8z8YfBSvGOrUXSVPEUSoLWcFXU5vV8oMw7YqSehKNhfXz3e+6ioi7tiT1
Iilyh0JL0tPLQdqam+TO4sH1+a4fPG/vIXc/XOx+nzfeC8AnBS8WxhIqUcGu+Zfl
xV1AFXmwPtdOCKdQJuwmZHSUCttvvTqH6BzpK1ZMRP8AQLQ3ES0NsjIBpe88w5A6
ucpnq11VTPKORuCYApRcdyGJHZqfbFTIdx7y9eachPkko2CSn5e7sri6VAUQ0+UU
wf0r7Rtu3NIas0fJm0anxQNw8tA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org