Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/2fgJrBORcFyADY5vYrGdGEzamR8.roa
File: 2fgJrBORcFyADY5vYrGdGEzamR8.roa (raw, json)
Hash identifier: WwW2QWtCPbb6ppApMCb9uFHb+eq4LkipRVs/pPIGnLM=
Subject key identifier: D9:F8:09:AC:13:91:70:5C:80:0D:8E:6F:62:B1:9D:18:4C:DA:99:1F
Certificate issuer: /CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
Certificate serial: CDE598
Authority key identifier: EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/2fgJrBORcFyADY5vYrGdGEzamR8.roa
Signing time: Sat 01 Jan 2022 09:56:16 +0000
ROA not before: Sat 01 Jan 2022 09:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 188.244.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13493656 (0xcde598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
Validity
Not Before: Jan 1 09:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9f809ac1391705c800d8e6f62b19d184cda991f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:30:69:e8:c3:13:df:ba:2e:81:3b:e5:fc:
d2:5f:47:b8:6a:7c:c4:76:a1:5d:e2:c1:8a:7f:2d:
09:0e:da:f3:25:1d:13:ec:9a:0f:22:77:bf:ab:e3:
7d:46:86:dc:56:52:43:6f:0e:b5:39:7a:91:7a:0f:
bd:10:c0:24:cd:b4:c1:03:1d:b3:1a:ef:8e:39:23:
2f:42:42:4c:20:11:83:ad:0d:af:60:4c:42:89:91:
67:d4:a0:13:43:d3:35:0b:03:e1:1a:80:05:d3:ca:
2a:6f:fd:15:98:01:2f:73:d6:a8:71:38:84:10:17:
08:94:7c:f6:bc:0e:e9:af:e2:fb:51:60:66:51:88:
b6:cc:bc:5e:4d:9a:2e:09:67:a3:50:5c:46:3b:e4:
b0:bb:64:c0:ed:dd:84:36:7a:3f:8c:e0:10:2e:00:
64:55:07:17:c4:f0:30:8b:6f:9e:49:21:84:59:9b:
a2:93:04:0e:d6:bc:90:c0:4a:91:24:6b:b0:cb:cd:
9c:1c:76:b0:46:c5:5a:cd:6d:67:12:71:a6:65:78:
61:28:53:64:39:89:41:33:e2:a7:ec:af:d0:db:ff:
ca:34:ed:4f:a7:dd:57:cc:e6:9a:86:24:a6:0e:ce:
b3:bc:85:6c:e0:d8:11:10:4a:c9:d0:11:6e:5a:b4:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:09:AC:13:91:70:5C:80:0D:8E:6F:62:B1:9D:18:4C:DA:99:1F
X509v3 Authority Key Identifier:
keyid:EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/2fgJrBORcFyADY5vYrGdGEzamR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.118.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e3:58:2b:12:c7:12:1c:ce:06:4d:10:6f:c7:fd:dd:ed:c6:
2d:1f:74:9a:dc:c4:a3:25:bf:29:c5:92:78:f6:ef:70:d9:12:
e6:d4:9f:7c:5f:e8:80:54:ce:2b:6a:90:6d:9c:4e:8c:d0:9c:
72:d6:7e:eb:9c:d1:79:73:01:33:42:60:ee:bd:6d:12:d4:3e:
77:85:cc:65:0c:20:fc:5d:c7:d2:ac:fc:5f:bd:18:e0:6f:a4:
9f:28:6e:3c:33:f0:9b:96:e2:85:1d:0d:91:aa:15:37:d2:83:
19:20:98:04:13:6f:67:3f:be:24:ce:d5:4d:3a:2c:7c:8f:da:
a7:3a:9e:10:26:ea:45:e5:5f:15:fb:6a:b9:1a:af:a6:1c:4c:
ba:c9:78:27:95:50:81:2f:fd:91:ef:3c:75:8b:d9:ba:47:ee:
6f:3f:f8:fa:76:99:72:d2:ef:cd:05:ea:ae:ac:4e:ca:9a:cf:
24:0c:9e:87:3f:fd:66:a3:70:c7:ba:f4:a4:5d:7f:4d:22:36:
a1:8f:2f:6b:0b:bc:38:b3:43:72:ce:05:78:2d:98:56:c7:f4:
2b:f8:46:59:7b:41:a1:c6:16:eb:bb:a5:10:ea:9d:7e:e8:42:
5f:3f:56:ff:e8:e0:b5:01:a7:08:33:0b:df:ad:89:29:26:08:
85:74:be:06
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAM3lmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWI2NzE0ZDcxOTE4MWViZmNjZDVkY2RlNmNkNjI5NWQ3NzhkZWQ5MB4XDTIyMDEw
MTA5NTYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDlmODA5YWMxMzkx
NzA1YzgwMGQ4ZTZmNjJiMTlkMTg0Y2RhOTkxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN//MGnowxPfui6BO+X80l9HuGp8xHahXeLBin8tCQ7a8yUd
E+yaDyJ3v6vjfUaG3FZSQ28OtTl6kXoPvRDAJM20wQMdsxrvjjkjL0JCTCARg60N
r2BMQomRZ9SgE0PTNQsD4RqABdPKKm/9FZgBL3PWqHE4hBAXCJR89rwO6a/i+1Fg
ZlGItsy8Xk2aLglno1BcRjvksLtkwO3dhDZ6P4zgEC4AZFUHF8TwMItvnkkhhFmb
opMEDta8kMBKkSRrsMvNnBx2sEbFWs1tZxJxpmV4YShTZDmJQTPip+yv0Nv/yjTt
T6fdV8zmmoYkpg7Os7yFbODYERBKydARblq0O90CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTZ+AmsE5FwXIANjm9isZ0YTNqZHzAfBgNVHSMEGDAWgBTqtnFNcZGB6/zN
Xc3mzWKV13je2TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZyWnhUWEdSZ2V2OHpWM041czFpbGRkNDN0ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNzE3MjczLTZiODMtNDdjMi1hMzQzLWM1ODI0ZTQyMmUyMS8x
LzJmZ0pyQk9SY0Z5QURZNXZZckdkR0V6YW1SOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NzE3MjczLTZiODMtNDdjMi1hMzQzLWM1ODI0ZTQyMmUyMS8xLzZyWnhUWEdSZ2V2
OHpWM041czFpbGRkNDN0ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALz0djANBgkqhkiG9w0BAQsFAAOC
AQEAZeNYKxLHEhzOBk0Qb8f93e3GLR90mtzEoyW/KcWSePbvcNkS5tSffF/ogFTO
K2qQbZxOjNCcctZ+65zReXMBM0Jg7r1tEtQ+d4XMZQwg/F3H0qz8X70Y4G+knyhu
PDPwm5bihR0NkaoVN9KDGSCYBBNvZz++JM7VTTosfI/apzqeECbqReVfFftquRqv
phxMusl4J5VQgS/9ke88dYvZukfubz/4+naZctLvzQXqrqxOyprPJAyehz/9ZqNw
x7r0pF1/TSI2oY8vawu8OLNDcs4FeC2YVsf0K/hGWXtBocYW67ulEOqdfuhCXz9W
/+jgtQGnCDML362JKSYIhXS+Bg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org