Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/8d4IEcyo7YqRsYXdK3Z15qG6y6c.roa
File: 8d4IEcyo7YqRsYXdK3Z15qG6y6c.roa (raw, json)
Hash identifier: amBCzFHuKOlbMNuRJymCUCMZGYwP3tPLBcXW56zw/9w=
Subject key identifier: F1:DE:08:11:CC:A8:ED:8A:91:B1:85:DD:2B:76:75:E6:A1:BA:CB:A7
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 0183A46859D3CCA3E5D76AD17B35D2B13913
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/8d4IEcyo7YqRsYXdK3Z15qG6y6c.roa
Signing time: Tue 04 Oct 2022 19:10:45 +0000
ROA not before: Tue 04 Oct 2022 19:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 188.214.234.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:68:59:d3:cc:a3:e5:d7:6a:d1:7b:35:d2:b1:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Oct 4 19:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1de0811cca8ed8a91b185dd2b7675e6a1bacba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:77:27:87:7a:c7:6b:2a:7e:7a:4e:4a:d1:c6:
a8:9c:f4:c1:8a:96:75:e7:d5:7b:8a:37:00:63:d4:
fd:b2:f3:94:b6:64:c3:30:ef:63:9c:00:78:17:f9:
5a:a5:97:2e:d5:cf:df:1f:4b:de:cd:35:f3:ee:3c:
64:b6:23:1f:09:e0:78:55:02:f6:e7:37:ca:82:6b:
89:3d:cf:eb:04:5d:9f:a8:03:b3:74:8f:6b:b8:b9:
c5:ae:ac:12:42:4b:1a:59:e1:d2:66:eb:e4:04:25:
0c:dc:ec:74:e8:38:72:db:b7:3e:f4:e5:73:05:3d:
23:e1:8a:ee:0e:2d:be:24:04:f2:7a:8d:c5:0b:7d:
e3:7d:94:0b:69:a2:a8:64:9c:e5:b5:dd:1e:8f:52:
19:e2:ba:1c:0e:e3:59:26:ea:4b:72:da:7f:7b:5b:
10:f8:19:2e:47:98:12:9f:78:8b:82:79:b7:9f:5e:
e7:67:54:11:03:8c:3a:29:9d:cf:40:cf:03:ed:80:
cb:10:d9:71:62:23:b4:79:53:bc:89:a5:b4:6c:8c:
90:06:38:e5:18:94:d8:2f:d1:91:f7:64:f4:f0:76:
f1:55:5f:df:f4:58:1d:e5:ac:22:80:fd:4e:2f:d1:
bd:8a:a2:0f:62:66:0f:d5:26:fd:a8:26:c8:54:c5:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:08:11:CC:A8:ED:8A:91:B1:85:DD:2B:76:75:E6:A1:BA:CB:A7
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/8d4IEcyo7YqRsYXdK3Z15qG6y6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.234.0/23
Signature Algorithm: sha256WithRSAEncryption
33:97:fe:73:9e:33:5c:7e:f9:24:ba:cb:76:85:1e:d6:d2:85:
54:8e:44:c3:48:f7:2d:fb:12:1a:58:eb:4b:7e:11:18:a7:87:
dc:c3:a6:ba:2f:b1:4b:cc:dc:89:f0:17:91:34:a6:fd:fd:2e:
cb:55:b3:5f:f1:69:fb:b1:8d:94:d0:70:c4:cd:9b:90:63:ae:
f7:a6:da:3d:41:d3:bd:8a:d5:0a:3f:34:21:68:7d:d5:29:9a:
96:89:01:5c:09:f9:8d:62:16:e0:39:8c:5a:70:a6:a6:9b:a0:
24:81:21:11:1f:74:b3:33:7e:23:74:86:66:0b:79:a0:aa:c0:
e6:d4:95:e1:5f:88:c2:19:6d:51:47:65:06:2b:78:88:50:ef:
b4:c9:99:8b:84:89:7d:7d:09:38:23:38:fd:a5:b1:aa:73:ee:
a2:b4:b2:40:28:4a:cb:19:64:1e:fe:84:8a:ae:80:5e:93:be:
a6:8f:75:b3:39:61:9e:00:e4:83:39:0c:81:57:a2:26:9e:32:
2a:3d:57:04:d8:f4:81:16:bb:bc:6e:2d:25:33:cf:0d:e4:13:
77:1b:2f:ad:3e:65:5c:72:b8:44:1e:e0:fe:3b:07:cd:7a:9a:
1a:a8:15:c9:57:4d:bc:53:c8:14:d8:4e:81:9f:5f:6e:bd:f7:
f3:4b:13:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOkaFnTzKPl12rRezXSsTkTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjIxMDA0MTkxMDQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWRlMDgxMWNjYThlZDhhOTFiMTg1ZGQyYjc2NzVlNmExYmFjYmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3cnh3rHayp+ek5K0caonPTBipZ1
59V7ijcAY9T9svOUtmTDMO9jnAB4F/lapZcu1c/fH0vezTXz7jxktiMfCeB4VQL2
5zfKgmuJPc/rBF2fqAOzdI9ruLnFrqwSQksaWeHSZuvkBCUM3Ox06Dhy27c+9OVz
BT0j4YruDi2+JATyeo3FC33jfZQLaaKoZJzltd0ej1IZ4rocDuNZJupLctp/e1sQ
+BkuR5gSn3iLgnm3n17nZ1QRA4w6KZ3PQM8D7YDLENlxYiO0eVO8iaW0bIyQBjjl
GJTYL9GR92T08HbxVV/f9Fgd5awigP1OL9G9iqIPYmYP1Sb9qCbIVMVMTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPHeCBHMqO2KkbGF3St2deahusunMB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvOGQ0SUVjeW83WXFSc1lYZEszWjE1cUc2eTZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvNbqMA0G
CSqGSIb3DQEBCwUAA4IBAQAzl/5znjNcfvkkust2hR7W0oVUjkTDSPct+xIaWOtL
fhEYp4fcw6a6L7FLzNyJ8BeRNKb9/S7LVbNf8Wn7sY2U0HDEzZuQY673pto9QdO9
itUKPzQhaH3VKZqWiQFcCfmNYhbgOYxacKamm6AkgSERH3SzM34jdIZmC3mgqsDm
1JXhX4jCGW1RR2UGK3iIUO+0yZmLhIl9fQk4Izj9pbGqc+6itLJAKErLGWQe/oSK
roBek76mj3WzOWGeAOSDOQyBV6ImnjIqPVcE2PSBFru8bi0lM88N5BN3Gy+tPmVc
crhEHuD+OwfNepoaqBXJV028U8gU2E6Bn19uvffzSxN3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org