Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/iBfQgBNdmcOePDGdvidPCZVKe38.roa
File: iBfQgBNdmcOePDGdvidPCZVKe38.roa (raw, json)
Hash identifier: TvLamuXjKwIICp89uZALAu6CxEv5Eq3NhshIWPJNC/I=
Subject key identifier: 88:17:D0:80:13:5D:99:C3:9E:3C:31:9D:BE:27:4F:09:95:4A:7B:7F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 084ECC2B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/iBfQgBNdmcOePDGdvidPCZVKe38.roa
Signing time: Wed 02 Feb 2022 10:14:28 +0000
ROA not before: Wed 02 Feb 2022 10:14:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 94.241.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139381803 (0x84ecc2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 2 10:14:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8817d080135d99c39e3c319dbe274f09954a7b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:03:04:8a:20:af:60:34:2d:3a:5d:45:bf:
5b:af:df:e9:f0:d8:5c:17:47:1e:28:8d:cf:10:56:
ee:2f:29:13:7c:78:cd:fb:81:42:06:7c:1c:81:7c:
2b:52:aa:ce:95:57:d6:93:a3:67:ae:48:c2:ec:2c:
71:0d:e8:a2:22:a2:65:c1:12:e8:5f:d0:e2:44:ac:
4e:c6:2f:19:03:c2:9c:4f:e0:94:dc:d8:ff:24:1f:
ea:9c:6e:9d:72:0e:e8:be:d3:2b:77:d1:b6:e9:74:
ef:e0:5a:2a:15:28:ca:07:d1:fe:8f:00:31:75:a2:
c3:e2:a2:d7:03:48:46:77:40:64:5a:bb:02:40:64:
23:20:98:8d:10:ae:08:7e:5d:b7:a4:38:5d:bc:b9:
d4:41:5f:4d:2f:b8:8a:62:24:17:e3:19:3c:00:37:
ed:4b:fd:f9:62:7d:58:24:5c:d9:c9:82:3b:fd:c6:
db:df:73:c2:27:0c:dd:cf:74:7d:c7:65:09:83:47:
1a:65:c2:11:65:57:08:a0:bf:55:b8:30:b8:1b:d3:
60:d1:ae:b0:ea:3c:ef:24:c9:98:84:ca:91:28:dc:
6b:6f:61:f6:ba:18:cd:12:7d:1c:83:d0:74:89:01:
df:bc:38:06:2e:61:01:e7:3f:c6:38:1d:7c:dc:40:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:17:D0:80:13:5D:99:C3:9E:3C:31:9D:BE:27:4F:09:95:4A:7B:7F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/iBfQgBNdmcOePDGdvidPCZVKe38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.160.0/22
Signature Algorithm: sha256WithRSAEncryption
08:19:96:1b:3e:42:dd:1f:24:60:34:95:92:70:33:3b:52:b6:
a9:a5:64:75:7b:b7:44:be:37:bc:13:75:0f:6b:84:92:50:42:
91:a5:b0:c4:28:e6:04:8c:93:68:21:dc:1e:d4:51:6e:f9:4b:
57:d9:bd:95:76:e1:81:be:da:17:de:32:b2:6f:bd:97:fe:45:
8f:9f:7e:b3:84:0f:6a:48:b9:d3:5b:85:dd:95:c2:4a:cd:05:
64:4a:72:2d:c6:69:68:ab:eb:e4:aa:24:25:17:0d:be:a7:49:
15:2e:3a:87:68:46:5f:02:cd:b6:54:4e:f3:f6:3c:6b:15:0b:
da:23:ea:ec:21:a6:95:59:75:66:c7:b5:a8:5f:83:28:07:9e:
11:ae:ae:f8:8c:e2:a1:98:0a:fc:d4:21:73:d2:aa:9a:82:fa:
32:51:01:13:c4:2d:d0:56:6e:c6:3f:30:f5:af:a7:6b:7a:ac:
af:64:96:18:19:2e:24:3d:3f:43:0d:9a:67:11:8d:42:9e:54:
f9:36:f7:21:9f:fa:3f:99:bb:2e:89:90:81:35:be:91:dd:d1:
fa:99:5b:74:5e:d4:f4:92:4c:8f:5a:93:94:70:4b:56:14:c7:
34:bc:9a:2e:3e:0a:f9:4f:ac:26:af:4e:48:3f:ce:02:b5:79:
91:89:6a:a3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECE7MKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDIw
MjEwMTQyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODgxN2QwODAxMzVk
OTljMzllM2MzMTlkYmUyNzRmMDk5NTRhN2I3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ1aAwSKIK9gNC06XUW/W6/f6fDYXBdHHiiNzxBW7i8pE3x4
zfuBQgZ8HIF8K1KqzpVX1pOjZ65IwuwscQ3ooiKiZcES6F/Q4kSsTsYvGQPCnE/g
lNzY/yQf6pxunXIO6L7TK3fRtul07+BaKhUoygfR/o8AMXWiw+Ki1wNIRndAZFq7
AkBkIyCYjRCuCH5dt6Q4Xby51EFfTS+4imIkF+MZPAA37Uv9+WJ9WCRc2cmCO/3G
299zwicM3c90fcdlCYNHGmXCEWVXCKC/VbgwuBvTYNGusOo87yTJmITKkSjca29h
9roYzRJ9HIPQdIkB37w4Bi5hAec/xjgdfNxAIo8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSIF9CAE12Zw548MZ2+J08JlUp7fzAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
L2lCZlFnQk5kbWNPZVBER2R2aWRQQ1pWS2UzOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAl7xoDANBgkqhkiG9w0BAQsFAAOC
AQEACBmWGz5C3R8kYDSVknAzO1K2qaVkdXu3RL43vBN1D2uEklBCkaWwxCjmBIyT
aCHcHtRRbvlLV9m9lXbhgb7aF94ysm+9l/5Fj59+s4QPaki501uF3ZXCSs0FZEpy
LcZpaKvr5KokJRcNvqdJFS46h2hGXwLNtlRO8/Y8axUL2iPq7CGmlVl1Zse1qF+D
KAeeEa6u+IzioZgK/NQhc9KqmoL6MlEBE8Qt0FZuxj8w9a+na3qsr2SWGBkuJD0/
Qw2aZxGNQp5U+Tb3IZ/6P5m7LomQgTW+kd3R+plbdF7U9JJMj1qTlHBLVhTHNLya
Lj4K+U+sJq9OSD/OArV5kYlqow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org