Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lruicJNGJtzxjPPHJQ5gHCAdoJk.roa
File: lruicJNGJtzxjPPHJQ5gHCAdoJk.roa (raw, json)
Hash identifier: 4E4QaHw5hiAjeaBUMcurY2DOw5ox5zrQVd1uvg3LEU4=
Subject key identifier: 96:BB:A2:70:93:46:26:DC:F1:8C:F3:C7:25:0E:60:1C:20:1D:A0:99
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 03E0E03E
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lruicJNGJtzxjPPHJQ5gHCAdoJk.roa
Signing time: Mon 06 Jun 2022 08:49:20 +0000
ROA not before: Mon 06 Jun 2022 08:49:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 188.64.8.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65069118 (0x3e0e03e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jun 6 08:49:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96bba270934626dcf18cf3c7250e601c201da099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:4f:7c:d0:6c:85:69:5a:a7:c8:87:2a:ea:
be:be:b3:70:bb:84:de:78:11:d3:d1:33:24:8e:d5:
10:c9:1a:50:ba:bf:75:7c:8d:f9:ae:12:5e:f2:d4:
f3:2f:4b:b8:3b:84:9b:11:6d:cf:80:68:a2:b1:87:
33:fd:06:be:b8:b3:67:de:30:77:37:ef:d2:36:4a:
ae:22:17:9f:2f:d8:e2:1b:6c:ca:72:34:93:24:1a:
d4:0f:d1:fe:1f:18:d4:70:fa:53:e4:8b:84:bb:9c:
ea:f4:fe:d0:cf:49:7e:fd:b2:a0:33:a9:71:ee:99:
b6:35:df:36:71:63:20:2b:34:77:e5:27:75:31:ff:
1c:17:f9:cb:17:ef:2e:45:f3:86:21:fc:14:15:99:
50:ed:f3:a0:15:14:ff:f1:c0:08:a3:45:54:a0:5f:
60:46:f4:4b:cb:5f:b6:b3:a1:a8:a5:5f:50:3c:66:
b1:8b:77:16:f5:5f:34:e5:57:c8:d1:0e:7c:c4:20:
d9:79:a2:45:cf:a5:f0:00:08:68:78:bd:c0:33:b3:
90:71:15:ae:1f:4b:dc:97:3b:34:14:55:78:3f:23:
c8:08:36:26:8a:b6:10:f3:fb:f6:72:40:34:ad:e9:
9f:0d:33:ba:32:d8:38:f8:91:62:99:7c:ea:02:bb:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:A2:70:93:46:26:DC:F1:8C:F3:C7:25:0E:60:1C:20:1D:A0:99
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lruicJNGJtzxjPPHJQ5gHCAdoJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:a2:ea:6f:7c:d8:74:5f:55:aa:ba:f8:ec:30:7c:87:e3:ac:
6f:33:3e:f0:76:9b:fd:9e:a6:c7:24:88:9c:71:49:2c:21:bc:
57:ec:27:37:1a:9b:45:56:fd:92:c7:5d:9c:fd:dc:ad:aa:ed:
1b:64:52:90:a5:7d:e3:84:a1:49:25:87:38:d4:f5:90:5f:e7:
3a:23:58:ae:1a:c2:72:2e:da:3a:e4:d4:ba:cd:cd:c0:90:b4:
c2:27:5d:b8:8a:10:43:69:61:2c:2f:f3:7a:98:ae:23:7a:20:
ee:f7:df:6d:e8:81:dd:2f:30:e7:63:1a:af:0f:fd:57:20:54:
df:fd:6c:33:5e:fc:9f:a5:65:bd:19:13:32:5e:b6:61:8d:08:
7e:ce:6b:96:f9:64:e4:1f:41:fa:65:4e:d2:7e:a3:3e:1a:9a:
5c:f7:02:e7:f9:27:a9:7d:29:1b:fe:26:dc:60:e1:53:eb:0a:
a8:28:03:7f:b2:a2:06:23:0e:3f:c2:c5:7e:50:a2:84:dc:99:
68:04:b1:67:29:23:e0:e3:30:1a:f4:0e:e8:99:3e:a3:84:6f:
0e:7f:37:d9:62:d7:80:17:bc:bf:bc:6c:a5:0c:46:15:65:6c:
ee:57:3b:fe:13:df:f8:32:62:cf:ea:d0:d1:1b:81:ff:59:41:
4c:42:e6:77
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+DgPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDA2YTQyYmIyNDQ2ZTUxZjE5MmVhMzc1YmRmN2VlYzVhNTFjNzdmMB4XDTIyMDYw
NjA4NDkyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTZiYmEyNzA5MzQ2
MjZkY2YxOGNmM2M3MjUwZTYwMWMyMDFkYTA5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANHNT3zQbIVpWqfIhyrqvr6zcLuE3ngR09EzJI7VEMkaULq/
dXyN+a4SXvLU8y9LuDuEmxFtz4BoorGHM/0GvrizZ94wdzfv0jZKriIXny/Y4hts
ynI0kyQa1A/R/h8Y1HD6U+SLhLuc6vT+0M9Jfv2yoDOpce6ZtjXfNnFjICs0d+Un
dTH/HBf5yxfvLkXzhiH8FBWZUO3zoBUU//HACKNFVKBfYEb0S8tftrOhqKVfUDxm
sYt3FvVfNOVXyNEOfMQg2XmiRc+l8AAIaHi9wDOzkHEVrh9L3Jc7NBRVeD8jyAg2
Joq2EPP79nJANK3pnw0zujLYOPiRYpl86gK7dncCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSWu6Jwk0Ym3PGM88clDmAcIB2gmTAfBgNVHSMEGDAWgBR9BqQrskRuUfGS
6jdb337sWlHHfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRYWtLN0pFYmxIeGt1bzNXOTktN0ZwUngzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvNzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8x
L2xydWljSk5HSnR6eGpQUEhKUTVnSENBZG9Kay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
NzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8xL2ZRYWtLN0pFYmxI
eGt1bzNXOTktN0ZwUngzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArxACDANBgkqhkiG9w0BAQsFAAOC
AQEAfKLqb3zYdF9Vqrr47DB8h+OsbzM+8Hab/Z6mxySInHFJLCG8V+wnNxqbRVb9
ksddnP3crartG2RSkKV944ShSSWHONT1kF/nOiNYrhrCci7aOuTUus3NwJC0widd
uIoQQ2lhLC/zepiuI3og7vffbeiB3S8w52Marw/9VyBU3/1sM178n6VlvRkTMl62
YY0Ifs5rlvlk5B9B+mVO0n6jPhqaXPcC5/knqX0pG/4m3GDhU+sKqCgDf7KiBiMO
P8LFflCihNyZaASxZykj4OMwGvQO6Jk+o4RvDn832WLXgBe8v7xspQxGFWVs7lc7
/hPf+DJiz+rQ0RuB/1lBTELmdw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org