Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/YIIGbEVu9RbLZ1KUJOh1tijabBw.roa
File: YIIGbEVu9RbLZ1KUJOh1tijabBw.roa (raw, json)
Hash identifier: w5NUlICPWEhdgphugL7m9viOJaLAcssuPERE+dZjCNk=
Subject key identifier: 60:82:06:6C:45:6E:F5:16:CB:67:52:94:24:E8:75:B6:28:DA:6C:1C
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 051BB276
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/YIIGbEVu9RbLZ1KUJOh1tijabBw.roa
Signing time: Sat 01 Jan 2022 05:05:49 +0000
ROA not before: Sat 01 Jan 2022 05:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 188.92.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85701238 (0x51bb276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Jan 1 05:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6082066c456ef516cb67529424e875b628da6c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:18:07:54:05:c6:3c:ff:cc:31:90:73:de:
04:86:ff:d8:42:df:e4:ca:a2:5f:47:94:75:65:12:
cc:a5:db:2b:75:70:c9:b9:76:d6:3e:02:45:9c:40:
66:46:e6:ce:84:5a:97:2e:39:6c:dd:c7:81:5b:6d:
d1:b9:dc:88:11:5e:c6:1f:2c:b7:18:c9:31:16:70:
57:87:0d:1c:2f:48:0b:5e:45:36:7f:fd:7e:f6:e6:
d6:77:a5:7b:89:74:8b:f9:29:95:91:af:30:ac:1b:
6b:6b:9a:62:06:14:b3:dd:e5:a5:d8:c4:42:4c:98:
2d:c3:51:3a:1e:7d:8a:0a:6b:61:1d:cd:6a:eb:90:
3b:8c:b2:0d:57:5b:2a:f5:06:ac:34:27:cb:04:be:
44:c5:be:f5:65:d4:1b:d4:d4:24:97:6d:db:af:df:
21:6a:87:be:8c:f8:94:12:3d:8c:cd:e0:d0:a5:bd:
b8:9b:d7:21:b1:e8:b8:6b:f8:f9:ba:fc:a3:a1:0a:
63:98:d0:17:b3:4d:87:ea:cb:91:1f:2b:52:43:f6:
95:f8:52:21:c6:32:5b:12:cb:61:e4:45:6b:a0:33:
be:35:80:43:7b:84:23:84:d5:52:7d:b1:bf:1f:0d:
14:89:39:f8:54:d7:f9:26:af:4d:1e:3d:5d:fd:c9:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:06:6C:45:6E:F5:16:CB:67:52:94:24:E8:75:B6:28:DA:6C:1C
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/YIIGbEVu9RbLZ1KUJOh1tijabBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.120.0/22
Signature Algorithm: sha256WithRSAEncryption
51:d3:5a:cf:0e:0f:1c:81:6c:fa:30:04:84:7a:99:89:bb:d8:
e7:c2:3f:5f:de:ff:d5:e6:b2:5d:a2:3d:c5:ea:7b:f0:3e:0a:
3e:72:b0:68:a2:91:4e:e2:cb:18:ef:a9:17:3a:45:5b:5f:1b:
42:f0:2f:48:10:c4:c1:67:30:ea:7b:0b:5a:da:a7:d5:58:aa:
ce:0e:a3:32:3e:ac:e4:7e:16:2b:92:ad:b1:2b:ac:99:cb:91:
f5:33:0d:49:43:e7:c6:e8:db:8b:86:1d:86:09:b0:df:35:46:
ce:6e:9f:53:74:50:c2:83:1a:6a:6f:94:93:d3:39:b4:b7:77:
4c:08:af:bf:21:41:49:ce:ef:56:97:e3:40:e8:52:73:81:11:
31:c8:6b:98:a9:dd:51:5d:68:dd:d2:7b:48:95:28:13:3b:82:
f3:aa:fc:86:b4:fa:cc:27:a0:bf:89:e7:e8:c7:96:96:ec:d1:
a1:a0:87:d2:a0:3f:0a:69:d4:19:5a:f4:be:8f:4b:13:ae:7d:
cd:2d:1d:66:db:d3:f0:9a:a1:a7:dc:6c:86:f9:c4:54:e1:6b:
79:95:b4:d7:54:d2:1e:f0:7c:ee:52:e3:65:77:84:48:29:3f:
47:9c:27:3e:d4:62:1a:f2:94:c2:22:de:68:e5:6c:c3:25:f8:
61:26:b2:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBRuydjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Yjg3MDMzZmM2YTg3ZDNiOGQwY2IzY2UxYWIyYmFiYmU1MmJhMzExMB4XDTIyMDEw
MTA1MDU0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjA4MjA2NmM0NTZl
ZjUxNmNiNjc1Mjk0MjRlODc1YjYyOGRhNmMxYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMyzGAdUBcY8/8wxkHPeBIb/2ELf5MqiX0eUdWUSzKXbK3Vw
ybl21j4CRZxAZkbmzoRaly45bN3HgVtt0bnciBFexh8stxjJMRZwV4cNHC9IC15F
Nn/9fvbm1nele4l0i/kplZGvMKwba2uaYgYUs93lpdjEQkyYLcNROh59igprYR3N
auuQO4yyDVdbKvUGrDQnywS+RMW+9WXUG9TUJJdt26/fIWqHvoz4lBI9jM3g0KW9
uJvXIbHouGv4+br8o6EKY5jQF7NNh+rLkR8rUkP2lfhSIcYyWxLLYeRFa6AzvjWA
Q3uEI4TVUn2xvx8NFIk5+FTX+SavTR49Xf3JYxsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRgggZsRW71FstnUpQk6HW2KNpsHDAfBgNVHSMEGDAWgBRLhwM/xqh9O40M
s84asrq75SujETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1M0Y0RQOGFvZlR1TkRMUE9Hcks2dS1Vcm94RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2MvNmRmYmNmLTMxM2ItNDdiOS1iZjhlLWE3NzhhMGMxNDg1OS8x
L1lJSUdiRVZ1OVJiTFoxS1VKT2gxdGlqYWJCdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Mv
NmRmYmNmLTMxM2ItNDdiOS1iZjhlLWE3NzhhMGMxNDg1OS8xL1M0Y0RQOGFvZlR1
TkRMUE9Hcks2dS1Vcm94RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArxceDANBgkqhkiG9w0BAQsFAAOC
AQEAUdNazw4PHIFs+jAEhHqZibvY58I/X97/1eayXaI9xep78D4KPnKwaKKRTuLL
GO+pFzpFW18bQvAvSBDEwWcw6nsLWtqn1Viqzg6jMj6s5H4WK5KtsSusmcuR9TMN
SUPnxujbi4Ydhgmw3zVGzm6fU3RQwoMaam+Uk9M5tLd3TAivvyFBSc7vVpfjQOhS
c4ERMchrmKndUV1o3dJ7SJUoEzuC86r8hrT6zCegv4nn6MeWluzRoaCH0qA/CmnU
GVr0vo9LE659zS0dZtvT8Jqhp9xshvnEVOFreZW011TSHvB87lLjZXeESCk/R5wn
PtRiGvKUwiLeaOVswyX4YSayqQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:00 2023 by rpki-client on console-ams.rpki-client.org