Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/mrDkvn6s4jqupV5aIx9b5AyS9pA.roa
File: mrDkvn6s4jqupV5aIx9b5AyS9pA.roa (raw, json)
Hash identifier: kor6BRkKGy+sIKdVH3NUKKE12S1t5lfVaWOqUaZl5Hw=
Subject key identifier: 9A:B0:E4:BE:7E:AC:E2:3A:AE:A5:5E:5A:23:1F:5B:E4:0C:92:F6:90
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 072A26B4
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/mrDkvn6s4jqupV5aIx9b5AyS9pA.roa
Signing time: Sat 01 Jan 2022 06:06:24 +0000
ROA not before: Sat 01 Jan 2022 06:06:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34241
IP address blocks: 188.190.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120202932 (0x72a26b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Jan 1 06:06:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ab0e4be7eace23aaea55e5a231f5be40c92f690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:c8:dd:c6:97:13:ee:00:f2:fc:e2:50:10:
d6:ae:bf:45:65:0d:97:e7:c7:bf:cd:5a:4d:f9:04:
29:db:4c:8f:1b:b4:c3:e4:9e:13:f6:d1:09:ef:e5:
2c:f4:5e:0b:9a:5d:de:64:e3:41:2c:52:37:df:76:
ac:59:a2:5a:55:85:96:e5:ce:75:5b:fc:1e:ec:28:
fc:f8:e6:1a:2e:31:0d:fd:3a:16:ca:f9:f3:32:d0:
2e:65:9a:95:86:26:a4:6f:af:35:1b:e2:6e:81:b6:
61:b3:a2:4d:68:ec:af:87:96:25:60:4c:ae:da:4e:
6f:4c:c9:fc:62:29:85:6d:46:9f:18:f4:f7:5a:d1:
da:c2:b0:57:d7:9e:9f:a0:b6:e0:01:6b:c1:56:ed:
7e:35:bf:03:f0:fa:5c:85:2d:a5:b7:a2:2e:b0:b3:
94:85:4e:d1:89:85:b2:6f:63:6d:1c:03:25:04:79:
20:13:79:af:06:6e:f8:96:65:db:62:48:28:fc:7e:
bc:44:3e:99:19:2e:39:77:f1:e3:3c:3c:3d:58:16:
41:d9:f1:6c:23:aa:d0:de:c2:b5:97:e4:36:5c:fc:
49:c9:61:53:9e:de:aa:5d:98:96:83:07:83:75:dc:
f6:c0:06:bd:32:2a:a9:fb:0c:0a:d1:ff:d8:a8:09:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:E4:BE:7E:AC:E2:3A:AE:A5:5E:5A:23:1F:5B:E4:0C:92:F6:90
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/mrDkvn6s4jqupV5aIx9b5AyS9pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.116.0/22
Signature Algorithm: sha256WithRSAEncryption
88:42:01:6f:c2:c8:1b:5a:de:3c:e9:f1:aa:7e:20:79:ce:57:
a3:04:d5:9f:61:72:ea:83:50:8c:2c:ce:f0:08:86:85:74:35:
bb:64:24:43:00:e2:1f:9e:4f:a8:97:e1:2c:cd:8c:f7:b4:e4:
16:84:50:4c:e4:79:f6:37:40:b0:6a:d7:36:4c:98:95:40:65:
ea:8d:4a:80:b1:3b:af:d1:1d:03:d0:b1:4c:ab:2f:c9:70:15:
9d:72:a6:51:5e:70:81:6e:d1:83:9a:12:ca:f0:bc:39:03:b3:
98:7f:90:2c:60:f9:39:77:d4:94:40:cd:05:43:24:ad:ff:0e:
a7:32:85:a8:cd:33:30:01:c3:18:9e:95:d0:14:6b:d5:4c:48:
9a:3c:2a:7d:9c:2b:f1:ea:ce:fd:70:dd:55:12:99:b7:77:78:
df:74:d7:67:55:f8:e2:f6:36:b5:04:8c:0a:3e:57:d0:5a:88:
c3:13:0d:52:b5:0e:1f:05:66:c6:e4:56:1d:ff:9f:34:71:3c:
83:5c:d5:bd:6a:e7:a6:9b:3e:c8:e2:a6:db:96:64:d9:fc:a4:
0d:9f:59:3b:28:b5:fc:0d:4b:aa:d8:e6:38:42:12:25:9d:de:
d6:91:76:c7:d5:b7:28:59:7a:d1:3a:26:a1:0e:a6:dd:2b:b1:
6d:61:17:f2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEByomtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MWQ5ZDc5NzViOGNkYTkyMzJhNDI0N2NjOWRlOWE2ZGZkYmM2MDY5MB4XDTIyMDEw
MTA2MDYyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWFiMGU0YmU3ZWFj
ZTIzYWFlYTU1ZTVhMjMxZjViZTQwYzkyZjY5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKK/yN3GlxPuAPL84lAQ1q6/RWUNl+fHv81aTfkEKdtMjxu0
w+SeE/bRCe/lLPReC5pd3mTjQSxSN992rFmiWlWFluXOdVv8Huwo/PjmGi4xDf06
Fsr58zLQLmWalYYmpG+vNRviboG2YbOiTWjsr4eWJWBMrtpOb0zJ/GIphW1Gnxj0
91rR2sKwV9een6C24AFrwVbtfjW/A/D6XIUtpbeiLrCzlIVO0YmFsm9jbRwDJQR5
IBN5rwZu+JZl22JIKPx+vEQ+mRkuOXfx4zw8PVgWQdnxbCOq0N7CtZfkNlz8Sclh
U57eql2YloMHg3Xc9sAGvTIqqfsMCtH/2KgJ270CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSasOS+fqziOq6lXlojH1vkDJL2kDAfBgNVHSMEGDAWgBQR2deXW4zakjKk
JHzJ3ppt/bxgaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VkblhsMXVNMnBJeXBDUjh5ZDZhYmYyOFlHay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmYvYjA2NjhiLTZlYzItNGRiNC1hOTU3LWFmNzM4MjM5NWUwMC8x
L21yRGt2bjZzNGpxdXBWNWFJeDliNUF5UzlwQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYv
YjA2NjhiLTZlYzItNGRiNC1hOTU3LWFmNzM4MjM5NWUwMC8xL0VkblhsMXVNMnBJ
eXBDUjh5ZDZhYmYyOFlHay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAry+dDANBgkqhkiG9w0BAQsFAAOC
AQEAiEIBb8LIG1rePOnxqn4gec5XowTVn2Fy6oNQjCzO8AiGhXQ1u2QkQwDiH55P
qJfhLM2M97TkFoRQTOR59jdAsGrXNkyYlUBl6o1KgLE7r9EdA9CxTKsvyXAVnXKm
UV5wgW7Rg5oSyvC8OQOzmH+QLGD5OXfUlEDNBUMkrf8OpzKFqM0zMAHDGJ6V0BRr
1UxImjwqfZwr8erO/XDdVRKZt3d433TXZ1X44vY2tQSMCj5X0FqIwxMNUrUOHwVm
xuRWHf+fNHE8g1zVvWrnpps+yOKm25Zk2fykDZ9ZOyi1/A1LqtjmOEISJZ3e1pF2
x9W3KFl60TomoQ6m3SuxbWEX8g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:14 2024 by rpki-client on console-fra.rpki-client.org