Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/KMoeEtQKAUx5QtL2ELR-shMPtQA.roa
File: KMoeEtQKAUx5QtL2ELR-shMPtQA.roa (raw, json)
Hash identifier: guRRTmp9KIE35wf7FQD6OzXf/DkicSxRvoTpdGTpks4=
Subject key identifier: 28:CA:1E:12:D4:0A:01:4C:79:42:D2:F6:10:B4:7E:B2:13:0F:B5:00
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 09328756
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/KMoeEtQKAUx5QtL2ELR-shMPtQA.roa
Signing time: Mon 10 Jan 2022 14:55:31 +0000
ROA not before: Mon 10 Jan 2022 14:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43648
IP address blocks: 185.78.17.0/24 maxlen: 24
185.78.16.0/22 maxlen: 22
185.78.16.0/24 maxlen: 24
185.78.19.0/24 maxlen: 24
185.78.18.0/24 maxlen: 24
2a05:6680::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154306390 (0x9328756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Jan 10 14:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28ca1e12d40a014c7942d2f610b47eb2130fb500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:c2:54:6f:c9:c9:a3:c2:4e:38:84:47:21:
b0:11:11:a2:68:23:3f:6e:57:a3:c8:0a:57:26:97:
60:eb:e2:28:47:79:00:a6:f8:e9:95:f1:18:b5:0f:
7f:0d:a1:78:84:f3:fb:1d:bf:db:46:84:67:a8:b8:
c6:8b:65:54:dc:ef:94:5d:43:c8:d5:f0:35:33:6c:
d5:7f:d6:c0:82:bd:6d:9b:e8:09:05:6d:72:7d:50:
bd:ea:15:b8:6d:92:3a:0c:c6:0f:19:e0:e5:57:18:
cb:56:8a:4a:ed:9e:9c:4a:8c:55:1b:f8:c9:be:83:
08:75:62:a0:36:76:94:5c:73:59:50:8e:66:e5:1d:
ff:51:f8:33:15:a2:d7:90:03:83:49:5c:96:2a:f8:
43:ec:d4:68:ed:dd:44:fd:7b:69:e3:b0:ff:b2:55:
9c:0f:e9:1d:b2:6c:8a:e4:b6:2b:a6:1c:f0:37:06:
37:4e:09:f7:3a:69:8c:2f:4d:94:7c:87:dd:28:82:
41:e4:f1:74:d5:78:de:98:fa:18:ce:71:76:d5:ca:
3d:2f:f4:70:0e:e7:21:8b:e7:49:80:73:27:fe:37:
55:5f:5b:93:89:31:42:ed:10:e1:61:22:22:2f:9e:
50:da:a3:14:f6:d3:5b:93:79:a9:74:0c:cd:94:ea:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:1E:12:D4:0A:01:4C:79:42:D2:F6:10:B4:7E:B2:13:0F:B5:00
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/KMoeEtQKAUx5QtL2ELR-shMPtQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.16.0/22
IPv6:
2a05:6680::/29
Signature Algorithm: sha256WithRSAEncryption
2a:e1:b1:73:70:82:da:54:b8:cd:b0:ae:e4:72:77:a8:6d:71:
f4:53:aa:49:f5:1b:1f:e1:a6:e8:79:c1:99:44:d6:ea:de:f2:
f2:e2:10:08:f7:ae:ac:96:e9:e2:21:b7:3e:ac:33:62:2a:4c:
e2:9c:fa:dd:67:4d:f1:db:68:2f:8f:95:60:45:2f:8c:8d:79:
79:78:08:5c:e5:fc:37:da:3d:fe:2b:d3:ae:a4:cc:65:ab:42:
58:4a:a6:60:88:99:b6:79:7b:64:b6:ef:a0:b4:3e:2e:51:9e:
36:83:62:b9:10:4d:88:7d:3e:d9:93:32:a6:42:91:57:5a:2b:
28:c7:6d:13:29:c5:ed:22:51:56:a8:e7:63:88:0d:65:bd:a9:
1c:2b:b3:83:7e:06:e4:69:08:71:25:bd:d9:90:a3:84:dd:66:
b5:23:1c:34:0a:80:fd:61:59:cc:15:38:8e:c0:11:03:fa:7c:
25:7a:8b:21:56:11:f4:18:52:a2:3a:2f:08:79:70:9b:8a:f5:
fb:32:f1:fa:d2:c7:9b:2c:1a:a3:ea:29:58:41:66:b2:52:9d:
00:fc:5d:2a:ab:2c:ab:b5:c3:62:15:11:ad:46:89:3a:e2:73:
aa:4e:21:86:3d:d9:8c:37:48:b9:76:b8:1e:eb:07:5c:d5:11:
c3:06:06:b1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECTKHVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NDEzYmRmNGRjNzQzNWZhZjUxYmE5MzRkNjU1NzBmNzFjMjE3MzFhMB4XDTIyMDEx
MDE0NTUzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjhjYTFlMTJkNDBh
MDE0Yzc5NDJkMmY2MTBiNDdlYjIxMzBmYjUwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKLcwlRvycmjwk44hEchsBERomgjP25Xo8gKVyaXYOviKEd5
AKb46ZXxGLUPfw2heITz+x2/20aEZ6i4xotlVNzvlF1DyNXwNTNs1X/WwIK9bZvo
CQVtcn1QveoVuG2SOgzGDxng5VcYy1aKSu2enEqMVRv4yb6DCHVioDZ2lFxzWVCO
ZuUd/1H4MxWi15ADg0lclir4Q+zUaO3dRP17aeOw/7JVnA/pHbJsiuS2K6Yc8DcG
N04J9zppjC9NlHyH3SiCQeTxdNV43pj6GM5xdtXKPS/0cA7nIYvnSYBzJ/43VV9b
k4kxQu0Q4WEiIi+eUNqjFPbTW5N5qXQMzZTqFfsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQoyh4S1AoBTHlC0vYQtH6yEw+1ADAfBgNVHSMEGDAWgBREE7303HQ1+vUb
qTTWVXD3HCFzGjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JCTzk5TngwTmZyMUc2azAxbFZ3OXh3aGN4by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvNDdhYTJmLTZiNmYtNGVmNS05Yjk5LWJjOWVjYzJhZGI0My8x
L0tNb2VFdFFLQVV4NVF0TDJFTFItc2hNUHRRQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
NDdhYTJmLTZiNmYtNGVmNS05Yjk5LWJjOWVjYzJhZGI0My8xL1JCTzk5TngwTmZy
MUc2azAxbFZ3OXh3aGN4by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlOEDANBAIAAjAHAwUDKgVmgDAN
BgkqhkiG9w0BAQsFAAOCAQEAKuGxc3CC2lS4zbCu5HJ3qG1x9FOqSfUbH+Gm6HnB
mUTW6t7y8uIQCPeurJbp4iG3PqwzYipM4pz63WdN8dtoL4+VYEUvjI15eXgIXOX8
N9o9/ivTrqTMZatCWEqmYIiZtnl7ZLbvoLQ+LlGeNoNiuRBNiH0+2ZMypkKRV1or
KMdtEynF7SJRVqjnY4gNZb2pHCuzg34G5GkIcSW92ZCjhN1mtSMcNAqA/WFZzBU4
jsARA/p8JXqLIVYR9BhSojovCHlwm4r1+zLx+tLHmywao+opWEFmslKdAPxdKqss
q7XDYhURrUaJOuJzqk4hhj3ZjDdIuXa4HusHXNURwwYGsQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:45 2023 by rpki-client on console-ams.rpki-client.org