Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/M9sKgwpeAQ13RlXy_O9oxsUvnjU.roa
File: M9sKgwpeAQ13RlXy_O9oxsUvnjU.roa (raw, json)
Hash identifier: Dj6MwEmSg5bx55lqTQeeuyUA6wsm/sDISXktzEv0ZvM=
Subject key identifier: 33:DB:0A:83:0A:5E:01:0D:77:46:55:F2:FC:EF:68:C6:C5:2F:9E:35
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01855536547394C1CD5906FEC26DB15B203E
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/M9sKgwpeAQ13RlXy_O9oxsUvnjU.roa
Signing time: Tue 27 Dec 2022 20:11:42 +0000
ROA not before: Tue 27 Dec 2022 20:11:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62236
IP address blocks: 178.219.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:36:54:73:94:c1:cd:59:06:fe:c2:6d:b1:5b:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Dec 27 20:11:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33db0a830a5e010d774655f2fcef68c6c52f9e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:84:76:50:e4:e6:40:18:6d:31:0f:43:af:
5c:32:b6:36:3e:4d:ab:af:1f:f9:ee:58:d6:23:9c:
c8:4d:c8:66:99:4c:fc:ee:26:e3:a1:8e:db:b1:a0:
b2:5b:83:68:06:3e:c2:1a:51:1c:0b:38:bf:57:de:
2e:76:a4:47:7a:29:e9:58:d3:7f:4c:16:2a:be:3d:
b1:89:3a:b8:3d:59:c7:29:a4:17:a6:6e:2f:cf:12:
5a:0b:08:96:29:e6:5c:1e:05:d2:54:9b:5d:f8:d7:
2e:21:c8:b3:22:c8:c9:a6:1c:06:6d:c5:04:4b:d3:
18:7c:72:77:45:bd:85:61:e3:f3:4d:a3:c7:e5:3f:
06:9e:bd:3d:c2:2f:75:b6:f6:b6:14:30:29:c2:67:
24:8f:e7:0e:b7:e6:de:b0:ff:55:27:9c:8a:43:fb:
36:1e:fb:0f:a4:d3:63:85:a6:44:7f:cf:2f:ce:21:
f1:ea:bb:cd:fe:e0:05:cf:f3:7b:c3:44:af:8d:17:
40:37:12:6a:e4:26:d7:78:67:55:95:4b:92:a3:7e:
3f:c8:42:81:d3:05:88:ba:a9:f6:d9:55:fb:97:4d:
18:73:49:68:d2:2a:f5:45:26:24:86:46:21:6a:77:
e5:1a:ac:23:85:62:c2:7f:41:15:12:91:5e:6b:79:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:0A:83:0A:5E:01:0D:77:46:55:F2:FC:EF:68:C6:C5:2F:9E:35
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/M9sKgwpeAQ13RlXy_O9oxsUvnjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:bb:75:6d:60:1c:d0:d6:71:6c:51:61:38:ff:5c:d1:04:57:
91:6a:38:f9:44:f7:2a:da:8a:be:cf:ac:00:b0:78:84:31:69:
b1:89:52:d2:9a:af:03:a8:aa:39:d6:88:dc:38:5e:eb:2a:3a:
47:07:4e:65:be:fa:94:fe:2b:f4:ee:2c:07:58:2b:a6:6b:b1:
69:73:7c:66:15:fe:7d:f5:87:f6:a3:67:ef:81:9f:37:f9:69:
91:74:2a:b2:5d:62:1a:1e:e5:b9:d8:dd:ba:2e:52:c3:6b:7c:
be:9f:e0:c3:f3:f1:de:53:11:f0:bb:7e:24:55:58:48:88:6b:
7c:3e:f7:68:03:59:1c:87:29:3b:8e:10:69:69:20:37:36:61:
90:05:30:b7:31:b2:40:d2:3a:cb:f8:f5:90:1b:7d:91:7b:a1:
f0:a3:1e:41:e3:f9:fa:8e:9e:19:d9:09:34:90:69:cb:1a:24:
a5:0c:00:b3:aa:a2:55:9a:0f:65:2e:2f:71:f5:35:0b:02:48:
42:a6:b1:c0:8c:f0:89:37:59:6c:33:4b:ff:b6:e9:e8:03:07:
36:3c:a5:ad:8b:16:09:99:43:72:cf:b5:8e:4a:92:f9:a1:22:
5c:c0:88:db:8c:79:5a:e5:41:66:a7:6f:42:df:66:c8:91:76:
f3:e1:63:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVVNlRzlMHNWQb+wm2xWyA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjIxMjI3MjAxMTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2RiMGE4MzBhNWUwMTBkNzc0NjU1ZjJmY2VmNjhjNmM1MmY5ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod6EdlDk5kAYbTEPQ69cMrY2Pk2r
rx/57ljWI5zITchmmUz87ibjoY7bsaCyW4NoBj7CGlEcCzi/V94udqRHeinpWNN/
TBYqvj2xiTq4PVnHKaQXpm4vzxJaCwiWKeZcHgXSVJtd+NcuIcizIsjJphwGbcUE
S9MYfHJ3Rb2FYePzTaPH5T8Gnr09wi91tva2FDApwmckj+cOt+besP9VJ5yKQ/s2
HvsPpNNjhaZEf88vziHx6rvN/uAFz/N7w0SvjRdANxJq5CbXeGdVlUuSo34/yEKB
0wWIuqn22VX7l00Yc0lo0ir1RSYkhkYhanflGqwjhWLCf0EVEpFea3mc1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPbCoMKXgENd0ZV8vzvaMbFL541MB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvTTlzS2d3cGVBUTEzUmxYeV9POW94c1V2bmpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstubMA0G
CSqGSIb3DQEBCwUAA4IBAQBbu3VtYBzQ1nFsUWE4/1zRBFeRajj5RPcq2oq+z6wA
sHiEMWmxiVLSmq8DqKo51ojcOF7rKjpHB05lvvqU/iv07iwHWCuma7Fpc3xmFf59
9Yf2o2fvgZ83+WmRdCqyXWIaHuW52N26LlLDa3y+n+DD8/HeUxHwu34kVVhIiGt8
PvdoA1kchyk7jhBpaSA3NmGQBTC3MbJA0jrL+PWQG32Re6Hwox5B4/n6jp4Z2Qk0
kGnLGiSlDACzqqJVmg9lLi9x9TULAkhCprHAjPCJN1lsM0v/tunoAwc2PKWtixYJ
mUNyz7WOSpL5oSJcwIjbjHla5UFmp29C32bIkXbz4WOC
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:45:54 2025 by rpki-client