Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/xDKr9TCMDNytKGuoK4e0oc3Xq7k.roa
File: xDKr9TCMDNytKGuoK4e0oc3Xq7k.roa (raw, json)
Hash identifier: MOWfumEOXOksEf76l1mkR9jhgpABg980H/4nIDvphA0=
Subject key identifier: C4:32:AB:F5:30:8C:0C:DC:AD:28:6B:A8:2B:87:B4:A1:CD:D7:AB:B9
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 03190520
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/xDKr9TCMDNytKGuoK4e0oc3Xq7k.roa
Signing time: Sat 01 Jan 2022 12:04:18 +0000
ROA not before: Sat 01 Jan 2022 12:04:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47226
IP address blocks: 88.80.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51971360 (0x3190520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 12:04:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c432abf5308c0cdcad286ba82b87b4a1cdd7abb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:e1:5f:60:ec:6d:42:87:54:41:70:37:43:
12:95:13:c4:9a:1a:90:57:5e:94:0a:b3:be:3a:08:
94:a5:8a:a1:c7:54:3a:19:31:45:26:01:d9:91:ff:
e6:97:40:70:a1:4d:62:76:38:f7:a7:c7:ee:1d:78:
ee:d6:81:44:0a:ef:fb:be:d9:15:7b:26:f5:84:52:
0f:d8:88:02:a2:88:32:ea:7e:21:13:bf:42:07:90:
e4:7f:c9:70:70:a6:86:a0:24:cc:7e:bc:21:9c:b8:
bb:a6:a8:36:88:2d:d3:6f:51:6d:52:45:cb:78:db:
b5:1c:bf:83:fd:72:21:c2:df:9c:ca:88:7e:0b:21:
77:ed:bf:82:89:29:74:a6:cb:fc:da:b6:56:0e:3b:
86:44:a4:6c:14:cc:52:36:36:c9:27:45:e9:e1:bd:
dd:d3:a6:35:f8:7a:07:a3:ae:41:11:7d:d1:99:d5:
0e:5f:b7:4c:5a:bd:8c:5e:71:28:df:2f:57:69:c6:
12:9c:6b:f5:d2:13:7c:75:99:19:08:31:d6:32:c0:
cf:65:3f:54:9f:44:47:e0:55:b1:96:e0:cc:39:62:
58:b9:17:12:30:a9:87:3f:a2:f2:2f:db:ba:72:66:
6e:12:ad:db:ca:3a:5d:45:35:80:9c:da:78:d9:0f:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:AB:F5:30:8C:0C:DC:AD:28:6B:A8:2B:87:B4:A1:CD:D7:AB:B9
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/xDKr9TCMDNytKGuoK4e0oc3Xq7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.128.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a6:fd:c7:fa:6c:1f:bc:43:bd:81:f9:92:4a:16:24:f4:bc:
a1:ca:cb:ab:98:e8:00:39:c0:42:08:2e:ee:7c:1e:8a:f3:cf:
9f:de:71:5d:67:9c:65:74:6c:f3:a3:31:40:1f:9c:b0:48:9e:
28:70:47:28:b0:e3:2d:c7:43:c6:24:7e:ee:9f:44:09:0b:f9:
4f:25:f7:91:80:91:bf:8a:ba:d7:48:43:a5:e9:9b:10:64:c5:
8b:f8:53:44:96:c1:f7:18:f4:93:e0:c5:f0:9a:96:db:62:08:
0e:e9:ce:b9:f4:54:99:cd:a6:99:ea:57:4b:c6:06:f4:41:71:
e3:30:e3:4e:1c:ae:08:e5:a9:bf:33:0c:4c:0b:d5:1d:1b:70:
75:29:82:f7:3d:ac:20:bf:4e:01:f8:94:4b:51:38:bf:8d:27:
6c:88:a2:ca:3c:04:9e:33:cb:c3:b5:02:48:67:4b:b2:29:44:
7b:6f:15:37:b2:34:b2:d2:cc:de:e0:21:1a:97:71:cb:30:54:
53:21:52:a9:9d:5c:98:a2:ab:dd:f9:a3:eb:7f:a5:be:d2:a4:
1a:bc:e0:1e:5d:e1:7f:24:2c:91:73:27:c6:b9:d4:04:d9:b0:
d7:56:fa:bc:db:30:4e:76:3e:2b:1f:28:6b:f9:d2:cd:6b:9d:
ef:1b:e1:db
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAxkFIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MTI0ZmJhMWU0MDFjMDNlNWJhMWNkNzdhZTllZTM5Y2ZkNjMxYmZiMB4XDTIyMDEw
MTEyMDQxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzQzMmFiZjUzMDhj
MGNkY2FkMjg2YmE4MmI4N2I0YTFjZGQ3YWJiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALGD4V9g7G1Ch1RBcDdDEpUTxJoakFdelAqzvjoIlKWKocdU
OhkxRSYB2ZH/5pdAcKFNYnY496fH7h147taBRArv+77ZFXsm9YRSD9iIAqKIMup+
IRO/QgeQ5H/JcHCmhqAkzH68IZy4u6aoNogt029RbVJFy3jbtRy/g/1yIcLfnMqI
fgshd+2/gokpdKbL/Nq2Vg47hkSkbBTMUjY2ySdF6eG93dOmNfh6B6OuQRF90ZnV
Dl+3TFq9jF5xKN8vV2nGEpxr9dITfHWZGQgx1jLAz2U/VJ9ER+BVsZbgzDliWLkX
EjCphz+i8i/bunJmbhKt28o6XUU1gJzaeNkPFjcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTEMqv1MIwM3K0oa6grh7ShzderuTAfBgNVHSMEGDAWgBRRJPuh5AHAPluh
zXeunuOc/WMb+zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VTVDdvZVFCd0Q1Ym9jMTNycDdqblAxakdfcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTMvYjcxNGFkLTFmNzgtNGExMC04ZTYxLWFiOGYxZjMzODdlZS8x
L3hES3I5VENNRE55dEtHdW9LNGUwb2MzWHE3ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMv
YjcxNGFkLTFmNzgtNGExMC04ZTYxLWFiOGYxZjMzODdlZS8xL1VTVDdvZVFCd0Q1
Ym9jMTNycDdqblAxakdfcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFhQgDANBgkqhkiG9w0BAQsFAAOC
AQEAk6b9x/psH7xDvYH5kkoWJPS8ocrLq5joADnAQggu7nweivPPn95xXWecZXRs
86MxQB+csEieKHBHKLDjLcdDxiR+7p9ECQv5TyX3kYCRv4q610hDpembEGTFi/hT
RJbB9xj0k+DF8JqW22IIDunOufRUmc2mmepXS8YG9EFx4zDjThyuCOWpvzMMTAvV
HRtwdSmC9z2sIL9OAfiUS1E4v40nbIiiyjwEnjPLw7UCSGdLsilEe28VN7I0stLM
3uAhGpdxyzBUUyFSqZ1cmKKr3fmj63+lvtKkGrzgHl3hfyQskXMnxrnUBNmw11b6
vNswTnY+Kx8oa/nSzWud7xvh2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org