Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/sValTWwLh4mOxmCS1Sv7Y67GBFk.roa
File: sValTWwLh4mOxmCS1Sv7Y67GBFk.roa (raw, json)
Hash identifier: 8YaF2+elKlKhIHwuSAvnaHa9fLLRdvMFQjPTDYPV+oo=
Subject key identifier: B1:56:A5:4D:6C:0B:87:89:8E:C6:60:92:D5:2B:FB:63:AE:C6:04:59
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 06D9C08F
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/sValTWwLh4mOxmCS1Sv7Y67GBFk.roa
Signing time: Thu 03 Feb 2022 08:04:34 +0000
ROA not before: Thu 03 Feb 2022 08:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51409
IP address blocks: 178.255.56.0/24 maxlen: 24
178.255.57.0/24 maxlen: 24
178.255.58.0/24 maxlen: 24
178.255.56.0/21 maxlen: 21
178.255.62.0/24 maxlen: 24
178.255.63.0/24 maxlen: 24
178.255.59.0/24 maxlen: 24
178.255.60.0/24 maxlen: 24
178.255.61.0/24 maxlen: 24
185.41.227.0/24 maxlen: 24
185.41.224.0/24 maxlen: 24
185.41.224.0/22 maxlen: 22
185.41.225.0/24 maxlen: 24
185.41.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114933903 (0x6d9c08f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Feb 3 08:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b156a54d6c0b87898ec66092d52bfb63aec60459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:96:50:c4:bb:35:68:ff:0a:a2:de:f0:1e:
64:a6:87:88:42:51:04:45:10:46:1c:85:62:af:6d:
0e:e5:cd:1e:fd:ae:95:a9:4b:aa:23:79:3c:1a:e3:
67:c8:3e:5e:49:11:26:e6:b0:dc:c2:3b:82:8b:7e:
a4:fa:06:5d:fe:5e:0e:81:71:b4:65:34:c1:75:6a:
86:23:bb:f1:bc:89:8b:12:2c:d5:e7:ac:8e:ce:c5:
e3:e3:b9:23:9a:c4:e2:22:b1:94:78:71:46:8e:28:
4c:36:88:6b:93:2e:db:1a:2c:c5:24:af:02:1e:bd:
db:f5:b4:83:a5:28:70:cc:50:8e:25:f8:00:5d:83:
32:f1:60:03:e0:fa:1d:67:cf:80:fc:73:93:90:e4:
00:ca:d1:33:22:ad:32:a0:13:19:15:83:a1:be:fe:
ac:5d:5b:7e:3b:31:ba:b6:3e:00:36:21:da:63:ee:
72:bc:08:28:b2:16:10:e7:60:cb:29:6a:3b:03:dc:
5b:be:5e:b1:44:f7:97:cf:10:20:78:c8:b7:23:ac:
7b:f1:7c:ea:37:10:90:53:69:92:c0:1d:46:c0:0b:
60:b2:2d:ec:50:fc:49:40:bc:e7:66:fe:13:3a:fa:
a5:90:9e:bf:41:4e:aa:99:fb:20:f7:71:7b:cf:de:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:56:A5:4D:6C:0B:87:89:8E:C6:60:92:D5:2B:FB:63:AE:C6:04:59
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/sValTWwLh4mOxmCS1Sv7Y67GBFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.56.0/21
185.41.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:fe:80:e9:f7:e7:3e:73:86:d5:95:9c:87:ce:1b:c2:d6:9c:
b3:bb:30:ad:45:8a:12:fc:ef:53:cb:17:2c:dd:ae:e0:0a:14:
bf:a1:8d:bb:ee:77:b0:5f:e0:4f:18:f1:87:79:70:bc:fb:71:
57:50:bc:5c:f2:ab:e6:d9:60:a4:53:fc:31:9a:90:89:59:44:
b2:6f:a8:1b:b9:6b:90:15:60:9b:a3:f2:55:f3:2a:ad:f5:7e:
4b:10:9e:09:02:7c:80:52:68:1c:f6:95:7b:53:1e:22:a1:04:
5a:0c:65:10:fe:b1:f0:8d:2a:a4:7e:d2:08:60:01:44:b0:59:
ac:c1:0b:39:c9:0c:5e:4d:86:89:06:a8:6c:e9:40:cf:7d:20:
10:3d:8d:e8:fe:6d:4d:57:f3:63:b6:19:49:12:53:4b:7a:f3:
5b:7a:b5:1d:16:31:00:d7:d8:18:42:2e:1e:15:a3:42:9d:84:
38:aa:8e:64:da:9f:f0:d9:7a:79:91:6d:3f:49:9c:6d:0f:13:
c6:f4:32:c9:7d:91:e2:d5:3a:e9:8c:da:fd:b8:47:56:70:47:
22:7f:bf:4c:a6:80:a7:56:e0:27:d7:9c:ef:2d:6e:8c:65:fc:
e8:ab:6f:e6:71:3b:1b:95:c7:ca:f3:34:19:34:d5:fc:c8:ea:
dd:fc:8b:53
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBtnAjzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NDY1Nzk1NjFlY2E1ODc5YTc0NzAyNWU1Nzk4NDg3YjE5Y2QyYTk3MB4XDTIyMDIw
MzA4MDQzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjE1NmE1NGQ2YzBi
ODc4OThlYzY2MDkyZDUyYmZiNjNhZWM2MDQ1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhollDEuzVo/wqi3vAeZKaHiEJRBEUQRhyFYq9tDuXNHv2u
lalLqiN5PBrjZ8g+XkkRJuaw3MI7got+pPoGXf5eDoFxtGU0wXVqhiO78byJixIs
1eesjs7F4+O5I5rE4iKxlHhxRo4oTDaIa5Mu2xosxSSvAh692/W0g6UocMxQjiX4
AF2DMvFgA+D6HWfPgPxzk5DkAMrRMyKtMqATGRWDob7+rF1bfjsxurY+ADYh2mPu
crwIKLIWEOdgyylqOwPcW75esUT3l88QIHjItyOse/F86jcQkFNpksAdRsALYLIt
7FD8SUC852b+Ezr6pZCev0FOqpn7IPdxe8/e6IsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSxVqVNbAuHiY7GYJLVK/tjrsYEWTAfBgNVHSMEGDAWgBRkZXlWHspYeadH
Al5XmEh7Gc0qlzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pHVjVWaDdLV0htblJ3SmVWNWhJZXhuTktwYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGYvNjA0MzQ2LWM5N2MtNDA5Ny04OTk3LTU1YzNkMTI5ZWMyOC8x
L3NWYWxUV3dMaDRtT3htQ1MxU3Y3WTY3R0JGay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYv
NjA0MzQ2LWM5N2MtNDA5Ny04OTk3LTU1YzNkMTI5ZWMyOC8xL1pHVjVWaDdLV0ht
blJ3SmVWNWhJZXhuTktwYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA7L/OAMEArkp4DANBgkqhkiG9w0B
AQsFAAOCAQEADP6A6ffnPnOG1ZWch84bwtacs7swrUWKEvzvU8sXLN2u4AoUv6GN
u+53sF/gTxjxh3lwvPtxV1C8XPKr5tlgpFP8MZqQiVlEsm+oG7lrkBVgm6PyVfMq
rfV+SxCeCQJ8gFJoHPaVe1MeIqEEWgxlEP6x8I0qpH7SCGABRLBZrMELOckMXk2G
iQaobOlAz30gED2N6P5tTVfzY7YZSRJTS3rzW3q1HRYxANfYGEIuHhWjQp2EOKqO
ZNqf8Nl6eZFtP0mcbQ8TxvQyyX2R4tU66Yza/bhHVnBHIn+/TKaAp1bgJ9ec7y1u
jGX86Ktv5nE7G5XHyvM0GTTV/Mjq3fyLUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:02 2024 by rpki-client on console-fra.rpki-client.org