Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/bHbKgoWHeQ6eYluvjTvQ05uuxEk.roa
File: bHbKgoWHeQ6eYluvjTvQ05uuxEk.roa (raw, json)
Hash identifier: sJWtxQc57EdDfyaxY1i+JejQms5qm19E3haQrPT+rG0=
Subject key identifier: 6C:76:CA:82:85:87:79:0E:9E:62:5B:AF:8D:3B:D0:D3:9B:AE:C4:49
Certificate issuer: /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial: 08CC513D
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/bHbKgoWHeQ6eYluvjTvQ05uuxEk.roa
Signing time: Sat 01 Jan 2022 07:01:13 +0000
ROA not before: Sat 01 Jan 2022 07:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212003
IP address blocks: 176.126.158.0/24 maxlen: 24
176.126.158.0/23 maxlen: 23
176.126.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147607869 (0x8cc513d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Validity
Not Before: Jan 1 07:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c76ca828587790e9e625baf8d3bd0d39baec449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:4a:08:61:58:65:7c:e4:5c:44:93:44:3f:
e3:99:3a:c8:71:9c:41:0b:3d:e9:88:d7:0f:1a:da:
a4:6e:b7:53:d0:9a:67:fb:67:78:3f:f1:65:1e:23:
1c:7a:8e:84:b9:0a:6c:2a:78:51:c9:97:18:66:fb:
08:e2:49:d2:61:e3:ab:dc:57:bd:a1:90:e9:92:00:
a0:e9:4f:61:5b:85:08:c5:c4:5d:8c:c8:ca:2a:ee:
36:c2:eb:b6:7e:86:7f:33:27:f7:80:39:d2:81:6f:
93:f0:98:15:d6:e9:ed:9b:05:4b:0a:a1:b1:d2:e3:
4c:3c:29:42:58:33:73:8d:96:08:2a:ef:df:a2:1e:
a6:c5:e6:cd:35:c5:9c:6f:19:aa:bb:65:5f:57:d3:
2a:c1:2d:42:d1:ab:d6:7a:c2:46:a0:65:4c:29:f3:
5a:1f:b2:eb:26:ce:08:89:43:7e:c1:c5:16:63:3e:
e6:12:9a:4c:26:8a:b9:6d:3a:2e:ff:25:33:5c:3e:
63:a2:3c:cd:ee:6e:0e:11:83:a3:19:24:c6:d2:6e:
40:45:2c:f2:67:03:3e:ef:bd:27:65:30:c7:ae:f4:
7c:73:63:57:fa:22:21:a6:c4:38:ea:5a:13:63:43:
86:36:d6:99:c8:c4:87:cf:3b:42:f0:0b:3f:2d:d0:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:CA:82:85:87:79:0E:9E:62:5B:AF:8D:3B:D0:D3:9B:AE:C4:49
X509v3 Authority Key Identifier:
keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/bHbKgoWHeQ6eYluvjTvQ05uuxEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
53:e2:18:b4:97:9b:e8:3e:cf:e1:87:0c:2a:95:fa:0e:08:7f:
45:4d:34:03:ea:7d:56:cf:73:cf:88:10:c4:02:7a:3a:4e:15:
69:c9:9f:d8:5e:7d:ef:ed:b6:de:c9:46:d3:f3:e0:21:13:20:
e7:9b:7f:b1:e0:41:9a:8c:65:f5:8e:1e:29:4f:c3:c7:90:c0:
ea:50:7f:33:a7:5d:de:3a:47:0d:3e:55:2f:6b:5b:7d:0b:6b:
73:9c:b4:e9:cc:2a:be:3d:65:73:5e:84:8b:3d:7b:79:dd:02:
ed:4c:6c:3c:d3:fe:04:ad:54:71:e4:aa:eb:a7:ed:c7:3a:33:
18:d5:8d:89:5b:d8:dd:a6:43:c7:53:e5:82:31:84:ac:c5:3b:
6d:64:7f:53:a2:c9:e7:7b:bc:3f:57:35:8e:1e:0d:4e:4c:14:
28:aa:92:72:c4:80:76:45:2f:50:cb:a9:a8:34:bf:29:df:91:
2b:a0:0d:b3:eb:36:63:87:54:81:cf:7d:8d:b3:3c:d9:42:f8:
18:d1:df:5d:3b:c3:75:9a:dc:4f:25:df:16:e1:5d:6a:25:cb:
a7:83:c8:48:fa:9a:0c:5c:c6:ab:5d:33:68:c3:82:5a:79:2e:
c3:33:64:77:44:c9:9a:ee:96:7f:91:25:ab:ff:9a:cd:53:a1:
3c:30:fa:af
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECMxRPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Zjk4ZDFmOTllMzgzM2VmNDAxZDQ2MzQ4ZWVjOGI3NTIwODhjNTVkMB4XDTIyMDEw
MTA3MDExM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmM3NmNhODI4NTg3
NzkwZTllNjI1YmFmOGQzYmQwZDM5YmFlYzQ0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMWwSghhWGV85FxEk0Q/45k6yHGcQQs96YjXDxrapG63U9Ca
Z/tneD/xZR4jHHqOhLkKbCp4UcmXGGb7COJJ0mHjq9xXvaGQ6ZIAoOlPYVuFCMXE
XYzIyiruNsLrtn6GfzMn94A50oFvk/CYFdbp7ZsFSwqhsdLjTDwpQlgzc42WCCrv
36IepsXmzTXFnG8ZqrtlX1fTKsEtQtGr1nrCRqBlTCnzWh+y6ybOCIlDfsHFFmM+
5hKaTCaKuW06Lv8lM1w+Y6I8ze5uDhGDoxkkxtJuQEUs8mcDPu+9J2Uwx670fHNj
V/oiIabEOOpaE2NDhjbWmcjEh887QvALPy3Q4oUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRsdsqChYd5Dp5iW6+NO9DTm67ESTAfBgNVHSMEGDAWgBRvmNH5njgz70Ad
RjSO7It1IIjFXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I1alItWjQ0TS05QUhVWTBqdXlMZFNDSXhWMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvM2MwOGYxLTk2ZTAtNGM1NC1hNDY2LTA3ZDRiMTE1Y2M4Mi8x
L2JIYktnb1dIZVE2ZVlsdXZqVHZRMDV1dXhFay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
M2MwOGYxLTk2ZTAtNGM1NC1hNDY2LTA3ZDRiMTE1Y2M4Mi8xL2I1alItWjQ0TS05
QUhVWTBqdXlMZFNDSXhWMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbB+njANBgkqhkiG9w0BAQsFAAOC
AQEAU+IYtJeb6D7P4YcMKpX6Dgh/RU00A+p9Vs9zz4gQxAJ6Ok4Vacmf2F597+22
3slG0/PgIRMg55t/seBBmoxl9Y4eKU/Dx5DA6lB/M6dd3jpHDT5VL2tbfQtrc5y0
6cwqvj1lc16Eiz17ed0C7UxsPNP+BK1UceSq66ftxzozGNWNiVvY3aZDx1PlgjGE
rMU7bWR/U6LJ53u8P1c1jh4NTkwUKKqScsSAdkUvUMupqDS/Kd+RK6ANs+s2Y4dU
gc99jbM82UL4GNHfXTvDdZrcTyXfFuFdaiXLp4PISPqaDFzGq10zaMOCWnkuwzNk
d0TJmu6Wf5Elq/+azVOhPDD6rw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:24 2024 by rpki-client on console-ams.rpki-client.org