Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/N2nJFBkdksWbva2NtJHt8HNLLvU.roa
File: N2nJFBkdksWbva2NtJHt8HNLLvU.roa (raw, json)
Hash identifier: x6h3ZRZNL3TUawKmVtgumT44qa/OUwfYKEs6AmXKHuM=
Subject key identifier: 37:69:C9:14:19:1D:92:C5:9B:BD:AD:8D:B4:91:ED:F0:73:4B:2E:F5
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 10166CD5
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/N2nJFBkdksWbva2NtJHt8HNLLvU.roa
Signing time: Sat 01 Jan 2022 05:00:49 +0000
ROA not before: Sat 01 Jan 2022 05:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206398
IP address blocks: 185.178.187.0/24 maxlen: 24
2a0a:6680:a000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269905109 (0x10166cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Jan 1 05:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3769c914191d92c59bbdad8db491edf0734b2ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:b5:a4:4b:2e:29:1d:c0:ce:96:cc:36:52:
c3:fc:a5:60:46:1f:6a:03:68:6c:d6:f5:2d:1b:15:
68:92:e9:49:6b:19:ec:e6:dc:82:76:e7:0c:49:94:
82:06:6b:31:3f:13:bb:e8:56:9f:87:65:03:a8:4d:
fa:0e:75:51:d9:37:d5:ba:5f:dc:36:95:8f:3e:4a:
4b:b4:2b:6d:6e:cb:9a:fb:7c:97:dc:c8:9a:5f:95:
e5:66:29:24:eb:55:d5:4e:56:40:3d:b4:7b:6d:e9:
67:5b:ed:1b:3e:f9:c7:51:7d:bd:5f:11:81:af:59:
8d:8d:c1:e7:a2:eb:54:43:5d:f4:83:48:70:cb:22:
c4:35:b3:6d:af:2d:76:d5:74:13:95:49:71:f0:32:
3e:5f:3b:ea:a7:fc:0e:05:8b:88:7e:d7:71:94:47:
b5:e4:8a:d2:f6:25:98:4b:e6:36:a2:0d:30:6f:7d:
c4:5b:ff:c2:26:d4:81:98:80:8a:6e:79:17:1d:1a:
fa:e5:8a:5a:d5:19:b1:5e:06:e7:5e:5e:83:60:c3:
d4:08:ce:b6:b9:c4:98:69:2d:ff:c2:62:a1:a0:e5:
c1:f1:89:e1:3e:da:1f:0b:ad:00:39:5b:13:26:88:
50:41:3d:c3:3b:2e:0a:5d:b0:ad:52:9b:5e:c6:71:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:69:C9:14:19:1D:92:C5:9B:BD:AD:8D:B4:91:ED:F0:73:4B:2E:F5
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/N2nJFBkdksWbva2NtJHt8HNLLvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.187.0/24
IPv6:
2a0a:6680:a000::/36
Signature Algorithm: sha256WithRSAEncryption
81:1d:0d:2f:bf:ac:ca:6d:b7:18:ca:f5:7e:e0:58:18:e5:57:
bb:08:86:e6:a2:14:d9:c5:da:ff:7f:5b:c7:3b:26:f5:5b:2b:
9c:cf:a4:3e:b3:a0:1c:7b:3f:3b:19:14:c6:4b:cc:fc:bb:81:
bf:65:24:e5:54:73:fa:18:c9:0a:59:71:89:b2:f5:4e:98:e6:
96:a8:1b:fa:e3:fa:f6:dd:6e:23:ba:d1:71:99:80:81:c9:f1:
20:03:d8:8b:3e:05:74:f1:2b:65:0a:bb:9a:c3:f7:ff:c6:76:
13:e6:69:d3:70:e5:ca:9d:29:72:5e:2a:7f:56:c6:86:5b:28:
84:58:03:eb:e5:ec:01:da:a8:77:b9:11:d3:f9:a4:61:32:42:
d1:50:7a:2c:ec:4f:b3:64:64:6a:03:73:bc:c8:96:8d:44:9c:
55:9b:f5:20:d8:58:36:6f:55:90:8a:62:e6:05:de:c2:f5:e2:
81:fb:ab:be:64:e8:93:7f:03:1b:e0:e6:16:06:88:10:de:e4:
7d:ad:a9:08:67:a0:eb:e1:74:e5:8d:87:68:3d:35:64:37:22:
1c:f7:92:1c:b6:62:df:b2:55:22:2f:1b:d6:61:1a:78:36:69:
5b:0b:d4:35:55:b0:e0:6f:b9:1a:a4:57:58:7f:fa:55:71:5d:
20:45:84:74
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIEEBZs1TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWM3OGYzM2U4ZTExODczMjc2NjdmYTk0ZmQ3NDQ2YjhkOTFlNWI0MB4XDTIyMDEw
MTA1MDA0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc2OWM5MTQxOTFk
OTJjNTliYmRhZDhkYjQ5MWVkZjA3MzRiMmVmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMcbtaRLLikdwM6WzDZSw/ylYEYfagNobNb1LRsVaJLpSWsZ
7ObcgnbnDEmUggZrMT8Tu+hWn4dlA6hN+g51Udk31bpf3DaVjz5KS7QrbW7Lmvt8
l9zIml+V5WYpJOtV1U5WQD20e23pZ1vtGz75x1F9vV8Rga9ZjY3B56LrVENd9INI
cMsixDWzba8tdtV0E5VJcfAyPl876qf8DgWLiH7XcZRHteSK0vYlmEvmNqINMG99
xFv/wibUgZiAim55Fx0a+uWKWtUZsV4G515eg2DD1AjOtrnEmGkt/8JioaDlwfGJ
4T7aHwutADlbEyaIUEE9wzsuCl2wrVKbXsZxzjsCAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBQ3ackUGR2SxZu9rY20ke3wc0su9TAfBgNVHSMEGDAWgBQ6x48z6OEYcydm
f6lP10RrjZHltDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09zZVBNLWpoR0hNblpuLXBUOWRFYTQyUjViUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvNWVkYWFmLTMzMjctNDNlZC05MGIxLWRjMDFmNGI0YmFlNC8x
L04ybkpGQmtka3NXYnZhMk50Skh0OEhOTEx2VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
NWVkYWFmLTMzMjctNDNlZC05MGIxLWRjMDFmNGI0YmFlNC8xL09zZVBNLWpoR0hN
blpuLXBUOWRFYTQyUjViUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEALmyuzAOBAIAAjAIAwYEKgpmgKAw
DQYJKoZIhvcNAQELBQADggEBAIEdDS+/rMpttxjK9X7gWBjlV7sIhuaiFNnF2v9/
W8c7JvVbK5zPpD6zoBx7PzsZFMZLzPy7gb9lJOVUc/oYyQpZcYmy9U6Y5paoG/rj
+vbdbiO60XGZgIHJ8SAD2Is+BXTxK2UKu5rD9//GdhPmadNw5cqdKXJeKn9WxoZb
KIRYA+vl7AHaqHe5EdP5pGEyQtFQeizsT7NkZGoDc7zIlo1EnFWb9SDYWDZvVZCK
YuYF3sL14oH7q75k6JN/Axvg5hYGiBDe5H2tqQhnoOvhdOWNh2g9NWQ3Ihz3khy2
Yt+yVSIvG9ZhGng2aVsL1DVVsOBvuRqkV1h/+lVxXSBFhHQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:20 2024 by rpki-client on console-ams.rpki-client.org