Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/i9IGLxQjlpeioh8aVs04FwhtI8M.roa
File: i9IGLxQjlpeioh8aVs04FwhtI8M.roa (raw, json)
Hash identifier: 3zxVgwG3xbnofg8t0bChA8mXs47j4ewqjSyoLV/8U4E=
Subject key identifier: 8B:D2:06:2F:14:23:96:97:A2:A2:1F:1A:56:CD:38:17:08:6D:23:C3
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16D0B9A2
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/i9IGLxQjlpeioh8aVs04FwhtI8M.roa
Signing time: Sat 01 Jan 2022 12:01:30 +0000
ROA not before: Sat 01 Jan 2022 12:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43289
IP address blocks: 141.101.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382777762 (0x16d0b9a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bd2062f14239697a2a21f1a56cd3817086d23c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:86:6a:b7:23:f6:ac:e7:0c:74:b2:bf:40:
b3:ed:5a:d4:71:6e:97:99:24:49:75:a7:97:54:05:
d6:05:0b:f1:fe:e5:2a:6a:40:0a:46:ca:0e:17:4a:
ed:b9:d0:3b:e5:fc:39:78:09:02:d0:74:88:0b:c6:
86:2b:af:5e:48:1f:11:89:49:7b:ab:97:3f:56:ca:
e4:fb:da:30:41:3c:44:f9:fb:1a:3e:51:e7:8c:8c:
6a:69:ab:2e:20:e1:0d:8e:e6:4e:53:b3:60:fb:26:
4d:8a:6a:56:77:39:95:eb:c4:92:15:dd:61:45:3f:
c7:99:0d:8c:26:55:ce:f3:ef:6a:ca:b3:ea:78:0f:
ba:e2:d6:2c:76:52:e9:3e:50:f4:4d:06:41:1d:a8:
02:5b:c7:e4:15:a3:b3:56:76:29:67:8e:78:67:c1:
a5:b2:b5:85:e3:89:23:f4:5b:13:cb:6e:7e:67:b3:
7a:51:d4:ea:90:13:0d:b1:d8:27:de:6b:57:12:6b:
8f:22:b8:ee:92:75:98:06:84:74:21:50:6e:82:0e:
25:ac:81:6b:5b:a7:c9:26:7b:a9:a7:17:51:7f:96:
e7:13:12:b9:62:0f:d4:a5:34:cb:82:08:34:a7:5b:
e7:22:bb:b3:f5:81:64:07:10:95:f1:63:fe:33:bf:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D2:06:2F:14:23:96:97:A2:A2:1F:1A:56:CD:38:17:08:6D:23:C3
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/i9IGLxQjlpeioh8aVs04FwhtI8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.172.0/24
Signature Algorithm: sha256WithRSAEncryption
16:15:06:6b:bc:c8:63:e2:7b:b5:c5:d5:58:ea:a2:5a:e1:e8:
12:1f:1d:56:f4:59:3a:47:98:79:0a:d9:de:39:5f:08:17:55:
3a:26:d8:e5:67:1b:a0:63:cc:94:01:4e:32:53:fa:bf:25:99:
04:74:bf:44:a7:48:16:de:1c:98:af:7c:33:59:37:00:86:fe:
c4:ef:4d:23:cb:cb:4a:f1:01:24:9e:52:c5:a6:38:69:ff:2f:
82:41:c9:1a:9a:b6:f2:9e:bf:c5:f2:97:f6:e4:b5:dc:43:d8:
3d:0c:a6:b2:02:8c:62:71:19:e0:df:04:24:cc:ae:34:52:74:
64:ca:fe:96:59:99:67:d7:cb:b5:95:60:07:c1:3d:0b:2a:af:
4b:a5:39:c4:b7:90:01:b6:b7:9a:2c:0d:4d:80:65:b5:77:d5:
51:f0:b1:b6:7c:ed:2a:29:d7:9b:f0:2f:27:04:f9:c0:f0:08:
64:e7:35:96:fd:92:a2:54:7d:4d:d9:11:4b:a4:94:74:20:ad:
15:a0:28:86:d2:16:c5:d4:ba:4b:c3:f4:b9:6e:cb:e2:9e:b4:
4c:60:47:50:f6:95:60:25:58:eb:29:34:68:2d:1c:0f:86:bc:
d8:2d:b9:b3:08:7d:8a:24:e3:7f:65:15:50:2a:33:22:f4:be:
4b:7a:25:e6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFtC5ojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDEw
MTEyMDEzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGJkMjA2MmYxNDIz
OTY5N2EyYTIxZjFhNTZjZDM4MTcwODZkMjNjMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM7Shmq3I/as5wx0sr9As+1a1HFul5kkSXWnl1QF1gUL8f7l
KmpACkbKDhdK7bnQO+X8OXgJAtB0iAvGhiuvXkgfEYlJe6uXP1bK5PvaMEE8RPn7
Gj5R54yMammrLiDhDY7mTlOzYPsmTYpqVnc5levEkhXdYUU/x5kNjCZVzvPvasqz
6ngPuuLWLHZS6T5Q9E0GQR2oAlvH5BWjs1Z2KWeOeGfBpbK1heOJI/RbE8tufmez
elHU6pATDbHYJ95rVxJrjyK47pJ1mAaEdCFQboIOJayBa1unySZ7qacXUX+W5xMS
uWIP1KU0y4IINKdb5yK7s/WBZAcQlfFj/jO/5qECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSL0gYvFCOWl6KiHxpWzTgXCG0jwzAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L2k5SUdMeFFqbHBlaW9oOGFWczA0RndodEk4TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI1lrDANBgkqhkiG9w0BAQsFAAOC
AQEAFhUGa7zIY+J7tcXVWOqiWuHoEh8dVvRZOkeYeQrZ3jlfCBdVOibY5WcboGPM
lAFOMlP6vyWZBHS/RKdIFt4cmK98M1k3AIb+xO9NI8vLSvEBJJ5SxaY4af8vgkHJ
Gpq28p6/xfKX9uS13EPYPQymsgKMYnEZ4N8EJMyuNFJ0ZMr+llmZZ9fLtZVgB8E9
CyqvS6U5xLeQAba3miwNTYBltXfVUfCxtnztKinXm/AvJwT5wPAIZOc1lv2SolR9
TdkRS6SUdCCtFaAohtIWxdS6S8P0uW7L4p60TGBHUPaVYCVY6yk0aC0cD4a82C25
swh9iiTjf2UVUCozIvS+S3ol5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org