Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/JCuDlz3nhxbWq8Om9nn0WX32Ogc.roa
File: JCuDlz3nhxbWq8Om9nn0WX32Ogc.roa (raw, json)
Hash identifier: +crkB/IIm5vgrKy//gXwETciVC8D9pN2XydX2gPaaqk=
Subject key identifier: 24:2B:83:97:3D:E7:87:16:D6:AB:C3:A6:F6:79:F4:59:7D:F6:3A:07
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 384770
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/JCuDlz3nhxbWq8Om9nn0WX32Ogc.roa
Signing time: Sat 26 Mar 2022 11:17:56 +0000
ROA not before: Sat 26 Mar 2022 11:17:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 188.215.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3688304 (0x384770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Mar 26 11:17:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=242b83973de78716d6abc3a6f679f4597df63a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:1a:26:c2:08:29:61:a1:cc:f6:79:3d:09:
e5:9e:cd:24:5f:2f:ad:18:9a:00:3e:18:19:da:6a:
08:7a:f5:05:be:61:1b:f3:9d:47:b9:bb:9f:59:70:
61:34:29:ca:84:3e:bd:71:5e:de:37:e5:bc:d8:ec:
89:d7:9a:e6:71:c7:e3:ef:b1:e0:e5:b6:a0:26:48:
20:e0:46:c9:3d:21:cb:01:39:8d:ce:fa:cf:90:8f:
af:7c:69:eb:e4:a6:a3:0c:9e:8c:57:8f:6c:d4:31:
ce:19:de:85:97:68:9b:39:97:90:34:b8:8f:20:95:
1e:c7:e0:8f:03:14:9d:3f:57:3a:6a:56:28:eb:b2:
35:76:32:67:06:05:da:cc:88:2d:9c:f0:f2:eb:42:
8c:a6:30:95:66:af:96:d5:d1:68:14:34:ca:c4:54:
fa:5d:f8:4f:00:28:ce:d7:76:e4:e4:85:2d:34:85:
55:37:28:45:8c:a4:bc:f3:5a:d4:29:5d:fb:27:b8:
58:df:63:af:65:70:2b:a0:5a:0e:e6:77:f6:12:23:
62:7c:3d:a5:e1:9a:23:75:5d:c0:30:10:72:71:39:
81:e6:73:f2:5c:09:7e:56:dd:95:f1:fd:71:0a:c5:
5f:53:9f:27:7b:ec:43:69:68:d6:e3:e9:5f:8f:07:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:83:97:3D:E7:87:16:D6:AB:C3:A6:F6:79:F4:59:7D:F6:3A:07
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/JCuDlz3nhxbWq8Om9nn0WX32Ogc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:22:0a:6e:e1:46:0c:67:25:08:e9:82:c3:f3:38:4b:a5:b9:
6d:5e:06:86:89:c4:ea:1b:e6:20:40:48:ff:e4:c0:5f:fe:ed:
00:e8:40:31:e6:e5:8c:6c:e0:6c:41:e8:29:b7:da:43:00:05:
18:49:be:52:a8:e4:af:d8:d9:86:62:c0:bd:45:ac:a4:ae:ba:
1c:2a:4f:54:cf:96:73:18:20:f9:7e:76:98:70:ab:69:ef:d6:
92:e6:48:1d:88:ac:5a:f3:02:ba:77:85:58:c4:f9:e6:9a:6a:
2d:94:2e:6c:28:6b:d4:7d:48:bd:df:b9:1e:62:3d:c1:31:d6:
77:9c:6f:1f:a3:17:9c:fa:49:52:03:fb:4e:d5:06:d1:8e:84:
5b:ea:82:ce:d8:3c:66:c9:50:03:be:ee:2d:65:77:8b:57:d4:
56:69:7d:b1:87:f1:9e:2e:d3:da:8d:a1:e6:d5:c5:95:6e:c4:
90:d0:92:56:ff:bc:e0:f3:8b:78:be:f0:48:3b:f6:a5:f5:76:
9e:eb:00:57:42:00:c1:39:1b:76:c1:f7:17:8b:73:85:67:2c:
99:22:fb:66:54:96:c5:bb:b8:6d:cb:e8:0a:54:2e:ea:f4:31:
dc:59:e4:38:5a:f1:f9:d7:30:2f:b8:26:4d:3c:1c:05:49:2d:
6f:2a:bb:a2
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDOEdwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg2
Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2N2IxZTQwHhcNMjIwMzI2
MTExNzU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyNDJiODM5NzNkZTc4
NzE2ZDZhYmMzYTZmNjc5ZjQ1OTdkZjYzYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1bAaJsIIKWGhzPZ5PQnlns0kXy+tGJoAPhgZ2moIevUFvmEb
851HubufWXBhNCnKhD69cV7eN+W82OyJ15rmccfj77Hg5bagJkgg4EbJPSHLATmN
zvrPkI+vfGnr5KajDJ6MV49s1DHOGd6Fl2ibOZeQNLiPIJUex+CPAxSdP1c6alYo
67I1djJnBgXazIgtnPDy60KMpjCVZq+W1dFoFDTKxFT6XfhPACjO13bk5IUtNIVV
NyhFjKS881rUKV37J7hY32OvZXAroFoO5nf2EiNifD2l4ZojdV3AMBBycTmB5nPy
XAl+Vt2V8f1xCsVfU58ne+xDaWjW4+lfjwdh1wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCQrg5c954cW1qvDpvZ59Fl99joHMB8GA1UdIwQYMBaAFIbM4G5w35cNkKv+
PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4LzEv
SkN1RGx6M25oeGJXcThPbTlubjBXWDMyT2djLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82
NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4LzEvaHN6Z2JuRGZsdzJR
cV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvNd8MA0GCSqGSIb3DQEBCwUAA4IB
AQAaIgpu4UYMZyUI6YLD8zhLpbltXgaGicTqG+YgQEj/5MBf/u0A6EAx5uWMbOBs
Qegpt9pDAAUYSb5SqOSv2NmGYsC9RaykrrocKk9Uz5ZzGCD5fnaYcKtp79aS5kgd
iKxa8wK6d4VYxPnmmmotlC5sKGvUfUi937keYj3BMdZ3nG8foxec+klSA/tO1QbR
joRb6oLO2DxmyVADvu4tZXeLV9RWaX2xh/GeLtPajaHm1cWVbsSQ0JJW/7zg84t4
vvBIO/al9Xae6wBXQgDBORt2wfcXi3OFZyyZIvtmVJbFu7hty+gKVC7q9DHcWeQ4
WvH51zAvuCZNPBwFSS1vKrui
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org