Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/ojugsOY948Wq78uBr2hvmDHWNvo.roa
File: ojugsOY948Wq78uBr2hvmDHWNvo.roa (raw, json)
Hash identifier: 6FYWPjKndo0iyLG7JcRmm0ndpk3pWiKMNF7Cnpmfev8=
Subject key identifier: A2:3B:A0:B0:E6:3D:E3:C5:AA:EF:CB:81:AF:68:6F:98:31:D6:36:FA
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: E6CB92
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/ojugsOY948Wq78uBr2hvmDHWNvo.roa
Signing time: Fri 27 May 2022 13:18:13 +0000
ROA not before: Fri 27 May 2022 13:18:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6758
IP address blocks: 176.121.52.0/22 maxlen: 22
185.243.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15125394 (0xe6cb92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: May 27 13:18:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a23ba0b0e63de3c5aaefcb81af686f9831d636fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:92:f0:b3:1e:a7:20:b5:fd:ef:9c:44:d2:
70:84:af:50:88:75:1e:5a:88:6a:05:8c:0e:f9:e0:
04:51:36:42:32:16:d7:95:80:11:3c:1f:49:4f:9c:
a1:e5:1a:67:fc:a5:b2:65:43:93:ae:f1:0d:95:74:
55:23:c6:85:92:d7:b1:a5:51:c4:77:83:7e:8c:13:
c1:3b:b4:36:8d:fa:1f:b6:5e:e2:5d:c6:18:d2:48:
b1:e0:7c:de:87:7e:17:c1:fd:22:64:65:60:9a:e9:
38:5f:d6:4f:5b:89:0f:18:bc:21:14:1e:11:a3:a7:
2a:d4:57:13:ff:98:35:c5:40:0e:37:1a:8f:46:31:
f9:44:d5:3f:dd:08:64:41:45:a2:20:f1:e2:69:6a:
33:dd:ca:e3:f1:e9:ab:ef:c2:29:da:47:00:c4:5b:
30:31:7b:bb:ad:97:c0:7f:5f:4b:84:37:d5:9e:aa:
21:6a:88:9b:63:6e:06:82:6b:d0:b4:d8:60:3c:bb:
9d:54:1c:5e:60:6f:d9:5e:a0:1d:8a:ac:0a:0a:66:
40:5e:6d:e8:d1:fe:21:e1:96:ca:9e:f4:dd:8e:79:
3b:31:33:fd:12:24:74:61:7c:65:2e:55:2a:b7:b0:
d4:7c:25:6a:d3:fa:01:20:0d:85:ee:51:9a:46:7c:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3B:A0:B0:E6:3D:E3:C5:AA:EF:CB:81:AF:68:6F:98:31:D6:36:FA
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/ojugsOY948Wq78uBr2hvmDHWNvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.52.0/22
185.243.3.0/24
Signature Algorithm: sha256WithRSAEncryption
90:42:b2:b5:c0:2e:63:5d:57:8d:2c:c5:27:6c:7c:80:58:62:
c0:77:e2:ff:8f:68:c1:79:36:a0:7f:cd:11:e0:0f:0e:47:ed:
15:db:04:29:98:5f:fc:c6:8f:37:5a:e2:40:bb:29:25:c2:ee:
26:e0:a7:5a:f1:6c:b2:5f:8b:3a:1d:67:82:0e:59:c9:dd:17:
43:3b:f3:8d:77:59:4f:a0:0e:90:f1:a9:8b:15:73:90:34:80:
19:5f:22:2b:41:32:02:b0:a2:98:3d:fb:cf:0a:7e:cf:a5:87:
8b:4c:a2:42:f5:4d:db:94:0d:9d:7d:86:38:7e:d7:ec:ca:bc:
93:dc:6c:96:7f:63:31:ff:95:c1:72:c0:20:6c:88:68:a8:b1:
9b:d4:c5:ce:85:eb:fc:c0:fc:c8:31:a6:3a:27:49:6c:e1:c4:
a5:3f:00:e6:c4:1a:d4:b4:09:b3:6f:c7:e7:34:b3:53:92:6f:
ad:04:d3:c5:58:7f:57:1e:e4:f0:de:86:3e:43:a0:72:e0:e6:
61:7f:3d:7f:88:a3:94:10:f3:1a:a9:53:3b:f3:4c:80:a1:38:
ba:aa:b4:4d:d4:d2:3a:1e:8e:44:11:3b:71:46:fb:65:5c:76:
51:10:bd:12:7b:96:5b:29:e1:4c:ea:9c:01:4b:6f:88:04:07:
fb:f5:3f:f8
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAObLkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YmYwYTAxOTc4NjhjNmQ4YzM0ZGQxNmIzZjQ0ZGVjYzVlNDIzNmY1MB4XDTIyMDUy
NzEzMTgxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTIzYmEwYjBlNjNk
ZTNjNWFhZWZjYjgxYWY2ODZmOTgzMWQ2MzZmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjYkvCzHqcgtf3vnETScISvUIh1HlqIagWMDvngBFE2QjIW
15WAETwfSU+coeUaZ/ylsmVDk67xDZV0VSPGhZLXsaVRxHeDfowTwTu0No36H7Ze
4l3GGNJIseB83od+F8H9ImRlYJrpOF/WT1uJDxi8IRQeEaOnKtRXE/+YNcVADjca
j0Yx+UTVP90IZEFFoiDx4mlqM93K4/Hpq+/CKdpHAMRbMDF7u62XwH9fS4Q31Z6q
IWqIm2NuBoJr0LTYYDy7nVQcXmBv2V6gHYqsCgpmQF5t6NH+IeGWyp703Y55OzEz
/RIkdGF8ZS5VKrew1HwlatP6ASANhe5RmkZ882cCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSiO6Cw5j3jxarvy4GvaG+YMdY2+jAfBgNVHSMEGDAWgBQr8KAZeGjG2MNN
0Ws/RN7MXkI29TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tfQ2dHWGhveHRqRFRkRnJQMFRlekY1Q052VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNDBkMjIwLTYyMWQtNDZmYi1hYzljLTQ4YjgzNjZmZjIzZS8x
L29qdWdzT1k5NDhXcTc4dUJyMmh2bURIV052by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
NDBkMjIwLTYyMWQtNDZmYi1hYzljLTQ4YjgzNjZmZjIzZS8xL0tfQ2dHWGhveHRq
RFRkRnJQMFRlekY1Q052VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArB5NAMEALnzAzANBgkqhkiG9w0B
AQsFAAOCAQEAkEKytcAuY11XjSzFJ2x8gFhiwHfi/49owXk2oH/NEeAPDkftFdsE
KZhf/MaPN1riQLspJcLuJuCnWvFssl+LOh1ngg5Zyd0XQzvzjXdZT6AOkPGpixVz
kDSAGV8iK0EyArCimD37zwp+z6WHi0yiQvVN25QNnX2GOH7X7Mq8k9xsln9jMf+V
wXLAIGyIaKixm9TFzoXr/MD8yDGmOidJbOHEpT8A5sQa1LQJs2/H5zSzU5JvrQTT
xVh/Vx7k8N6GPkOgcuDmYX89f4ijlBDzGqlTO/NMgKE4uqq0TdTSOh6ORBE7cUb7
ZVx2URC9EnuWWynhTOqcAUtviAQH+/U/+A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-ams.rpki-client.org