Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/1-C459AN4novbQdQfHsxS4FatY2I.roa
File: 1-C459AN4novbQdQfHsxS4FatY2I.roa (raw, json)
Hash identifier: OWj3/w9qPDbJNHimpdZLiTa+6KSoqKiUN/ysPuvTYfk=
Subject key identifier: F8:2E:39:F4:03:78:9E:8B:DB:41:D4:1F:1E:CC:52:E0:56:AD:63:62
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 095DC9C6
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/1-C459AN4novbQdQfHsxS4FatY2I.roa
Signing time: Sat 01 Jan 2022 13:06:37 +0000
ROA not before: Sat 01 Jan 2022 13:06:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 188.172.137.0/24 maxlen: 24
188.172.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157141446 (0x95dc9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Jan 1 13:06:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f82e39f403789e8bdb41d41f1ecc52e056ad6362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:62:c4:b7:bc:e2:9a:5c:a2:d6:3e:7b:ce:
e9:56:c4:22:9c:8b:ec:d9:b0:9c:b7:c0:c0:e6:23:
0d:5a:5e:95:cf:46:b7:a2:fb:70:41:57:ad:a2:24:
d5:48:65:81:51:6a:1d:62:d3:0e:8a:7c:dd:56:ce:
7a:7f:91:c3:59:5c:a2:fb:23:05:fb:e9:67:dd:9c:
9b:c8:1a:79:9e:54:9c:c2:7a:c0:4c:0c:aa:37:6e:
7e:c6:55:ef:0a:32:00:40:05:2d:70:e9:63:ca:b9:
05:dd:2f:7f:cb:2f:9d:da:50:fe:a9:17:c6:01:15:
9d:8f:cd:e1:5e:4c:30:cb:75:22:3d:65:fd:b2:c0:
ca:09:76:e3:3a:91:4f:c8:42:f4:22:ae:94:11:3b:
41:1e:82:a3:6d:a2:44:a1:f6:de:13:05:bf:e2:99:
fd:47:bf:cf:69:41:23:f4:37:f9:1a:b9:16:f7:bb:
27:17:26:35:2c:8f:a0:41:84:dd:96:cc:f2:2f:db:
6c:14:ef:77:8d:d4:ef:29:db:d6:c8:c5:cc:06:9b:
27:78:8d:66:cc:6a:f3:29:b8:98:23:d7:df:28:26:
ab:14:6c:d1:03:26:ae:4c:be:71:f5:34:a1:2a:20:
6e:d6:e8:86:b6:30:d0:89:d4:7c:17:17:1c:64:1a:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2E:39:F4:03:78:9E:8B:DB:41:D4:1F:1E:CC:52:E0:56:AD:63:62
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/1-C459AN4novbQdQfHsxS4FatY2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.137.0-188.172.138.255
Signature Algorithm: sha256WithRSAEncryption
a6:f4:5f:31:16:00:6b:56:b4:9a:13:2f:79:e4:7f:fb:6d:44:
9d:a4:01:e1:cb:a9:b4:27:10:67:67:59:6b:75:c3:83:e7:c4:
55:51:67:21:30:42:00:0e:3e:50:d7:ad:4b:dc:f2:0c:b0:6d:
53:dc:4a:a1:8f:a0:80:e9:76:c0:8b:fb:55:fc:67:6b:2c:68:
4e:23:cf:26:65:9e:77:07:15:b2:6a:f1:9f:4b:39:40:6f:93:
70:c3:72:18:6f:7c:49:51:1d:af:27:b3:b5:64:df:62:36:0a:
f0:26:17:b8:0f:a6:b6:96:d1:4e:67:ea:1c:11:fd:3f:b3:b6:
af:96:3d:a0:39:6a:72:49:f3:ed:4a:cf:04:c1:9a:4e:68:1c:
de:64:5d:c7:70:ee:46:53:5a:38:b0:1a:0b:47:70:2e:34:29:
81:27:67:fc:d6:ba:01:d6:97:82:1f:db:7d:2f:0c:04:13:d2:
3b:05:1b:70:b7:1f:f1:6a:bd:bf:1f:99:5f:59:93:dd:1c:a8:
cd:a4:f9:cf:2a:aa:b5:e3:1f:89:82:1d:3f:b2:4c:ae:6f:be:
42:c6:2b:7c:25:9b:a1:c3:04:92:3f:77:a4:4c:3a:72:60:5a:
91:01:7e:7e:ea:be:7f:82:7a:6c:b0:93:18:b0:e9:b7:00:03:
da:40:23:bf
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIECV3JxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YmI5NWNmYzJkMTg3ZjQwNTMwZWYwODNiYmQxMGM4OGM0OTU2YzFkMB4XDTIyMDEw
MTEzMDYzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjgyZTM5ZjQwMzc4
OWU4YmRiNDFkNDFmMWVjYzUyZTA1NmFkNjM2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALedYsS3vOKaXKLWPnvO6VbEIpyL7NmwnLfAwOYjDVpelc9G
t6L7cEFXraIk1UhlgVFqHWLTDop83VbOen+Rw1lcovsjBfvpZ92cm8gaeZ5UnMJ6
wEwMqjdufsZV7woyAEAFLXDpY8q5Bd0vf8svndpQ/qkXxgEVnY/N4V5MMMt1Ij1l
/bLAygl24zqRT8hC9CKulBE7QR6Co22iRKH23hMFv+KZ/Ue/z2lBI/Q3+Rq5Fve7
JxcmNSyPoEGE3ZbM8i/bbBTvd43U7ynb1sjFzAabJ3iNZsxq8ym4mCPX3ygmqxRs
0QMmrky+cfU0oSogbtbohrYw0InUfBcXHGQaJPUCAwEAAaOCAhIwggIOMB0GA1Ud
DgQWBBT4Ljn0A3iei9tB1B8ezFLgVq1jYjAfBgNVHSMEGDAWgBRruVz8LRh/QFMO
8IO70QyIxJVsHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2E3bGNfQzBZZjBCVER2Q0R1OUVNaU1TVmJCMC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNTQ3YTdmLTRiYWYtNGI3ZS1hZmI4LTQ2NjAxMzQzNTA3OS8x
LzEtQzQ1OUFONG5vdmJRZFFmSHN4UzRGYXRZMkkucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5
LzU0N2E3Zi00YmFmLTRiN2UtYWZiOC00NjYwMTM0MzUwNzkvMS9hN2xjX0MwWWYw
QlREdkNEdTlFTWlNU1ZiQjAuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEALysiQMEALysijANBgkqhkiG
9w0BAQsFAAOCAQEApvRfMRYAa1a0mhMveeR/+21EnaQB4cuptCcQZ2dZa3XDg+fE
VVFnITBCAA4+UNetS9zyDLBtU9xKoY+ggOl2wIv7VfxnayxoTiPPJmWedwcVsmrx
n0s5QG+TcMNyGG98SVEdryeztWTfYjYK8CYXuA+mtpbRTmfqHBH9P7O2r5Y9oDlq
cknz7UrPBMGaTmgc3mRdx3DuRlNaOLAaC0dwLjQpgSdn/Na6AdaXgh/bfS8MBBPS
OwUbcLcf8Wq9vx+ZX1mT3RyozaT5zyqqteMfiYIdP7JMrm++QsYrfCWbocMEkj93
pEw6cmBakQF+fuq+f4J6bLCTGLDptwAD2kAjvw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:31 2024 by rpki-client on console-fra.rpki-client.org