Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/o6MDToCr3VEJDFlwYAJAtpsGUlY.roa
File: o6MDToCr3VEJDFlwYAJAtpsGUlY.roa (raw, json)
Hash identifier: UmD458qhsXCisCbAtIT9dWrSb0uJKFdGMEaInGQRj8M=
Subject key identifier: A3:A3:03:4E:80:AB:DD:51:09:0C:59:70:60:02:40:B6:9B:06:52:56
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 111BDE3E
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/o6MDToCr3VEJDFlwYAJAtpsGUlY.roa
Signing time: Sat 01 Jan 2022 14:04:44 +0000
ROA not before: Sat 01 Jan 2022 14:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50000
IP address blocks: 188.136.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287039038 (0x111bde3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 14:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3a3034e80abdd51090c5970600240b69b065256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:7b:96:cf:68:80:aa:e4:5c:c2:46:76:54:
f2:00:ee:e5:bd:1a:bf:3e:02:d6:ac:1b:df:86:13:
c8:12:d2:96:22:27:53:7d:06:3b:6d:10:4e:50:c8:
ae:2b:bc:ac:1b:c4:d6:45:0c:9d:4e:81:9d:b8:2f:
78:93:31:4e:bf:be:e8:9c:2d:8d:c6:82:83:af:04:
0c:a9:64:8d:b7:f5:bb:c1:78:c1:d9:17:d7:98:72:
dd:e3:7c:f3:87:b8:74:c8:a6:3d:5b:ae:9a:e8:f5:
71:ec:f7:81:10:59:e8:57:a3:9c:78:6a:79:ee:0a:
f0:dc:c0:21:aa:1b:46:9e:83:e5:9a:47:1f:33:5d:
ce:7a:b2:95:46:25:90:bf:94:3c:94:2e:0d:65:13:
4a:3e:e2:73:43:87:d4:eb:be:5a:5b:59:72:70:a0:
3f:16:46:55:98:4b:d3:44:09:6a:44:75:4e:8e:37:
27:55:41:dd:24:77:75:15:d2:21:a3:21:67:21:39:
41:04:e1:18:a3:09:a7:09:29:42:8b:27:4c:1a:4b:
9e:2a:6e:99:51:82:9c:c5:2d:e0:c5:4f:3f:a8:78:
d6:99:68:9b:ac:ca:b7:04:52:88:23:df:8a:d2:05:
dc:27:d0:43:2d:64:da:4f:73:42:84:37:e8:09:9f:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:03:4E:80:AB:DD:51:09:0C:59:70:60:02:40:B6:9B:06:52:56
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/o6MDToCr3VEJDFlwYAJAtpsGUlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.136.174.0/24
Signature Algorithm: sha256WithRSAEncryption
56:55:67:92:d2:e7:46:25:87:68:cb:85:e5:92:2a:88:33:79:
6a:c7:de:bf:5d:45:68:27:cb:83:3e:0d:bc:e7:7e:e0:8f:d5:
54:34:ba:33:f3:4f:d6:24:bd:09:a3:6e:e3:4f:62:9f:7e:30:
e7:4f:00:f4:df:c6:20:db:d3:c0:a7:d1:e9:09:93:d2:6c:88:
70:a7:a7:9a:cd:c8:fc:3b:33:99:10:65:a8:49:46:c3:5b:a0:
5c:74:c3:7f:e0:ff:18:5f:89:85:5a:db:33:fe:b1:75:01:ff:
56:73:a0:3e:84:8e:3c:58:c2:98:05:25:ae:7b:48:a0:4d:7f:
6d:5b:1b:bb:bc:2f:13:f8:34:6c:9a:4b:cc:79:8b:41:d8:51:
ec:0a:a2:6d:0c:6c:e9:2c:b8:27:16:73:77:b6:1e:b8:a9:3a:
60:da:11:35:a0:9d:a4:27:bb:45:08:25:43:bc:c5:a6:ce:63:
42:9d:89:df:44:ab:f4:c5:58:bd:d9:ce:8d:61:49:eb:d7:fe:
a4:4d:e8:a0:fb:8a:5b:8f:8c:86:5d:22:9c:0d:3a:58:ef:8b:
89:87:c6:41:5a:ca:f2:80:8b:d3:ed:47:b4:6d:dc:2a:19:d1:
10:1a:99:2e:cb:83:eb:4c:91:4b:e8:09:3b:9f:8b:31:4b:fd:
7d:a3:8e:f7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEERvePjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjY5OGM0YjYxMmFmZWUyY2JiMWNkZDUwOWU0ZjAyNDZmYmI4MGUxMB4XDTIyMDEw
MTE0MDQ0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTNhMzAzNGU4MGFi
ZGQ1MTA5MGM1OTcwNjAwMjQwYjY5YjA2NTI1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJNe5bPaICq5FzCRnZU8gDu5b0avz4C1qwb34YTyBLSliIn
U30GO20QTlDIriu8rBvE1kUMnU6BnbgveJMxTr++6JwtjcaCg68EDKlkjbf1u8F4
wdkX15hy3eN884e4dMimPVuumuj1cez3gRBZ6FejnHhqee4K8NzAIaobRp6D5ZpH
HzNdznqylUYlkL+UPJQuDWUTSj7ic0OH1Ou+WltZcnCgPxZGVZhL00QJakR1To43
J1VB3SR3dRXSIaMhZyE5QQThGKMJpwkpQosnTBpLnipumVGCnMUt4MVPP6h41plo
m6zKtwRSiCPfitIF3CfQQy1k2k9zQoQ36AmfzNsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSjowNOgKvdUQkMWXBgAkC2mwZSVjAfBgNVHSMEGDAWgBRbaYxLYSr+4sux
zdUJ5PAkb7uA4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cybU1TMkVxX3VMTHNjM1ZDZVR3SkctN2dPRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvYzE2ZjU1LWI0NGQtNDBjMy05ZGFjLWNjMmZhZmUzYThiNC8x
L282TURUb0NyM1ZFSkRGbHdZQUpBdHBzR1VsWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
YzE2ZjU1LWI0NGQtNDBjMy05ZGFjLWNjMmZhZmUzYThiNC8xL1cybU1TMkVxX3VM
THNjM1ZDZVR3SkctN2dPRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALyIrjANBgkqhkiG9w0BAQsFAAOC
AQEAVlVnktLnRiWHaMuF5ZIqiDN5asfev11FaCfLgz4NvOd+4I/VVDS6M/NP1iS9
CaNu409in34w508A9N/GINvTwKfR6QmT0myIcKenms3I/DszmRBlqElGw1ugXHTD
f+D/GF+JhVrbM/6xdQH/VnOgPoSOPFjCmAUlrntIoE1/bVsbu7wvE/g0bJpLzHmL
QdhR7AqibQxs6Sy4JxZzd7YeuKk6YNoRNaCdpCe7RQglQ7zFps5jQp2J30Sr9MVY
vdnOjWFJ69f+pE3ooPuKW4+Mhl0inA06WO+LiYfGQVrK8oCL0+1HtG3cKhnREBqZ
LsuD60yRS+gJO5+LMUv9faOO9w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org