Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/tb9zpGLCpSpzRQW0K8CXZihp0Ik.roa
File: tb9zpGLCpSpzRQW0K8CXZihp0Ik.roa (raw, json)
Hash identifier: pnPY7pgg2hzavwISg6c0g6vbIrYNhsjXAYH+uzR3e7U=
Subject key identifier: B5:BF:73:A4:62:C2:A5:2A:73:45:05:B4:2B:C0:97:66:28:69:D0:89
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 0183C745B13BBE050796FD99D73703D4ABE8
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/tb9zpGLCpSpzRQW0K8CXZihp0Ik.roa
Signing time: Tue 11 Oct 2022 13:39:36 +0000
ROA not before: Tue 11 Oct 2022 13:39:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62229
IP address blocks: 178.22.78.0/24 maxlen: 24
178.22.77.0/24 maxlen: 24
178.22.79.0/24 maxlen: 24
45.157.245.0/24 maxlen: 24
45.157.244.0/24 maxlen: 24
45.157.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:45:b1:3b:be:05:07:96:fd:99:d7:37:03:d4:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Oct 11 13:39:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5bf73a462c2a52a734505b42bc097662869d089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:c1:11:0f:62:bb:86:88:b6:03:23:5e:ed:
3b:b0:96:54:d5:57:da:fe:d7:03:f3:55:b2:8b:8d:
d5:99:e3:60:40:92:f3:70:d5:15:95:21:2f:97:b7:
bf:e8:18:a2:3e:e6:81:fa:8d:39:49:e3:1e:07:69:
2f:33:7a:fb:aa:57:2b:09:a8:8a:86:11:c0:e5:07:
cc:fa:05:3d:4f:38:ba:63:4b:de:6b:6e:99:c4:09:
f7:2e:85:a6:32:d2:9c:f9:f1:d3:83:54:a6:35:1d:
c0:28:b0:5f:0c:e6:48:83:2d:b7:2d:5c:aa:e3:69:
b1:31:3a:77:5c:cb:b8:0e:f1:13:b7:06:bb:8e:61:
0c:1a:6f:b9:b6:95:c7:9d:ba:d8:44:77:4f:2e:5b:
e0:20:50:87:f7:bb:df:79:70:f7:0d:b6:07:87:82:
33:1b:20:27:16:13:3f:0e:59:73:b5:50:3f:c7:53:
ed:8b:68:f0:b2:20:7a:a7:6d:0a:7f:a7:e2:a8:01:
1c:39:96:8e:c3:cf:af:49:b3:18:0b:5f:16:8b:18:
ca:9e:46:c0:51:10:51:ee:37:3d:2c:d4:c1:08:56:
7b:f7:9c:79:1a:c4:d8:57:c0:6d:4d:06:e4:5c:fd:
78:b8:c3:d5:af:d6:9a:2f:f1:84:72:88:3f:99:d5:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:73:A4:62:C2:A5:2A:73:45:05:B4:2B:C0:97:66:28:69:D0:89
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/tb9zpGLCpSpzRQW0K8CXZihp0Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.244.0-45.157.246.255
178.22.77.0-178.22.79.255
Signature Algorithm: sha256WithRSAEncryption
76:87:59:98:69:bc:99:3b:45:ae:18:9c:8c:39:0a:50:fe:87:
0d:e5:ff:14:66:1f:c8:f7:df:7a:4b:1c:dc:63:33:0d:99:c9:
4f:df:5a:32:bd:a6:4b:fc:14:06:67:c4:97:a2:f9:e5:cb:8d:
70:d6:5a:2d:9a:dd:e9:3c:83:a3:33:84:11:3b:b8:8d:33:d8:
f8:0d:0a:7d:2f:ac:88:7d:30:40:95:0c:b2:da:ce:82:b1:47:
72:fd:69:0c:e4:b7:aa:22:03:f4:85:85:f5:20:b1:df:4e:f3:
ef:38:a2:89:2a:94:04:fd:c4:b6:a5:67:25:2c:08:91:0b:8c:
01:84:28:9d:32:88:74:89:10:b8:7a:e1:b9:44:01:78:b3:68:
67:f0:b9:2b:91:c6:31:27:5e:97:b3:73:c0:29:ad:39:01:32:
7b:be:00:21:9e:56:65:a1:cf:3c:81:99:06:44:7a:7f:d1:82:
44:9d:69:e5:54:e3:2c:b7:20:e6:26:d6:69:14:69:3a:c0:74:
95:d0:17:d5:c2:2a:c4:c0:79:9a:11:61:b9:38:a7:29:d8:34:
4a:05:77:1a:9d:19:5f:31:e0:67:14:b8:7e:82:24:e5:2c:16:
39:50:d1:f9:4c:cd:bf:ae:12:70:f5:9f:7c:d2:cc:47:20:9b:
7c:7e:eb:23
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYPHRbE7vgUHlv2Z1zcD1KvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2Q5MGFiY2RkZTBiYzZmMGJjYWFmMjFjZWMzYTRmMmFj
ZmFlNGYwHhcNMjIxMDExMTMzOTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWJmNzNhNDYyYzJhNTJhNzM0NTA1YjQyYmMwOTc2NjI4NjlkMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD/BEQ9iu4aItgMjXu07sJZU1Vfa
/tcD81Wyi43VmeNgQJLzcNUVlSEvl7e/6BiiPuaB+o05SeMeB2kvM3r7qlcrCaiK
hhHA5QfM+gU9Tzi6Y0vea26ZxAn3LoWmMtKc+fHTg1SmNR3AKLBfDOZIgy23LVyq
42mxMTp3XMu4DvETtwa7jmEMGm+5tpXHnbrYRHdPLlvgIFCH97vfeXD3DbYHh4Iz
GyAnFhM/DllztVA/x1Pti2jwsiB6p20Kf6fiqAEcOZaOw8+vSbMYC18WixjKnkbA
URBR7jc9LNTBCFZ795x5GsTYV8BtTQbkXP14uMPVr9aaL/GEcog/mdVgiQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFLW/c6RiwqUqc0UFtCvAl2YoadCJMB8GA1UdIwQY
MBaAFI99kKvN3gvG8Lyq8hzsOk8qz65PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajMyUXE4M2VDOGJ3dktyeUhPdzZUeXJQcms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zMGIwYmItODk4Yy00Mjg5LTkxMjQt
MzdlMzJlYWE3NjY3LzEvdGI5enBHTENwU3B6UlFXMEs4Q1haaWhwMElrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zMGIwYmItODk4Yy00Mjg5LTkxMjQtMzdlMzJlYWE3NjY3
LzEvajMyUXE4M2VDOGJ3dktyeUhPdzZUeXJQcms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAItnfQD
BAAtnfYwDAMEALIWTQMEBLIWQDANBgkqhkiG9w0BAQsFAAOCAQEAdodZmGm8mTtF
rhicjDkKUP6HDeX/FGYfyPffeksc3GMzDZnJT99aMr2mS/wUBmfEl6L55cuNcNZa
LZrd6TyDozOEETu4jTPY+A0KfS+siH0wQJUMstrOgrFHcv1pDOS3qiID9IWF9SCx
307z7ziiiSqUBP3EtqVnJSwIkQuMAYQonTKIdIkQuHrhuUQBeLNoZ/C5K5HGMSde
l7NzwCmtOQEye74AIZ5WZaHPPIGZBkR6f9GCRJ1p5VTjLLcg5ibWaRRpOsB0ldAX
1cIqxMB5mhFhuTinKdg0SgV3Gp0ZXzHgZxS4foIk5SwWOVDR+UzNv64ScPWffNLM
RyCbfH7rIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:00 2024 by rpki-client on console-ams.rpki-client.org