Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/4sqyBnkXXrVrGCHPqd87FDMWwPA.roa
File: 4sqyBnkXXrVrGCHPqd87FDMWwPA.roa (raw, json)
Hash identifier: gZRBqYMTeWbIHgyOA7ik86iFUB73wUez6ZyQU0oK0ls=
Subject key identifier: E2:CA:B2:06:79:17:5E:B5:6B:18:21:CF:A9:DF:3B:14:33:16:C0:F0
Certificate issuer: /CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
Certificate serial: 0184D48F1F5CF23D2EB07EAD145C095D0B39
Authority key identifier: 1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/4sqyBnkXXrVrGCHPqd87FDMWwPA.roa
Signing time: Fri 02 Dec 2022 20:37:40 +0000
ROA not before: Fri 02 Dec 2022 20:37:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 188.244.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:8f:1f:5c:f2:3d:2e:b0:7e:ad:14:5c:09:5d:0b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
Validity
Not Before: Dec 2 20:37:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2cab20679175eb56b1821cfa9df3b143316c0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:dd:90:c8:e9:32:92:08:7e:d8:e2:2e:59:
94:31:c2:69:2f:c3:30:7c:29:31:60:24:39:66:5a:
62:13:1d:10:c2:08:3d:e0:40:84:37:49:4d:37:3f:
cf:b4:de:1e:a4:a5:03:6a:88:82:b1:81:df:e1:83:
9c:04:0a:65:c2:cc:c4:75:05:6f:ac:fc:61:14:0a:
50:e3:d7:1a:95:bc:4b:80:d7:7f:92:48:e3:90:eb:
03:af:f7:dd:f3:7e:07:d2:c6:f7:51:ef:24:01:a1:
a0:05:c7:65:ac:f4:5e:d8:65:51:15:d4:cd:59:23:
e5:32:cd:af:4c:4c:e5:30:76:f4:bb:a4:76:33:fb:
7a:cf:01:e6:f8:c1:3f:be:13:91:70:15:fa:cb:9b:
d0:8b:f2:4a:cd:15:44:2b:9f:e5:a5:2b:0d:87:34:
97:3b:82:e0:d7:8f:47:a5:f6:11:6c:8f:15:80:21:
2b:7a:63:68:e5:cb:93:a9:d2:8b:e4:cf:d0:f7:1a:
7f:50:5c:17:7b:43:41:87:be:66:4f:16:db:77:d3:
32:c9:04:43:1c:21:57:01:7f:97:3c:7d:b4:4b:df:
7a:12:f3:7e:a7:4d:f8:32:aa:a0:73:0c:47:bf:a0:
09:99:09:12:1b:17:2a:10:16:86:1b:9f:00:b5:ac:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:B2:06:79:17:5E:B5:6B:18:21:CF:A9:DF:3B:14:33:16:C0:F0
X509v3 Authority Key Identifier:
keyid:1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/4sqyBnkXXrVrGCHPqd87FDMWwPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.113.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d7:3a:64:bb:19:54:bb:96:3f:31:ca:91:1b:64:28:b8:ad:
f1:e4:ea:ef:97:83:f8:75:3a:4c:79:6b:51:d4:7b:e4:7d:d7:
d3:94:0d:7c:60:ba:2d:6f:f4:e9:4e:34:25:94:7e:21:71:ca:
d0:a2:d3:cd:63:2a:4a:24:09:d4:b1:08:95:9c:82:0d:12:b1:
d8:32:35:15:29:3d:1a:f1:d1:33:77:3f:7e:01:4b:18:7b:73:
95:8c:96:61:10:88:05:7c:aa:75:c1:ab:97:9d:9d:b4:3d:38:
2d:53:e1:26:12:e0:d1:c7:a6:0f:58:da:8c:1d:f8:3c:2c:b4:
d3:c2:7d:25:36:82:19:52:0a:87:4b:44:d2:53:b3:4e:f8:a4:
a7:fa:b7:8b:3c:53:f8:59:0d:dc:33:9f:6f:cf:5e:b4:f7:1d:
e1:e6:aa:ea:2d:42:1e:65:23:e6:f8:d0:20:ef:e7:96:fd:1a:
cf:aa:66:06:6d:d9:4a:86:ac:6e:13:a7:81:a5:7a:4c:39:6d:
f5:2b:8f:e7:44:ea:01:30:c1:6e:15:f6:91:b9:e5:20:e7:6d:
2c:56:39:73:6d:c1:d0:24:83:00:d1:f5:7f:42:71:ef:17:b0:
e1:a6:75:1c:49:8d:3e:ab:c7:46:40:1f:31:2e:13:07:7f:dc:
a3:07:de:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTUjx9c8j0usH6tFFwJXQs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOGVlYjgzYjVhMWVkN2Q1Y2FhZGU4ZWYxMDA0YTViYWMx
OWYzMGYwHhcNMjIxMjAyMjAzNzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmNhYjIwNjc5MTc1ZWI1NmIxODIxY2ZhOWRmM2IxNDMzMTZjMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5ndkMjpMpIIftjiLlmUMcJpL8Mw
fCkxYCQ5ZlpiEx0Qwgg94ECEN0lNNz/PtN4epKUDaoiCsYHf4YOcBAplwszEdQVv
rPxhFApQ49calbxLgNd/kkjjkOsDr/fd834H0sb3Ue8kAaGgBcdlrPRe2GVRFdTN
WSPlMs2vTEzlMHb0u6R2M/t6zwHm+ME/vhORcBX6y5vQi/JKzRVEK5/lpSsNhzSX
O4Lg149HpfYRbI8VgCEremNo5cuTqdKL5M/Q9xp/UFwXe0NBh75mTxbbd9MyyQRD
HCFXAX+XPH20S996EvN+p034MqqgcwxHv6AJmQkSGxcqEBaGG58AtazuxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLKsgZ5F161axghz6nfOxQzFsDwMB8GA1UdIwQY
MBaAFBqO64O1oe19XKrejvEASlusGfMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR283cmc3V2g3WDFjcXQ2TzhRQktXNndaOHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lOWEyNjItMzg5Ni00YjkxLTg3ZTQt
YmQ3Mzc5YTlkMDQzLzEvNHNxeUJua1hYclZyR0NIUHFkODdGRE1Xd1BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lOWEyNjItMzg5Ni00YjkxLTg3ZTQtYmQ3Mzc5YTlkMDQz
LzEvR283cmc3V2g3WDFjcXQ2TzhRQktXNndaOHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPRxMA0G
CSqGSIb3DQEBCwUAA4IBAQBC1zpkuxlUu5Y/McqRG2QouK3x5Orvl4P4dTpMeWtR
1HvkfdfTlA18YLotb/TpTjQllH4hccrQotPNYypKJAnUsQiVnIINErHYMjUVKT0a
8dEzdz9+AUsYe3OVjJZhEIgFfKp1wauXnZ20PTgtU+EmEuDRx6YPWNqMHfg8LLTT
wn0lNoIZUgqHS0TSU7NO+KSn+reLPFP4WQ3cM59vz1609x3h5qrqLUIeZSPm+NAg
7+eW/RrPqmYGbdlKhqxuE6eBpXpMOW31K4/nROoBMMFuFfaRueUg520sVjlzbcHQ
JIMA0fV/QnHvF7DhpnUcSY0+q8dGQB8xLhMHf9yjB96E
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-ams.rpki-client.org