Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/b8hhAZ_5eNghdwMSwYY_5ie82-M.roa
File: b8hhAZ_5eNghdwMSwYY_5ie82-M.roa (raw, json)
Hash identifier: QS4uJ9kwOpFBvrQLzOKWUZsKIhXbE5eeOf9BHmL6mg8=
Subject key identifier: 6F:C8:61:01:9F:F9:78:D8:21:77:03:12:C1:86:3F:E6:27:BC:DB:E3
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 4299F2C0
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/b8hhAZ_5eNghdwMSwYY_5ie82-M.roa
Signing time: Sat 01 Jan 2022 06:04:57 +0000
ROA not before: Sat 01 Jan 2022 06:04:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21479
IP address blocks: 93.178.96.0/22 maxlen: 22
93.178.104.0/22 maxlen: 22
93.178.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117385408 (0x4299f2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:04:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fc861019ff978d821770312c1863fe627bcdbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:6f:a7:f8:c5:42:a5:71:63:44:a8:e4:a7:
62:24:ae:b5:90:0f:21:35:6c:a8:81:0e:0b:66:03:
79:7c:fc:68:35:6a:4d:97:0c:ba:bd:77:60:ad:bc:
56:29:e8:de:ad:ea:6d:0f:fb:ee:6e:26:34:3d:3e:
9a:89:0e:df:9e:3b:ce:f2:5e:01:cb:93:4c:d9:6c:
71:b4:31:3c:5c:ad:a3:fc:0e:8c:73:ed:b8:c3:eb:
03:4a:9d:ec:52:4b:70:c0:77:78:50:0f:ed:8b:aa:
22:12:e6:ef:26:32:23:36:c9:b9:06:a1:ab:36:7f:
30:5c:64:e2:8f:17:0c:a6:fe:b6:ce:d0:00:91:8a:
49:6b:05:b6:f2:bd:60:ec:18:31:0a:be:14:44:1c:
b2:7a:9c:21:a2:24:17:47:49:fd:5b:cc:05:91:b9:
6f:92:b6:22:80:61:5b:67:55:dc:03:74:e2:31:e3:
77:71:6b:9a:11:46:9a:16:27:78:4b:3c:cb:30:5d:
29:d7:91:9c:17:ce:7a:00:00:ac:44:66:ee:b1:41:
7d:eb:15:49:6f:6b:ab:a3:0c:c9:8f:3c:74:6e:dc:
9d:18:c5:07:b1:84:66:0d:14:5d:f1:75:e0:db:e4:
9b:16:93:c5:72:99:a8:f8:93:4e:c9:2d:7c:54:24:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C8:61:01:9F:F9:78:D8:21:77:03:12:C1:86:3F:E6:27:BC:DB:E3
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/b8hhAZ_5eNghdwMSwYY_5ie82-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.178.96.0/22
93.178.104.0/22
93.178.126.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:5a:c5:b2:46:e9:b2:27:6c:ac:7e:b9:70:90:a5:a5:42:ed:
1c:e8:1b:fa:fa:cd:35:cf:e0:71:fe:19:f3:7f:d6:15:c3:ec:
e5:33:88:4a:dc:d1:c7:ca:36:9f:4d:54:e4:e2:e0:e2:6e:53:
ad:74:82:dc:a9:53:cf:13:04:03:1c:52:b2:a8:e9:76:ba:2f:
9d:c4:8d:92:a1:b7:a0:b9:db:7b:77:ee:11:75:7a:54:e8:1b:
75:9a:b0:f9:89:e7:7e:f7:e2:41:6d:3e:11:a6:c8:10:f7:16:
8a:a1:4a:f7:1e:c1:32:1b:ff:35:0a:53:04:0b:10:44:56:6a:
db:3b:17:a6:8c:b6:85:cf:26:bc:fb:a4:2f:85:9b:c9:c2:c4:
4e:0d:1a:ff:37:3a:69:cb:c6:56:6d:ac:9e:72:77:4b:96:5e:
53:59:a6:f0:1b:4d:bd:74:2c:68:7e:4f:f9:6f:e2:90:af:64:
8a:c2:b0:68:89:f2:ce:8b:4c:12:25:22:91:8c:11:86:b9:27:
8c:bf:24:45:63:ee:12:11:51:b0:58:c7:f2:5c:7b:f8:45:d0:
0e:8e:de:76:e0:5f:db:78:67:30:35:e0:f6:c0:6c:34:2d:73:
81:db:95:9a:37:65:fe:3c:a1:a5:1c:9c:0c:b8:3c:31:cf:91:
0d:8f:e4:17
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEQpnywDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZWU1MzFiOWFjMjk5MGQ2OWE4YTVjMzAyM2U3MmU2ZDg0MWU2YzA5MB4XDTIyMDEw
MTA2MDQ1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmZjODYxMDE5ZmY5
NzhkODIxNzcwMzEyYzE4NjNmZTYyN2JjZGJlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANKLb6f4xUKlcWNEqOSnYiSutZAPITVsqIEOC2YDeXz8aDVq
TZcMur13YK28Vino3q3qbQ/77m4mND0+mokO3547zvJeAcuTTNlscbQxPFyto/wO
jHPtuMPrA0qd7FJLcMB3eFAP7YuqIhLm7yYyIzbJuQahqzZ/MFxk4o8XDKb+ts7Q
AJGKSWsFtvK9YOwYMQq+FEQcsnqcIaIkF0dJ/VvMBZG5b5K2IoBhW2dV3AN04jHj
d3FrmhFGmhYneEs8yzBdKdeRnBfOegAArERm7rFBfesVSW9rq6MMyY88dG7cnRjF
B7GEZg0UXfF14NvkmxaTxXKZqPiTTsktfFQkhI0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRvyGEBn/l42CF3AxLBhj/mJ7zb4zAfBgNVHSMEGDAWgBRe5TG5rCmQ1pqK
XDAj5y5thB5sCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1h1VXh1YXdwa05hYWlsd3dJLWN1YllRZWJBay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvOWExZDQ0LTg2MDktNGU1ZS1iYTk0LTVhODZjMjc1N2MxZS8x
L2I4aGhBWl81ZU5naGR3TVN3WVlfNWllODItTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
OWExZDQ0LTg2MDktNGU1ZS1iYTk0LTVhODZjMjc1N2MxZS8xL1h1VXh1YXdwa05h
YWlsd3dJLWN1YllRZWJBay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAl2yYAMEAl2yaAMEAV2yfjANBgkq
hkiG9w0BAQsFAAOCAQEAi1rFskbpsidsrH65cJClpULtHOgb+vrNNc/gcf4Z83/W
FcPs5TOIStzRx8o2n01U5OLg4m5TrXSC3KlTzxMEAxxSsqjpdrovncSNkqG3oLnb
e3fuEXV6VOgbdZqw+YnnfvfiQW0+EabIEPcWiqFK9x7BMhv/NQpTBAsQRFZq2zsX
poy2hc8mvPukL4WbycLETg0a/zc6acvGVm2snnJ3S5ZeU1mm8BtNvXQsaH5P+W/i
kK9kisKwaInyzotMEiUikYwRhrknjL8kRWPuEhFRsFjH8lx7+EXQDo7eduBf23hn
MDXg9sBsNC1zgduVmjdl/jyhpRycDLg8Mc+RDY/kFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org