Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/msQPaou2Tbw5QgcWNZk9szgrV7k.roa
File: msQPaou2Tbw5QgcWNZk9szgrV7k.roa (raw, json)
Hash identifier: OieT6l5hW5GvVaKmTyc4J87KhkCGwdDNoByEIIGciL0=
Subject key identifier: 9A:C4:0F:6A:8B:B6:4D:BC:39:42:07:16:35:99:3D:B3:38:2B:57:B9
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16EABB8C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/msQPaou2Tbw5QgcWNZk9szgrV7k.roa
Signing time: Sat 01 Jan 2022 12:01:43 +0000
ROA not before: Sat 01 Jan 2022 12:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208356
IP address blocks: 188.72.91.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384482188 (0x16eabb8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ac40f6a8bb64dbc3942071635993db3382b57b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:67:c9:b2:53:d7:88:3b:05:ef:5d:cf:5f:
0f:08:5e:d0:16:58:db:b4:77:d6:e0:46:36:17:29:
b6:36:05:79:f1:4a:8f:fa:6d:d2:5a:ae:56:be:c5:
df:be:64:e6:7b:99:b2:ac:f5:a4:c0:4f:a2:f9:0f:
7d:fd:4d:50:39:37:f7:03:55:01:e5:07:ac:cb:78:
04:27:d7:1e:4b:63:02:b8:25:27:cb:ec:88:ee:40:
75:af:f6:d2:d8:66:64:c7:65:15:ea:3f:5b:cf:08:
e9:37:df:dc:99:4d:bf:ed:1e:e5:34:c3:be:c9:da:
8a:91:1b:48:b1:77:f3:19:2b:1b:14:94:49:b8:ea:
82:c5:f0:82:bb:c3:e9:75:7c:04:32:c4:5e:cf:92:
38:67:ca:2e:51:32:e7:5d:6b:dd:fe:4f:2c:3b:62:
5d:cb:1c:26:03:05:95:5f:79:1a:8d:a9:7a:83:62:
05:0f:75:4a:fe:f6:62:09:0e:d3:5f:15:e8:06:64:
80:7d:c7:77:cc:e9:dd:a6:79:5c:16:8e:87:a3:5d:
56:c5:ca:55:82:bc:cc:db:0d:78:58:b5:a2:34:10:
f5:a6:f3:19:e9:f6:60:47:c5:68:bf:e9:8d:53:6a:
e4:ec:ad:31:e0:0e:21:4a:c1:6a:e0:57:4a:13:35:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C4:0F:6A:8B:B6:4D:BC:39:42:07:16:35:99:3D:B3:38:2B:57:B9
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/msQPaou2Tbw5QgcWNZk9szgrV7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.91.0/24
188.72.125.0/24
Signature Algorithm: sha256WithRSAEncryption
02:53:81:f6:89:62:69:f6:38:d4:44:0d:cd:f5:92:2d:a7:d3:
ef:f2:ee:5e:ee:e1:41:45:17:3d:f0:d7:bf:94:e8:7e:35:11:
ff:6a:a8:91:ab:26:75:a0:c6:d3:f7:78:51:d3:e6:11:a0:f7:
48:ee:8b:8d:e1:0a:f8:59:1f:31:3a:00:14:7c:e8:6f:29:15:
09:0c:99:2b:a2:f2:3c:f3:ae:5e:8c:66:ed:7c:4a:97:52:10:
3b:97:03:93:23:d6:5a:91:63:03:14:90:7e:6e:9e:3b:92:26:
2a:ee:08:b8:a7:a6:25:f7:e1:e2:69:7d:e3:66:33:f1:6e:22:
a2:1d:23:72:a6:78:87:67:d6:0f:04:1d:cd:3b:b0:a0:68:2b:
a1:d6:a3:45:19:93:2a:58:9c:6f:c9:4d:10:6f:53:fa:8f:2c:
24:65:14:8c:7d:e9:26:64:5a:d1:54:cb:d5:4a:3e:36:81:5e:
1d:2d:a3:49:22:87:c3:e0:e0:71:64:4e:41:4e:aa:81:c3:ba:
74:53:ff:d0:42:da:1d:9f:5f:4d:98:ac:cd:af:7d:1a:66:f9:
bb:c9:f5:6b:ba:38:a9:bf:88:74:75:72:6f:60:a4:5c:63:d3:
b4:6b:72:0c:dc:6d:f1:e9:77:7c:f2:8c:ab:80:51:76:31:3c:
e0:ec:b1:d0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEFuq7jDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDEw
MTEyMDE0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWFjNDBmNmE4YmI2
NGRiYzM5NDIwNzE2MzU5OTNkYjMzODJiNTdiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK0yZ8myU9eIOwXvXc9fDwhe0BZY27R31uBGNhcptjYFefFK
j/pt0lquVr7F375k5nuZsqz1pMBPovkPff1NUDk39wNVAeUHrMt4BCfXHktjArgl
J8vsiO5Ada/20thmZMdlFeo/W88I6Tff3JlNv+0e5TTDvsnaipEbSLF38xkrGxSU
SbjqgsXwgrvD6XV8BDLEXs+SOGfKLlEy511r3f5PLDtiXcscJgMFlV95Go2peoNi
BQ91Sv72YgkO018V6AZkgH3Hd8zp3aZ5XBaOh6NdVsXKVYK8zNsNeFi1ojQQ9abz
Gen2YEfFaL/pjVNq5OytMeAOIUrBauBXShM121ECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSaxA9qi7ZNvDlCBxY1mT2zOCtXuTAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L21zUVBhb3UyVGJ3NVFnY1dOWms5c3pnclY3ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALxIWwMEALxIfTANBgkqhkiG9w0B
AQsFAAOCAQEAAlOB9oliafY41EQNzfWSLafT7/LuXu7hQUUXPfDXv5TofjUR/2qo
kasmdaDG0/d4UdPmEaD3SO6LjeEK+FkfMToAFHzobykVCQyZK6LyPPOuXoxm7XxK
l1IQO5cDkyPWWpFjAxSQfm6eO5ImKu4IuKemJffh4ml942Yz8W4ioh0jcqZ4h2fW
DwQdzTuwoGgrodajRRmTKlicb8lNEG9T+o8sJGUUjH3pJmRa0VTL1Uo+NoFeHS2j
SSKHw+DgcWROQU6qgcO6dFP/0ELaHZ9fTZisza99Gmb5u8n1a7o4qb+IdHVyb2Ck
XGPTtGtyDNxt8el3fPKMq4BRdjE84Oyx0A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org