Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/jQIeTGq8QLarO7M6yY6vISf3sEk.roa
File: jQIeTGq8QLarO7M6yY6vISf3sEk.roa (raw, json)
Hash identifier: WHh2viZMlytSe6CBhShtmai/4BdRGCiL3PvumTA3rh0=
Subject key identifier: 8D:02:1E:4C:6A:BC:40:B6:AB:3B:B3:3A:C9:8E:AF:21:27:F7:B0:49
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 3816C0AF
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/jQIeTGq8QLarO7M6yY6vISf3sEk.roa
Signing time: Sat 01 Jan 2022 09:59:22 +0000
ROA not before: Sat 01 Jan 2022 09:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 178.175.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941015215 (0x3816c0af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 09:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d021e4c6abc40b6ab3bb33ac98eaf2127f7b049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:64:6f:2f:d1:7f:6a:26:e3:2c:e8:e4:fd:
05:f9:43:16:b0:0a:60:0b:ec:bc:77:20:d8:8a:3f:
8f:c0:e9:d9:f6:a0:a5:6c:4e:cd:5f:08:08:a0:50:
53:25:65:95:bd:7f:13:f7:f9:ef:97:43:5b:75:89:
82:e5:3c:53:71:92:37:7f:4a:d6:e3:72:71:94:93:
c6:9e:a8:6e:e9:cc:88:7d:7e:de:87:ba:77:bf:aa:
da:d8:1b:c0:55:a8:52:70:bd:34:6c:f4:07:bf:3b:
95:99:9c:b9:bc:27:4d:cb:10:cd:51:95:3c:e5:1b:
d5:cb:62:d1:2b:c5:69:59:cf:d0:37:b5:db:86:db:
9c:de:63:54:d8:5a:a4:5f:60:52:c4:ed:46:dd:04:
a0:f1:35:5e:1c:0c:d4:d1:ff:cc:4a:48:fa:ab:a5:
55:d6:97:72:d7:3d:53:7d:df:06:cc:19:0e:f8:c4:
16:97:c0:7c:ea:8b:40:25:16:6e:0a:43:4e:6d:99:
c3:62:6b:15:fc:0a:f8:56:d8:93:02:90:58:7a:82:
ea:9e:2b:e6:27:ab:64:ed:d6:63:ec:15:6a:6e:c2:
86:7a:d3:13:5e:db:ca:a0:59:53:c3:3e:60:01:b7:
e1:d9:f2:17:03:6f:8e:09:c1:7e:cf:5b:37:a9:b0:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:1E:4C:6A:BC:40:B6:AB:3B:B3:3A:C9:8E:AF:21:27:F7:B0:49
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/jQIeTGq8QLarO7M6yY6vISf3sEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.160.0/22
Signature Algorithm: sha256WithRSAEncryption
17:f8:f8:5a:c8:4d:78:58:89:52:3e:fa:48:26:af:40:85:12:
e8:6e:25:16:01:e1:37:b4:20:df:d4:93:ca:80:97:e6:dc:17:
19:8d:08:e6:27:a3:bf:ae:4b:bb:df:c6:25:ee:e1:f3:b1:3e:
be:6d:14:df:4b:68:d6:0e:e7:4e:17:68:ac:f4:c5:5e:2a:85:
8e:f9:63:08:d3:ec:a1:9b:e5:70:c3:77:e1:75:9b:9e:4d:28:
ab:6a:4a:c3:cf:8f:35:9a:ba:ae:48:fd:61:bf:c8:31:10:f8:
49:6f:9c:f9:81:97:0d:d4:bf:8f:a4:ce:f1:d6:88:f5:a2:be:
c6:62:3e:77:77:dd:5a:64:97:63:54:da:bc:89:b4:8c:cd:75:
8a:41:2c:46:f0:18:b9:fe:6b:ee:04:bc:60:65:cd:66:00:8e:
15:30:ef:dd:cb:79:53:de:e8:2e:25:3a:4f:24:92:01:ca:94:
63:ae:5e:a7:4f:ac:f0:af:ac:82:c8:d2:81:8c:6e:89:b6:94:
0a:d1:49:8e:7c:a4:13:8a:e6:56:8d:68:ca:d4:c6:bf:5a:28:
78:c3:89:97:9a:da:2f:bd:b3:33:dc:51:81:28:26:67:d0:ae:
93:f7:3c:22:4c:8c:4a:5f:f6:92:7a:15:67:45:3c:83:8e:b1:
e4:87:17:71
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOBbArzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTFiOTE1MDQ5ODMwOTE1MDZhMWE5NDQ0NTdhNDU1OGI5NGRhYjdmMB4XDTIyMDEw
MTA5NTkyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGQwMjFlNGM2YWJj
NDBiNmFiM2JiMzNhYzk4ZWFmMjEyN2Y3YjA0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJXGZG8v0X9qJuMs6OT9BflDFrAKYAvsvHcg2Io/j8Dp2fag
pWxOzV8ICKBQUyVllb1/E/f575dDW3WJguU8U3GSN39K1uNycZSTxp6obunMiH1+
3oe6d7+q2tgbwFWoUnC9NGz0B787lZmcubwnTcsQzVGVPOUb1cti0SvFaVnP0De1
24bbnN5jVNhapF9gUsTtRt0EoPE1XhwM1NH/zEpI+qulVdaXctc9U33fBswZDvjE
FpfAfOqLQCUWbgpDTm2Zw2JrFfwK+FbYkwKQWHqC6p4r5ierZO3WY+wVam7ChnrT
E17byqBZU8M+YAG34dnyFwNvjgnBfs9bN6mwCsECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSNAh5MarxAtqs7szrJjq8hJ/ewSTAfBgNVHSMEGDAWgBS5G5FQSYMJFQah
qURFekVYuU2rfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VSdVJVRW1EQ1JVR29hbEVSWHBGV0xsTnEzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzRlMTdmLWY5ZjQtNDc4OS05MmI3LTlkZDZlODhmY2M4ZC8x
L2pRSWVUR3E4UUxhck83TTZ5WTZ2SVNmM3NFay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzRlMTdmLWY5ZjQtNDc4OS05MmI3LTlkZDZlODhmY2M4ZC8xL3VSdVJVRW1EQ1JV
R29hbEVSWHBGV0xsTnEzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArKvoDANBgkqhkiG9w0BAQsFAAOC
AQEAF/j4WshNeFiJUj76SCavQIUS6G4lFgHhN7Qg39STyoCX5twXGY0I5iejv65L
u9/GJe7h87E+vm0U30to1g7nThdorPTFXiqFjvljCNPsoZvlcMN34XWbnk0oq2pK
w8+PNZq6rkj9Yb/IMRD4SW+c+YGXDdS/j6TO8daI9aK+xmI+d3fdWmSXY1TavIm0
jM11ikEsRvAYuf5r7gS8YGXNZgCOFTDv3ct5U97oLiU6TySSAcqUY65ep0+s8K+s
gsjSgYxuibaUCtFJjnykE4rmVo1oytTGv1ooeMOJl5raL72zM9xRgSgmZ9Cuk/c8
IkyMSl/2knoVZ0U8g46x5IcXcQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:29 2023 by rpki-client on console-fra.rpki-client.org