Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8_6zAY7DQiCg6coyH9884kHnLvI.roa
File: 8_6zAY7DQiCg6coyH9884kHnLvI.roa (raw, json)
Hash identifier: zk6UUKeR8Am4D3/oSYK1rRZO7+F+eqnSzj0A7Be4Mlg=
Subject key identifier: F3:FE:B3:01:8E:C3:42:20:A0:E9:CA:32:1F:DF:3C:E2:41:E7:2E:F2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0185716EC0F647052DEE73346B1287439247
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8_6zAY7DQiCg6coyH9884kHnLvI.roa
Signing time: Mon 02 Jan 2023 07:42:41 +0000
ROA not before: Mon 02 Jan 2023 07:42:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44103
IP address blocks: 178.18.155.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:6e:c0:f6:47:05:2d:ee:73:34:6b:12:87:43:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 07:42:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3feb3018ec34220a0e9ca321fdf3ce241e72ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2a:2f:4f:34:1d:a3:da:dd:d6:99:1d:0c:d7:
5f:ec:69:0c:ca:35:8b:90:13:28:e7:66:c2:76:c8:
9b:b5:72:76:d7:0a:f8:58:8a:14:11:70:79:97:59:
7e:99:29:50:d7:cb:12:3a:8b:20:9c:63:dc:72:b1:
69:e6:1a:cc:bf:b4:26:23:5e:68:fd:1e:4b:ee:e1:
1d:f3:e4:3e:01:82:22:09:b0:61:c6:4c:02:7d:20:
e9:59:d6:bb:1b:ad:42:04:07:d9:bc:16:cb:11:ea:
55:33:b6:7d:01:27:2f:ba:9b:34:c2:93:e2:61:94:
d7:00:e6:cd:46:a0:56:0e:df:09:b2:42:12:5a:82:
9d:65:a8:81:40:16:ec:91:46:e1:a0:0a:a7:2d:a9:
fa:59:f4:00:93:c6:19:95:df:4a:bd:f1:0b:80:c6:
a7:e1:b2:ff:1b:c0:d4:b3:e9:d9:69:3f:a6:9b:16:
66:78:00:bb:e6:06:3f:35:31:a7:5e:cd:7e:58:94:
0d:2d:13:22:c7:35:c7:7f:96:ce:96:6c:d2:0f:c7:
41:e3:a1:92:86:76:3e:10:84:26:27:b1:e1:4a:79:
45:b0:f1:9f:27:1b:53:b4:7c:8a:a9:ef:cf:ae:6f:
38:eb:65:be:23:bc:8b:1b:49:8b:c7:07:a2:50:6d:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FE:B3:01:8E:C3:42:20:A0:E9:CA:32:1F:DF:3C:E2:41:E7:2E:F2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8_6zAY7DQiCg6coyH9884kHnLvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.155.0/24
Signature Algorithm: sha256WithRSAEncryption
97:43:e3:32:ad:2d:48:6b:45:c0:31:42:cf:c8:87:7c:b0:4e:
1b:68:c0:f3:0e:a2:53:11:70:8b:2b:f8:dc:06:09:dc:30:f8:
5e:26:3b:f7:b4:6f:59:53:4e:c7:e9:7b:b7:ba:f0:0f:0f:15:
3b:99:e4:3c:95:b1:f8:1f:80:48:a3:e7:68:63:73:b9:e8:da:
5f:a0:3c:8d:4e:00:96:ca:5d:af:47:2d:3f:9d:92:a8:e7:69:
8b:9d:54:1c:32:89:83:30:14:04:1b:d8:f8:35:f2:29:4f:db:
48:90:05:67:59:d5:8f:b6:57:a3:28:c6:93:8d:60:48:a8:8a:
7b:ac:a7:1f:2a:c0:15:26:d1:ee:72:00:87:92:90:0f:ab:97:
fc:1e:24:6d:92:da:74:b1:f0:19:1b:f2:c8:df:af:80:9a:0a:
9b:74:99:c9:af:7f:a1:57:58:1e:55:04:50:ac:7c:8e:68:b2:
4b:b8:9d:42:9a:32:3c:9b:8a:b4:98:7b:06:af:c5:a7:97:d1:
22:70:a0:ca:97:97:d1:4c:68:30:16:bd:15:2d:cf:fa:94:87:
22:6c:f2:a7:e0:66:16:1f:05:cf:0c:bd:15:0d:09:5d:90:36:
27:0e:80:19:42:37:f7:d2:11:8f:39:6b:70:7b:43:14:c7:7e:
b5:5e:d7:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxbsD2RwUt7nM0axKHQ5JHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjMwMTAyMDc0MjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2ZlYjMwMThlYzM0MjIwYTBlOWNhMzIxZmRmM2NlMjQxZTcyZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSovTzQdo9rd1pkdDNdf7GkMyjWL
kBMo52bCdsibtXJ21wr4WIoUEXB5l1l+mSlQ18sSOosgnGPccrFp5hrMv7QmI15o
/R5L7uEd8+Q+AYIiCbBhxkwCfSDpWda7G61CBAfZvBbLEepVM7Z9AScvups0wpPi
YZTXAObNRqBWDt8JskISWoKdZaiBQBbskUbhoAqnLan6WfQAk8YZld9KvfELgMan
4bL/G8DUs+nZaT+mmxZmeAC75gY/NTGnXs1+WJQNLRMixzXHf5bOlmzSD8dB46GS
hnY+EIQmJ7HhSnlFsPGfJxtTtHyKqe/Prm8462W+I7yLG0mLxweiUG2wmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPP+swGOw0IgoOnKMh/fPOJB5y7yMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvOF82ekFZN0RRaUNnNmNveUg5ODg0a0huTHZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshKbMA0G
CSqGSIb3DQEBCwUAA4IBAQCXQ+MyrS1Ia0XAMULPyId8sE4baMDzDqJTEXCLK/jc
BgncMPheJjv3tG9ZU07H6Xu3uvAPDxU7meQ8lbH4H4BIo+doY3O56NpfoDyNTgCW
yl2vRy0/nZKo52mLnVQcMomDMBQEG9j4NfIpT9tIkAVnWdWPtlejKMaTjWBIqIp7
rKcfKsAVJtHucgCHkpAPq5f8HiRtktp0sfAZG/LI36+AmgqbdJnJr3+hV1geVQRQ
rHyOaLJLuJ1CmjI8m4q0mHsGr8Wnl9EicKDKl5fRTGgwFr0VLc/6lIcibPKn4GYW
HwXPDL0VDQldkDYnDoAZQjf30hGPOWtwe0MUx361XtdV
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org