Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/tJhJlo1VB49rrm1YQman3k9seAo.roa
File: tJhJlo1VB49rrm1YQman3k9seAo.roa (raw, json)
Hash identifier: ZgYxO5vroMaZFrULWP8IQsVa++IzSbXf2Wbr5ZC/bsY=
Subject key identifier: B4:98:49:96:8D:55:07:8F:6B:AE:6D:58:42:66:A7:DE:4F:6C:78:0A
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018534815ADDF9ABB35C66F1A3C3523FB5E8
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/tJhJlo1VB49rrm1YQman3k9seAo.roa
Signing time: Wed 21 Dec 2022 11:46:10 +0000
ROA not before: Wed 21 Dec 2022 11:46:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205499
IP address blocks: 185.188.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:81:5a:dd:f9:ab:b3:5c:66:f1:a3:c3:52:3f:b5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 21 11:46:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b49849968d55078f6bae6d584266a7de4f6c780a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:8d:99:43:88:2d:9c:a6:99:33:d9:72:90:
bd:78:49:7f:b8:fa:91:e9:37:a1:75:b4:10:a9:4f:
05:59:e7:b7:d8:ab:b1:62:f9:76:5a:d1:a0:d8:ed:
b1:f1:f1:e3:f1:74:d8:01:9f:2a:3f:39:82:7f:65:
64:0f:a8:f3:6e:77:c1:43:1e:6b:6b:9e:cb:19:74:
16:16:c9:d8:54:31:28:0e:e8:0b:d2:01:1c:2a:bb:
db:f8:76:b0:05:f3:cc:43:cb:97:f3:fd:bc:cb:42:
08:6e:52:84:31:dc:cb:28:0f:e4:c7:70:1c:c2:b1:
e3:52:ca:02:ab:b7:a6:77:33:de:0e:17:48:5c:dc:
8c:b6:20:53:de:8d:ee:66:ab:64:0f:4e:d2:50:a3:
bc:a4:60:37:1a:4d:26:4f:d1:4d:16:1b:9c:29:de:
82:1c:bd:bf:fc:b7:7e:d4:11:72:f7:e2:6a:e9:6f:
41:8d:ab:ce:06:06:35:e6:a3:78:de:4d:f4:c3:8e:
5a:eb:2a:c0:3c:63:ae:da:6e:5a:d6:80:9a:f1:a1:
3a:6c:1e:3c:8d:b9:dc:ca:79:ae:bd:57:4f:7c:a2:
b4:56:67:8c:6a:d0:65:90:d5:f0:46:b6:12:d3:ca:
d2:f5:68:d7:c8:d0:58:93:87:0e:d3:ee:eb:6d:38:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:98:49:96:8D:55:07:8F:6B:AE:6D:58:42:66:A7:DE:4F:6C:78:0A
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/tJhJlo1VB49rrm1YQman3k9seAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.9.0/24
Signature Algorithm: sha256WithRSAEncryption
93:14:be:99:3b:8e:4b:09:09:3f:b2:46:61:1c:08:dc:94:52:
75:61:0a:c2:bf:da:fd:e7:e9:3a:46:90:24:b7:b5:b1:7a:d2:
f1:21:0a:b9:8f:aa:b6:67:3f:56:8f:f0:9c:ec:db:b6:9b:a9:
b5:c8:66:09:c2:91:73:ce:62:75:d5:53:38:c0:63:27:f2:17:
a4:95:c0:ed:9c:78:06:62:bc:0b:12:bd:bd:d3:e1:29:ca:70:
20:85:81:16:0c:6a:52:4b:ae:34:f3:ab:27:ca:b2:74:6c:a7:
db:77:35:a3:43:be:54:9a:4f:63:73:19:59:92:31:7d:59:3e:
2e:33:e2:06:73:64:2a:b8:72:b7:74:11:68:38:2c:cf:8d:fc:
0e:01:2b:f1:25:af:e6:25:31:dc:13:04:bf:1d:7c:7b:c1:10:
0c:06:28:b5:3b:4c:99:29:e1:f3:e2:d6:11:63:28:30:19:e0:
20:90:f3:03:e8:f0:60:11:f2:45:93:10:da:cd:f6:76:c7:3a:
f2:43:54:4f:e1:ff:9b:ce:b7:e6:95:2c:2b:52:75:f6:a7:f5:
74:05:a9:ea:2f:73:0f:61:86:32:e2:59:36:75:b5:7d:0b:bf:
02:20:e5:31:1b:09:4b:ef:c4:5f:e2:ec:4a:fe:2f:80:22:2a:
02:60:56:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYU0gVrd+auzXGbxo8NSP7XoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMjIxMTE0NjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDk4NDk5NjhkNTUwNzhmNmJhZTZkNTg0MjY2YTdkZTRmNmM3ODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqSNmUOILZymmTPZcpC9eEl/uPqR
6TehdbQQqU8FWee32KuxYvl2WtGg2O2x8fHj8XTYAZ8qPzmCf2VkD6jzbnfBQx5r
a57LGXQWFsnYVDEoDugL0gEcKrvb+HawBfPMQ8uX8/28y0IIblKEMdzLKA/kx3Ac
wrHjUsoCq7emdzPeDhdIXNyMtiBT3o3uZqtkD07SUKO8pGA3Gk0mT9FNFhucKd6C
HL2//Ld+1BFy9+Jq6W9BjavOBgY15qN43k30w45a6yrAPGOu2m5a1oCa8aE6bB48
jbncynmuvVdPfKK0VmeMatBlkNXwRrYS08rS9WjXyNBYk4cO0+7rbTgo0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLSYSZaNVQePa65tWEJmp95PbHgKMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvdEpoSmxvMVZCNDlycm0xWVFtYW4zazlzZUFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubwJMA0G
CSqGSIb3DQEBCwUAA4IBAQCTFL6ZO45LCQk/skZhHAjclFJ1YQrCv9r95+k6RpAk
t7WxetLxIQq5j6q2Zz9Wj/Cc7Nu2m6m1yGYJwpFzzmJ11VM4wGMn8heklcDtnHgG
YrwLEr290+EpynAghYEWDGpSS64086snyrJ0bKfbdzWjQ75Umk9jcxlZkjF9WT4u
M+IGc2QquHK3dBFoOCzPjfwOASvxJa/mJTHcEwS/HXx7wRAMBii1O0yZKeHz4tYR
YygwGeAgkPMD6PBgEfJFkxDazfZ2xzryQ1RP4f+bzrfmlSwrUnX2p/V0BanqL3MP
YYYy4lk2dbV9C78CIOUxGwlL78Rf4uxK/i+AIioCYFZc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org