Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/8JsXdblz2fn7k6fL6_uv03NLzpM.roa
File: 8JsXdblz2fn7k6fL6_uv03NLzpM.roa (raw, json)
Hash identifier: 0bl1oxgv0EUE3P3Sujbp9jvhpFOEUL9OuRzdbFPHRvI=
Subject key identifier: F0:9B:17:75:B9:73:D9:F9:FB:93:A7:CB:EB:FB:AF:D3:73:4B:CE:93
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 06DB964D
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/8JsXdblz2fn7k6fL6_uv03NLzpM.roa
Signing time: Sat 01 Jan 2022 12:55:30 +0000
ROA not before: Sat 01 Jan 2022 12:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201766
IP address blocks: 176.124.253.0/24 maxlen: 24
185.64.32.0/22 maxlen: 23
2a04:f7c1::/32 maxlen: 32
2a04:f7c0::/32 maxlen: 32
2a04:f7c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115054157 (0x6db964d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Jan 1 12:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f09b1775b973d9f9fb93a7cbebfbafd3734bce93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:40:85:1c:52:76:28:90:fa:3f:81:6b:ab:
2f:8a:49:97:e1:19:70:e6:77:71:0a:7c:7c:83:9b:
b2:66:15:f2:59:df:03:a4:1c:e9:7b:54:04:f2:06:
88:84:57:29:1e:41:9d:9d:5c:f3:28:4e:33:05:33:
3e:35:49:9a:5f:da:3f:3c:57:56:a9:81:8e:44:b9:
43:95:2f:40:34:bb:f4:8a:a0:9b:ee:20:f3:4e:a0:
a4:08:59:88:4f:ec:01:b8:09:60:9b:6e:bb:21:31:
e4:35:9f:3e:35:98:f9:d4:03:c4:a4:fc:41:99:27:
75:e0:89:f4:ea:83:88:1c:0a:e1:93:ef:a9:0f:da:
84:a2:ef:ce:c0:26:e9:6c:b6:f0:54:62:8b:5b:97:
c6:5e:eb:fc:80:24:7a:76:38:ef:5d:bb:7f:98:c6:
08:4e:fa:db:71:41:21:43:a1:ff:ed:7c:0c:f7:1b:
47:01:ea:f7:b6:f4:aa:ec:58:0d:08:e8:ab:77:0c:
ee:54:4b:56:f8:c0:a8:73:00:51:e5:33:c7:93:ae:
39:3a:51:53:0d:e4:ac:d3:31:75:5d:5c:05:fa:c2:
f4:1f:38:c7:d0:a5:23:71:79:a4:d5:48:52:f8:92:
14:50:8b:70:63:68:6a:0f:14:ef:e0:ee:c2:43:87:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9B:17:75:B9:73:D9:F9:FB:93:A7:CB:EB:FB:AF:D3:73:4B:CE:93
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/8JsXdblz2fn7k6fL6_uv03NLzpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.253.0/24
185.64.32.0/22
IPv6:
2a04:f7c0::-2a04:f7c2:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:2c:3e:ac:d9:d8:21:97:66:83:fd:1d:9a:13:74:2a:1c:b0:
65:47:15:70:5e:07:06:f9:6e:c7:8e:86:14:2e:c4:5c:b8:bb:
10:c0:83:95:70:95:8a:ee:d7:a2:fd:b8:af:2a:f1:22:79:b7:
60:8e:9a:18:4d:2d:a1:81:91:fa:bc:25:81:32:54:45:04:29:
bc:45:2e:74:ce:dc:28:2d:47:b9:c8:ab:8e:2f:98:f7:61:90:
a4:20:84:9d:fc:48:b7:4a:ee:1b:2f:c3:42:db:04:a3:77:10:
87:9f:f0:65:a9:8d:bc:d0:1c:0a:46:e0:ff:71:18:b4:ec:84:
70:c4:fb:60:58:77:f5:9b:cc:dc:a5:bc:32:19:6b:8f:38:a1:
8a:81:d4:e2:7c:6b:e7:a2:fc:c5:f8:c5:13:1a:1a:f2:3d:3f:
a4:22:84:8b:04:e9:f9:e3:0b:69:65:0d:3b:67:c8:8b:cc:b9:
b9:07:50:9d:da:5e:e7:8f:0b:b9:f2:90:0a:f5:4d:3b:7d:96:
41:9c:95:1f:39:df:7c:37:d5:0d:5d:00:3b:25:35:56:5c:d5:
00:0b:f0:3d:9f:aa:67:b2:73:cc:67:17:ff:49:a9:6d:f8:e4:
7a:82:59:9c:2d:ac:46:6d:8d:5a:90:cd:ec:04:80:25:fb:89:
b0:59:69:e6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEBtuWTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YmQ3Yzk1MTM0OGJkMmUwOWNjYWY3NmY1N2I4Mzg1ZjE1ZGY0NGU0MB4XDTIyMDEw
MTEyNTUzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjA5YjE3NzViOTcz
ZDlmOWZiOTNhN2NiZWJmYmFmZDM3MzRiY2U5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALC/QIUcUnYokPo/gWurL4pJl+EZcOZ3cQp8fIObsmYV8lnf
A6Qc6XtUBPIGiIRXKR5BnZ1c8yhOMwUzPjVJml/aPzxXVqmBjkS5Q5UvQDS79Iqg
m+4g806gpAhZiE/sAbgJYJtuuyEx5DWfPjWY+dQDxKT8QZkndeCJ9OqDiBwK4ZPv
qQ/ahKLvzsAm6Wy28FRii1uXxl7r/IAkenY47127f5jGCE7623FBIUOh/+18DPcb
RwHq97b0quxYDQjoq3cM7lRLVvjAqHMAUeUzx5OuOTpRUw3krNMxdV1cBfrC9B84
x9ClI3F5pNVIUviSFFCLcGNoag8U7+DuwkOHF3MCAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBTwmxd1uXPZ+fuTp8vr+6/Tc0vOkzAfBgNVHSMEGDAWgBTb18lRNIvS4JzK
929XuDhfFd9E5DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzI5ZkpVVFNMMHVDY3l2ZHZWN2c0WHhYZlJPUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDEvODUzYzc2LWEzOTgtNDM1YS1iZTQxLTdkMGFjNTI4MTVhNi8x
LzhKc1hkYmx6MmZuN2s2Zkw2X3V2MDNOTHpwTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEv
ODUzYzc2LWEzOTgtNDM1YS1iZTQxLTdkMGFjNTI4MTVhNi8xLzI5ZkpVVFNMMHVD
Y3l2ZHZWN2c0WHhYZlJPUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wEgQCAAEwDAMEALB8/QMEArlAIDAYBAIAAjASMBAD
BQYqBPfAAwcAKgT3wgAAMA0GCSqGSIb3DQEBCwUAA4IBAQB1LD6s2dghl2aD/R2a
E3QqHLBlRxVwXgcG+W7HjoYULsRcuLsQwIOVcJWK7tei/bivKvEiebdgjpoYTS2h
gZH6vCWBMlRFBCm8RS50ztwoLUe5yKuOL5j3YZCkIISd/Ei3Su4bL8NC2wSjdxCH
n/BlqY280BwKRuD/cRi07IRwxPtgWHf1m8zcpbwyGWuPOKGKgdTifGvnovzF+MUT
GhryPT+kIoSLBOn54wtpZQ07Z8iLzLm5B1Cd2l7njwu58pAK9U07fZZBnJUfOd98
N9UNXQA7JTVWXNUAC/A9n6pnsnPMZxf/Salt+OR6glmcLaxGbY1akM3sBIAl+4mw
WWnm
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:18 2023 by rpki-client on console-ams.rpki-client.org