Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/iIrxRJVOlz-ZDVXGb8F9dpbQr8I.roa
File: iIrxRJVOlz-ZDVXGb8F9dpbQr8I.roa (raw, json)
Hash identifier: Y7LsbLmpisScKsETbUFtpbYuxPym3kST4BRdTTavAqw=
Subject key identifier: 88:8A:F1:44:95:4E:97:3F:99:0D:55:C6:6F:C1:7D:76:96:D0:AF:C2
Certificate issuer: /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial: 31EB937F
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/iIrxRJVOlz-ZDVXGb8F9dpbQr8I.roa
Signing time: Sat 01 Jan 2022 12:55:50 +0000
ROA not before: Sat 01 Jan 2022 12:55:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34232
IP address blocks: 176.53.194.0/23 maxlen: 24
176.53.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 837522303 (0x31eb937f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Validity
Not Before: Jan 1 12:55:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=888af144954e973f990d55c66fc17d7696d0afc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:06:24:e0:3d:ce:da:15:ae:ed:90:01:e4:a3:
50:71:3e:cb:1c:67:9b:39:88:cc:fd:9f:05:86:12:
18:fa:11:0e:1a:22:00:be:7b:0d:8a:28:95:30:29:
e2:b1:14:e6:20:78:9a:24:e0:ce:a9:c8:c2:0e:0d:
f1:52:b0:78:9e:6a:e5:76:1d:76:79:8c:fa:0c:17:
aa:f0:90:ce:33:b6:0f:3d:10:a0:96:e8:0e:33:83:
c7:a4:71:54:9e:80:cf:2e:d5:48:27:0f:7a:8e:cf:
d0:a8:00:26:9d:87:af:e3:74:90:b9:07:55:eb:06:
db:0c:1c:9c:ac:7d:65:ba:eb:3e:89:4a:57:87:bd:
96:79:ab:45:04:9a:a3:36:db:24:51:4f:60:16:08:
52:7c:5c:fe:ab:37:2c:f1:f2:86:2e:98:e1:2d:e4:
3e:3e:8f:aa:7f:8d:e3:e2:da:79:30:8e:19:88:b7:
f1:6d:8c:6d:eb:7c:dc:ff:90:0c:45:09:00:76:76:
f7:df:e6:71:db:5b:fb:b4:ad:1f:8c:a1:cf:d1:50:
f9:bf:96:d4:8f:66:3a:7e:6d:6a:2e:9b:2f:00:2a:
5a:01:88:b6:57:c6:8c:a5:7e:87:d9:9a:38:c9:0e:
48:b6:6a:65:92:52:c9:51:2a:7c:5d:d4:a4:40:6d:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8A:F1:44:95:4E:97:3F:99:0D:55:C6:6F:C1:7D:76:96:D0:AF:C2
X509v3 Authority Key Identifier:
keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/iIrxRJVOlz-ZDVXGb8F9dpbQr8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.194.0/23
176.53.208.0/22
Signature Algorithm: sha256WithRSAEncryption
95:3f:86:55:34:76:d7:a7:49:b3:d9:e5:c3:a7:3b:ab:dc:d8:
a7:a3:a3:ea:02:0c:78:ab:e6:da:8c:94:3e:d1:49:3b:11:b0:
c3:17:fb:d4:88:2d:4d:91:23:e5:67:3e:f3:d3:ae:83:94:e9:
fe:3e:ba:3a:8c:ef:c5:17:e6:04:67:ba:e1:42:06:61:98:39:
5d:0e:f4:44:69:6b:ee:d7:93:bd:c4:82:0d:41:a3:b4:f3:46:
db:64:7e:91:74:dd:d6:c8:41:7a:5d:e0:4d:de:bd:03:29:c6:
07:40:0c:27:64:24:da:47:e3:26:49:bd:6c:9f:7a:b2:7e:ee:
50:64:fc:ec:c3:e3:05:50:5d:9c:c4:f3:8c:ee:ab:da:eb:47:
2d:34:6a:84:e1:07:6a:10:da:c0:2c:c9:a7:5a:73:5f:03:7b:
2f:0f:7b:2f:d4:b1:3d:f7:b4:e9:10:3e:a3:79:54:35:c7:e6:
b3:6c:45:f2:6e:bb:75:b4:43:e5:2f:ce:11:a4:52:1f:98:03:
4d:c6:97:15:a3:b0:8c:f1:26:b0:65:b9:6b:33:ec:84:6e:7f:
2d:28:ab:14:18:3a:46:fc:9c:9c:8a:83:b8:e5:f3:f4:13:91:
60:e0:19:84:f5:c1:c2:8f:e3:1c:cc:fb:0a:21:b5:2b:74:78:
4a:1d:19:a8
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEMeuTfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZTA0NmFlYjZhMDFjYTQ4YTQ5NzUwZDg4MWI3OWY3YTc4ZDUxMDg5MB4XDTIyMDEw
MTEyNTU1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODg4YWYxNDQ5NTRl
OTczZjk5MGQ1NWM2NmZjMTdkNzY5NmQwYWZjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOsGJOA9ztoVru2QAeSjUHE+yxxnmzmIzP2fBYYSGPoRDhoi
AL57DYoolTAp4rEU5iB4miTgzqnIwg4N8VKweJ5q5XYddnmM+gwXqvCQzjO2Dz0Q
oJboDjODx6RxVJ6Azy7VSCcPeo7P0KgAJp2Hr+N0kLkHVesG2wwcnKx9ZbrrPolK
V4e9lnmrRQSaozbbJFFPYBYIUnxc/qs3LPHyhi6Y4S3kPj6Pqn+N4+LaeTCOGYi3
8W2Mbet83P+QDEUJAHZ299/mcdtb+7StH4yhz9FQ+b+W1I9mOn5tai6bLwAqWgGI
tlfGjKV+h9maOMkOSLZqZZJSyVEqfF3UpEBttCkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSIivFElU6XP5kNVcZvwX12ltCvwjAfBgNVHSMEGDAWgBRuBGrragHKSKSX
UNiBt596eNUQiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JnUnE2Mm9CeWtpa2wxRFlnYmVmZW5qVkVJay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2IvODA5ZGEwLWUzOTUtNGY4MC1hYjE3LTNkNGRhOGQxMjgwNi8x
L2lJcnhSSlZPbHotWkRWWEdiOEY5ZHBiUXI4SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Iv
ODA5ZGEwLWUzOTUtNGY4MC1hYjE3LTNkNGRhOGQxMjgwNi8xL2JnUnE2Mm9CeWtp
a2wxRFlnYmVmZW5qVkVJay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAbA1wgMEArA10DANBgkqhkiG9w0B
AQsFAAOCAQEAlT+GVTR216dJs9nlw6c7q9zYp6Oj6gIMeKvm2oyUPtFJOxGwwxf7
1IgtTZEj5Wc+89Oug5Tp/j66OozvxRfmBGe64UIGYZg5XQ70RGlr7teTvcSCDUGj
tPNG22R+kXTd1shBel3gTd69AynGB0AMJ2Qk2kfjJkm9bJ96sn7uUGT87MPjBVBd
nMTzjO6r2utHLTRqhOEHahDawCzJp1pzXwN7Lw97L9SxPfe06RA+o3lUNcfms2xF
8m67dbRD5S/OEaRSH5gDTcaXFaOwjPEmsGW5azPshG5/LSirFBg6RvycnIqDuOXz
9BORYOAZhPXBwo/jHMz7CiG1K3R4Sh0ZqA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:27 2024 by rpki-client on console-ams.rpki-client.org