Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/4HZT_qMJoxOaRG9N0QTaGyzF4iI.roa
File: 4HZT_qMJoxOaRG9N0QTaGyzF4iI.roa (raw, json)
Hash identifier: ZzS71tdoITcIpEeCJIuAhmfMZzSwIzw+4oOaotRNeEY=
Subject key identifier: E0:76:53:FE:A3:09:A3:13:9A:44:6F:4D:D1:04:DA:1B:2C:C5:E2:22
Certificate issuer: /CN=4825bd9ecd7c164d7bdc2f770dfc257c9d10fc6b
Certificate serial: D3B6BC
Authority key identifier: 48:25:BD:9E:CD:7C:16:4D:7B:DC:2F:77:0D:FC:25:7C:9D:10:FC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCW9ns18Fk173C93DfwlfJ0Q_Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/4HZT_qMJoxOaRG9N0QTaGyzF4iI.roa
Signing time: Sat 01 Jan 2022 08:02:08 +0000
ROA not before: Sat 01 Jan 2022 08:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41155
IP address blocks: 188.244.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13874876 (0xd3b6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4825bd9ecd7c164d7bdc2f770dfc257c9d10fc6b
Validity
Not Before: Jan 1 08:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e07653fea309a3139a446f4dd104da1b2cc5e222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:04:f9:06:b0:20:59:18:5d:df:b5:81:58:
42:a0:61:5e:ed:44:4b:64:6e:1e:9d:3a:3e:83:b3:
14:1e:0b:26:d6:5c:a2:79:fa:58:26:fe:9c:5f:cc:
70:21:a7:65:26:b2:fb:b6:7c:e5:da:94:63:bb:a2:
f3:95:f5:cf:00:1e:22:6d:5c:77:5f:4f:92:76:17:
95:3a:e3:4a:e9:84:98:9b:0b:b3:e0:23:b7:fd:78:
f5:f0:25:df:cf:6b:e0:f8:bf:44:62:a2:e3:d5:78:
7d:2a:65:0f:57:e0:30:55:7e:fe:97:01:b5:b6:36:
9a:08:23:9f:87:a1:7f:d1:23:6d:dc:88:01:75:a6:
af:88:ad:c0:99:a7:5e:bd:ab:2d:11:1d:9d:0c:52:
d4:32:3f:f8:61:cf:f8:84:96:82:92:1e:10:0e:24:
19:eb:63:65:eb:22:4c:a1:3d:ef:89:c8:30:34:e4:
32:4b:80:7e:68:38:dc:2d:11:d9:a5:b7:a2:cc:02:
2e:c1:79:88:c7:96:e1:6c:42:6a:4c:22:48:94:d3:
5a:da:f0:c6:59:57:cf:86:67:ad:ce:d8:e3:5c:3a:
f8:46:4f:77:10:92:bb:63:70:e1:a2:38:70:d4:ef:
b9:ea:05:84:69:39:ea:ab:ee:ec:a4:64:39:d2:8e:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:76:53:FE:A3:09:A3:13:9A:44:6F:4D:D1:04:DA:1B:2C:C5:E2:22
X509v3 Authority Key Identifier:
keyid:48:25:BD:9E:CD:7C:16:4D:7B:DC:2F:77:0D:FC:25:7C:9D:10:FC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCW9ns18Fk173C93DfwlfJ0Q_Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/4HZT_qMJoxOaRG9N0QTaGyzF4iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/SCW9ns18Fk173C93DfwlfJ0Q_Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.116.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5a:60:c4:9c:11:7b:28:be:9a:ca:91:a9:35:1e:9e:9a:11:
27:12:43:59:f8:1d:cc:60:0f:89:67:e8:b9:93:67:7a:29:01:
47:a8:d0:d9:5f:59:e5:f0:4d:e4:7e:36:a7:ff:6c:61:74:07:
75:56:bf:70:db:49:33:ae:d0:4e:9b:50:1a:13:31:86:5e:21:
f2:7d:1f:ea:49:94:11:ef:96:91:4e:1d:a9:96:8e:eb:2a:46:
12:4e:0f:c3:43:64:54:12:22:af:97:5d:76:ac:04:24:09:0f:
ad:46:5b:2c:92:e2:4b:46:3e:a2:b4:1e:f6:ac:82:4a:34:97:
68:ed:f2:92:87:07:59:62:6d:de:a7:36:66:4e:d6:4c:01:73:
d6:af:69:15:aa:c3:a3:02:60:fc:9c:c8:c8:f4:4a:36:08:58:
15:22:99:be:17:05:75:cb:5c:9f:28:11:48:a0:f2:c4:81:da:
60:8e:41:a7:76:27:ae:c0:10:6c:c9:54:f8:09:52:51:83:4c:
73:80:3b:1b:a1:49:b0:04:f9:19:13:64:35:a2:2d:0d:19:37:
7e:53:42:c6:20:15:cd:3b:89:f2:99:96:6d:d7:80:3c:7d:0a:
e5:77:81:b9:21:47:54:06:63:f8:06:bb:d6:67:fc:ad:73:e9:
24:c8:91:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANO2vDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODI1YmQ5ZWNkN2MxNjRkN2JkYzJmNzcwZGZjMjU3YzlkMTBmYzZiMB4XDTIyMDEw
MTA4MDIwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTA3NjUzZmVhMzA5
YTMxMzlhNDQ2ZjRkZDEwNGRhMWIyY2M1ZTIyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZvBPkGsCBZGF3ftYFYQqBhXu1ES2RuHp06PoOzFB4LJtZc
onn6WCb+nF/McCGnZSay+7Z85dqUY7ui85X1zwAeIm1cd19PknYXlTrjSumEmJsL
s+Ajt/149fAl389r4Pi/RGKi49V4fSplD1fgMFV+/pcBtbY2mggjn4ehf9EjbdyI
AXWmr4itwJmnXr2rLREdnQxS1DI/+GHP+ISWgpIeEA4kGetjZesiTKE974nIMDTk
MkuAfmg43C0R2aW3oswCLsF5iMeW4WxCakwiSJTTWtrwxllXz4Znrc7Y41w6+EZP
dxCSu2Nw4aI4cNTvueoFhGk56qvu7KRkOdKOVRsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTgdlP+owmjE5pEb03RBNobLMXiIjAfBgNVHSMEGDAWgBRIJb2ezXwWTXvc
L3cN/CV8nRD8azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NDVzluczE4RmsxNzNDOTNEZndsZkowUV9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2YvOTY4ODlmLWVkNmQtNDY3Yy04MGUxLWFlMzZmOWUzODFhMS8x
LzRIWlRfcU1Kb3hPYVJHOU4wUVRhR3l6RjRpSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Yv
OTY4ODlmLWVkNmQtNDY3Yy04MGUxLWFlMzZmOWUzODFhMS8xL1NDVzluczE4Rmsx
NzNDOTNEZndsZkowUV9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALz0dDANBgkqhkiG9w0BAQsFAAOC
AQEAaVpgxJwReyi+msqRqTUenpoRJxJDWfgdzGAPiWfouZNneikBR6jQ2V9Z5fBN
5H42p/9sYXQHdVa/cNtJM67QTptQGhMxhl4h8n0f6kmUEe+WkU4dqZaO6ypGEk4P
w0NkVBIir5dddqwEJAkPrUZbLJLiS0Y+orQe9qyCSjSXaO3ykocHWWJt3qc2Zk7W
TAFz1q9pFarDowJg/JzIyPRKNghYFSKZvhcFdctcnygRSKDyxIHaYI5Bp3YnrsAQ
bMlU+AlSUYNMc4A7G6FJsAT5GRNkNaItDRk3flNCxiAVzTuJ8pmWbdeAPH0K5XeB
uSFHVAZj+Aa71mf8rXPpJMiRgw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:31 2023 by rpki-client on console-fra.rpki-client.org