Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/1-6ZjAIiJoHbKXeNgyNc0zMd9pFU.roa
File: 1-6ZjAIiJoHbKXeNgyNc0zMd9pFU.roa (raw, json)
Hash identifier: 1rIi3j5T0gbFJ/YczlqxghSZyV86zq4I5HMjoiDlQ50=
Subject key identifier: FB:A6:63:00:88:89:A0:76:CA:5D:E3:60:C8:D7:34:CC:C7:7D:A4:55
Certificate issuer: /CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
Certificate serial: DFB454
Authority key identifier: 1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/1-6ZjAIiJoHbKXeNgyNc0zMd9pFU.roa
Signing time: Thu 13 Jan 2022 12:54:43 +0000
ROA not before: Thu 13 Jan 2022 12:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 188.244.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14660692 (0xdfb454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
Validity
Not Before: Jan 13 12:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fba663008889a076ca5de360c8d734ccc77da455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:31:e4:39:d5:db:85:1f:55:34:f3:b9:d5:
ef:55:1d:2d:e2:9e:b6:53:1d:1c:a6:c6:34:06:2e:
48:37:7a:4e:c8:73:13:b7:03:c5:9d:45:b6:c2:05:
ff:a5:a6:a0:37:e7:1e:b1:35:9e:d0:ef:c8:81:f5:
a0:3c:00:66:41:40:64:17:03:42:9c:39:29:85:7d:
7e:b4:da:df:b0:8e:4f:f2:36:a9:f2:d8:03:bc:8c:
02:df:ef:ef:04:54:89:5c:54:61:5e:34:e8:78:85:
70:c1:40:be:c3:0e:46:b8:91:8f:68:50:b7:d1:cb:
1c:00:a8:43:92:45:01:0e:57:b6:51:c0:c6:88:61:
83:5d:2e:56:d3:b5:62:99:5b:2a:0e:ae:27:2d:5d:
ef:2e:8e:3e:ec:06:42:06:43:3d:a6:dd:6a:3e:9d:
55:e7:b6:5f:0b:44:47:36:96:88:a5:fb:64:74:78:
7b:e7:a7:3f:df:f3:5d:15:0d:e3:45:1f:20:0a:93:
5b:0d:5a:51:e9:7e:2b:3d:db:c6:ff:d4:38:8b:92:
6a:fb:2b:47:0e:27:0f:06:8e:4c:be:c2:94:8e:15:
25:67:bd:c2:2d:64:3a:c5:8c:02:68:bf:bf:80:9b:
bc:c4:14:b1:ee:b1:3e:f2:c4:8a:ee:a2:47:ee:ce:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A6:63:00:88:89:A0:76:CA:5D:E3:60:C8:D7:34:CC:C7:7D:A4:55
X509v3 Authority Key Identifier:
keyid:1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/1-6ZjAIiJoHbKXeNgyNc0zMd9pFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.113.0/24
Signature Algorithm: sha256WithRSAEncryption
01:75:3c:dd:8f:fc:e9:4d:4d:64:60:6f:84:a8:58:db:e4:94:
ee:d9:63:33:66:02:b7:f8:01:0d:e9:74:16:3b:85:0f:d5:80:
fc:f9:53:5e:1d:d8:18:fa:70:c6:9c:05:9e:79:7b:92:f5:be:
81:19:38:58:a3:93:2a:a6:c5:e0:a8:51:f2:1c:28:19:28:15:
03:50:1d:43:6a:fb:23:5b:4e:ae:49:15:92:e5:67:78:2e:28:
57:68:84:3e:57:89:24:9b:1d:c9:54:fb:7b:fd:7e:07:24:19:
e5:5e:8a:35:a5:21:bb:0c:92:c0:a4:fa:ba:90:33:ef:a3:aa:
eb:39:dd:8f:c8:93:f6:25:c9:11:72:a8:6f:83:6f:bb:0a:20:
77:58:bd:9e:2b:0b:a7:36:e8:67:a8:d1:a7:68:ac:b6:27:da:
a2:08:c7:39:b4:fd:65:3e:9a:b5:ee:d2:20:15:79:20:76:14:
82:4c:23:74:a3:6e:08:b5:1c:f4:ba:cb:8d:05:f3:66:e1:99:
18:38:78:6b:83:f9:5d:15:99:12:e5:c1:40:f0:98:04:45:81:
ca:d4:69:e2:cf:66:34:04:61:1d:a8:a4:52:c0:82:5f:40:b8:
14:09:0b:13:91:99:2f:87:68:4d:63:be:a0:a0:67:c2:4e:5b:
1a:cd:8a:2d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAN+0VDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YThlZWI4M2I1YTFlZDdkNWNhYWRlOGVmMTAwNGE1YmFjMTlmMzBmMB4XDTIyMDEx
MzEyNTQ0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmJhNjYzMDA4ODg5
YTA3NmNhNWRlMzYwYzhkNzM0Y2NjNzdkYTQ1NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOOrMeQ51duFH1U087nV71UdLeKetlMdHKbGNAYuSDd6Tshz
E7cDxZ1FtsIF/6WmoDfnHrE1ntDvyIH1oDwAZkFAZBcDQpw5KYV9frTa37COT/I2
qfLYA7yMAt/v7wRUiVxUYV406HiFcMFAvsMORriRj2hQt9HLHACoQ5JFAQ5XtlHA
xohhg10uVtO1YplbKg6uJy1d7y6OPuwGQgZDPabdaj6dVee2XwtERzaWiKX7ZHR4
e+enP9/zXRUN40UfIAqTWw1aUel+Kz3bxv/UOIuSavsrRw4nDwaOTL7ClI4VJWe9
wi1kOsWMAmi/v4CbvMQUse6xPvLEiu6iR+7OvV8CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT7pmMAiImgdspd42DI1zTMx32kVTAfBgNVHSMEGDAWgBQajuuDtaHtfVyq
3o7xAEpbrBnzDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dvN3JnN1doN1gxY3F0Nk84UUJLVzZ3Wjh3OC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjQvZTlhMjYyLTM4OTYtNGI5MS04N2U0LWJkNzM3OWE5ZDA0My8x
LzEtNlpqQUlpSm9IYktYZU5neU5jMHpNZDlwRlUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0
L2U5YTI2Mi0zODk2LTRiOTEtODdlNC1iZDczNzlhOWQwNDMvMS9HbzdyZzdXaDdY
MWNxdDZPOFFCS1c2d1o4dzguY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC89HEwDQYJKoZIhvcNAQELBQAD
ggEBAAF1PN2P/OlNTWRgb4SoWNvklO7ZYzNmArf4AQ3pdBY7hQ/VgPz5U14d2Bj6
cMacBZ55e5L1voEZOFijkyqmxeCoUfIcKBkoFQNQHUNq+yNbTq5JFZLlZ3guKFdo
hD5XiSSbHclU+3v9fgckGeVeijWlIbsMksCk+rqQM++jqus53Y/Ik/YlyRFyqG+D
b7sKIHdYvZ4rC6c26Geo0adorLYn2qIIxzm0/WU+mrXu0iAVeSB2FIJMI3Sjbgi1
HPS6y40F82bhmRg4eGuD+V0VmRLlwUDwmARFgcrUaeLPZjQEYR2opFLAgl9AuBQJ
CxORmS+HaE1jvqCgZ8JOWxrNii0=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-ams.rpki-client.org