Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/tpgOjY913qEbZrZFt0qSXy3R0mQ.roa
File: tpgOjY913qEbZrZFt0qSXy3R0mQ.roa (raw, json)
Hash identifier: aSELbc2PdWfwM+PJX0wrS0VfTsSkmUFSwW3Mc1Kq3i0=
Subject key identifier: B6:98:0E:8D:8F:75:DE:A1:1B:66:B6:45:B7:4A:92:5F:2D:D1:D2:64
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01842E1EA0EF71CE059B0A201DE07998B665
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/tpgOjY913qEbZrZFt0qSXy3R0mQ.roa
Signing time: Mon 31 Oct 2022 12:57:49 +0000
ROA not before: Mon 31 Oct 2022 12:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51246
IP address blocks: 178.175.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:1e:a0:ef:71:ce:05:9b:0a:20:1d:e0:79:98:b6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Oct 31 12:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6980e8d8f75dea11b66b645b74a925f2dd1d264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:41:5b:90:50:85:cb:20:dc:a6:56:a0:3b:
6a:41:70:a9:6e:58:3e:97:94:ba:47:39:f4:fd:f7:
de:8c:96:80:f6:9e:0b:05:90:f9:1c:5c:0c:ca:d5:
59:ee:72:dc:fc:a8:e2:14:c2:e2:8e:76:24:47:5e:
85:25:f3:25:a3:c6:78:19:1b:8a:7a:5b:ef:26:76:
25:a8:21:ca:d3:5c:3b:ca:5f:a0:74:b7:24:4b:a1:
81:6b:07:b9:fd:b6:a5:b2:73:8c:a6:88:7c:ee:9f:
f9:55:07:17:ee:50:cf:3c:9b:cb:2b:7f:cb:82:33:
48:b9:71:e4:77:a6:65:84:23:22:b4:42:37:8c:bf:
75:86:63:ba:46:b3:89:d3:47:2b:59:13:ab:ad:23:
a4:b0:7c:a7:0d:c8:05:25:e0:e6:2a:95:12:de:85:
20:9e:7b:64:6f:8e:1c:c5:13:fa:34:7a:ac:ef:bc:
4d:b6:b3:bc:56:61:8c:ac:7f:4a:4f:67:81:8b:79:
46:0a:a2:4e:27:82:c9:c3:f6:b5:38:f5:4c:d2:0b:
f0:6c:3e:a5:b7:f7:b0:00:1d:63:41:82:d9:d1:24:
a5:7a:de:6a:4e:2f:85:0b:7e:2f:cc:bd:b0:9a:5c:
b8:99:80:bc:0b:c9:62:f1:ec:2b:80:71:ec:50:85:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:98:0E:8D:8F:75:DE:A1:1B:66:B6:45:B7:4A:92:5F:2D:D1:D2:64
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/tpgOjY913qEbZrZFt0qSXy3R0mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:4a:ce:63:f9:48:48:f3:76:0e:a8:a1:5e:9e:29:2f:fa:7e:
4d:d7:d2:d8:c7:1a:dd:a9:d6:42:56:18:40:99:ce:de:e2:b1:
9b:44:b7:06:53:15:b1:fd:6e:0c:e9:66:a3:a7:6c:9b:46:34:
be:c9:39:ba:25:66:d9:83:23:bd:59:8b:3f:8c:45:70:46:d2:
ce:87:f4:9e:b0:d0:1e:01:50:5b:a6:4d:a2:c6:ba:85:09:8a:
57:d9:d5:00:37:63:b2:4d:f1:f1:af:e9:7f:fa:18:76:df:8f:
37:d2:61:d3:d0:24:15:92:64:1d:7e:a1:37:3b:67:b0:62:49:
67:24:0f:cc:8d:6a:67:f0:08:22:a1:e1:1a:df:93:61:7a:cd:
eb:17:3d:9d:dc:8f:f8:bd:f5:cd:18:e6:2a:fc:c8:d2:01:1f:
ab:96:3f:74:65:9f:c3:07:aa:4b:3e:4f:9a:57:52:8d:0d:68:
3e:90:51:0e:43:7a:47:fb:46:98:39:00:43:e5:af:c1:c3:24:
83:e3:d2:31:55:84:f5:37:23:48:67:e0:ec:1a:0f:b8:f6:e2:
27:0a:8f:9a:b1:77:96:a0:e8:bf:82:29:5f:84:a8:4d:5d:8a:
d3:0c:44:29:e8:41:df:6a:e9:ec:e5:8f:0a:f1:f7:97:11:b2:
5a:9e:89:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQuHqDvcc4FmwogHeB5mLZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjIxMDMxMTI1NzQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjk4MGU4ZDhmNzVkZWExMWI2NmI2NDViNzRhOTI1ZjJkZDFkMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApplBW5BQhcsg3KZWoDtqQXCpblg+
l5S6Rzn0/ffejJaA9p4LBZD5HFwMytVZ7nLc/KjiFMLijnYkR16FJfMlo8Z4GRuK
elvvJnYlqCHK01w7yl+gdLckS6GBawe5/balsnOMpoh87p/5VQcX7lDPPJvLK3/L
gjNIuXHkd6ZlhCMitEI3jL91hmO6RrOJ00crWROrrSOksHynDcgFJeDmKpUS3oUg
nntkb44cxRP6NHqs77xNtrO8VmGMrH9KT2eBi3lGCqJOJ4LJw/a1OPVM0gvwbD6l
t/ewAB1jQYLZ0SSlet5qTi+FC34vzL2wmly4mYC8C8li8ewrgHHsUIXDDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLaYDo2Pdd6hG2a2RbdKkl8t0dJkMB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvdHBnT2pZOTEzcUViWnJaRnQwcVNYeTNSMG1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq+WMA0G
CSqGSIb3DQEBCwUAA4IBAQDJSs5j+UhI83YOqKFenikv+n5N19LYxxrdqdZCVhhA
mc7e4rGbRLcGUxWx/W4M6Wajp2ybRjS+yTm6JWbZgyO9WYs/jEVwRtLOh/SesNAe
AVBbpk2ixrqFCYpX2dUAN2OyTfHxr+l/+hh234830mHT0CQVkmQdfqE3O2ewYkln
JA/MjWpn8AgioeEa35Nhes3rFz2d3I/4vfXNGOYq/MjSAR+rlj90ZZ/DB6pLPk+a
V1KNDWg+kFEOQ3pH+0aYOQBD5a/BwySD49IxVYT1NyNIZ+DsGg+49uInCo+asXeW
oOi/gilfhKhNXYrTDEQp6EHfauns5Y8K8feXEbJanomW
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org