Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/w5B3N5BEsmS2R75IMjjXYllevA8.roa
File: w5B3N5BEsmS2R75IMjjXYllevA8.roa (raw, json)
Hash identifier: fT9yqrFjhWbNuNSoSzKKmyrlj3A/dqETfq7bKf1Bi84=
Subject key identifier: C3:90:77:37:90:44:B2:64:B6:47:BE:48:32:38:D7:62:59:5E:BC:0F
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0386D6B7
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/w5B3N5BEsmS2R75IMjjXYllevA8.roa
Signing time: Sat 01 Jan 2022 15:57:25 +0000
ROA not before: Sat 01 Jan 2022 15:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 78.142.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59168439 (0x386d6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 15:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c39077379044b264b647be483238d762595ebc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:0d:8c:69:d1:7c:ce:df:c9:2c:6a:54:d3:
7b:d2:f7:9a:c7:60:71:b1:c3:c9:a9:6e:7f:42:4d:
aa:d1:bb:b1:ae:2d:4f:51:9e:5b:1b:1b:89:08:5f:
81:66:af:b2:32:23:ca:3c:68:dd:24:fb:4c:c2:d4:
aa:56:09:0f:7d:bc:d0:66:a5:b1:64:a2:8c:f7:c3:
47:4f:fa:6a:54:48:49:96:e6:63:d5:fb:48:f7:cc:
14:03:fe:54:7f:04:d6:14:65:f0:88:0b:d7:c5:51:
27:54:17:c3:a5:78:58:6b:f8:f9:48:21:b3:62:a7:
48:01:a1:6a:3e:67:74:8b:0a:4d:16:ae:92:dd:d8:
6b:74:2a:29:89:89:87:31:41:f3:5b:3b:e1:20:15:
e0:fc:d4:52:0a:09:97:5d:a7:6d:13:8e:eb:ae:ba:
dd:25:28:2e:cd:71:35:05:ae:80:12:19:a9:83:59:
50:0a:28:25:c7:ab:97:97:10:5c:00:27:98:d0:1a:
89:a4:08:e3:f6:b0:40:88:4f:b4:a1:e6:37:8b:f6:
9b:2c:a8:f9:68:3b:13:d5:14:03:4b:e3:cc:02:88:
69:1d:41:73:d3:49:f2:6e:1c:34:cd:9e:61:5d:39:
78:24:00:34:dc:3d:b9:61:6e:d7:36:b5:d7:91:73:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:90:77:37:90:44:B2:64:B6:47:BE:48:32:38:D7:62:59:5E:BC:0F
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/w5B3N5BEsmS2R75IMjjXYllevA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:30:85:1e:bc:c6:a4:6e:e3:be:dc:a6:bb:a3:79:eb:a4:e1:
df:25:f8:4c:b7:49:4b:c0:74:29:91:ea:48:fe:b2:59:ce:7b:
01:c6:5b:25:94:5c:03:d1:07:36:83:45:11:d9:e7:54:0e:60:
e4:75:6d:2d:6a:4e:bc:a1:3a:92:f5:f4:9d:1a:f1:7f:72:cf:
91:d5:cb:80:bf:86:c2:1e:7e:6e:77:f1:83:42:1f:23:a2:3a:
49:c8:34:8d:f4:27:73:14:20:00:4e:d2:14:21:d4:3d:37:dd:
49:36:f3:52:0c:aa:f5:0c:2c:92:5c:1d:03:cf:2f:9f:37:82:
43:cf:0e:1c:64:e2:1c:92:8f:cb:a7:8e:7d:62:cb:cf:f2:f4:
cb:c0:f8:8c:e1:43:ec:72:15:14:8a:11:38:9d:5e:08:d3:6d:
53:4c:af:91:a3:64:09:20:59:eb:4d:7f:80:4c:ae:75:a3:72:
16:58:0d:b2:be:c5:c5:1d:63:19:a9:74:20:66:8f:bc:90:bf:
03:43:ea:78:9d:77:47:5c:7d:d8:d6:a0:89:8a:1e:7b:51:b1:
85:36:aa:e2:68:52:f1:0e:ad:d7:63:30:e1:df:6d:e0:92:84:
fe:ae:ab:66:b0:d3:bb:0f:dc:7f:46:22:87:38:06:08:ae:70:
78:d6:27:84
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA4bWtzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NGQwOGExZTFjYmM5MDkyNTRlOWU2YjljOTM5ZmQ4NWEyNjhiMWUxMB4XDTIyMDEw
MTE1NTcyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzM5MDc3Mzc5MDQ0
YjI2NGI2NDdiZTQ4MzIzOGQ3NjI1OTVlYmMwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANtyDYxp0XzO38ksalTTe9L3msdgcbHDyaluf0JNqtG7sa4t
T1GeWxsbiQhfgWavsjIjyjxo3ST7TMLUqlYJD3280GalsWSijPfDR0/6alRISZbm
Y9X7SPfMFAP+VH8E1hRl8IgL18VRJ1QXw6V4WGv4+Ughs2KnSAGhaj5ndIsKTRau
kt3Ya3QqKYmJhzFB81s74SAV4PzUUgoJl12nbROO66663SUoLs1xNQWugBIZqYNZ
UAooJcerl5cQXAAnmNAaiaQI4/awQIhPtKHmN4v2myyo+Wg7E9UUA0vjzAKIaR1B
c9NJ8m4cNM2eYV05eCQANNw9uWFu1za115FzveUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTDkHc3kESyZLZHvkgyONdiWV68DzAfBgNVHSMEGDAWgBT00IoeHLyQklTp
5rnJOf2Fomix4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlOQ0tIaHk4a0pKVTZlYTV5VG45aGFKb3NlRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvNjQ5ZmRjLTBkM2EtNDFlYy1hMWNlLWRjZTk0N2UyOTRiNi8x
L3c1QjNONUJFc21TMlI3NUlNampYWWxsZXZBOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
NjQ5ZmRjLTBkM2EtNDFlYy1hMWNlLWRjZTk0N2UyOTRiNi8xLzlOQ0tIaHk4a0pK
VTZlYTV5VG45aGFKb3NlRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE6O2DANBgkqhkiG9w0BAQsFAAOC
AQEAozCFHrzGpG7jvtymu6N566Th3yX4TLdJS8B0KZHqSP6yWc57AcZbJZRcA9EH
NoNFEdnnVA5g5HVtLWpOvKE6kvX0nRrxf3LPkdXLgL+Gwh5+bnfxg0IfI6I6Scg0
jfQncxQgAE7SFCHUPTfdSTbzUgyq9QwsklwdA88vnzeCQ88OHGTiHJKPy6eOfWLL
z/L0y8D4jOFD7HIVFIoROJ1eCNNtU0yvkaNkCSBZ601/gEyudaNyFlgNsr7FxR1j
Gal0IGaPvJC/A0PqeJ13R1x92NagiYoee1GxhTaq4mhS8Q6t12Mw4d9t4JKE/q6r
ZrDTuw/cf0YihzgGCK5weNYnhA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org