Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PQ432O0cAucKjI2hTC4XxsUuazU.roa
File: PQ432O0cAucKjI2hTC4XxsUuazU.roa (raw, json)
Hash identifier: gPRTBizUKHh4pPwFmHSruzYC9f153xiw3V3Wd3AenSw=
Subject key identifier: 3D:0E:37:D8:ED:1C:02:E7:0A:8C:8D:A1:4C:2E:17:C6:C5:2E:6B:35
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 09F7A764
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PQ432O0cAucKjI2hTC4XxsUuazU.roa
Signing time: Sat 01 Jan 2022 03:01:15 +0000
ROA not before: Sat 01 Jan 2022 03:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142578
IP address blocks: 213.176.76.0/22 maxlen: 24
213.176.80.0/21 maxlen: 24
213.176.96.0/20 maxlen: 24
213.176.8.0/21 maxlen: 24
213.176.16.0/22 maxlen: 24
213.176.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167225188 (0x9f7a764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 1 03:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d0e37d8ed1c02e70a8c8da14c2e17c6c52e6b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:59:6a:32:4e:2f:1b:aa:b4:93:f5:f1:a1:
76:24:7b:37:ca:31:f5:b1:c0:fc:ab:b3:24:fb:8c:
ee:0a:33:49:81:25:74:ec:d8:cb:34:10:a9:c5:b9:
f5:8c:15:de:57:11:4b:54:b2:35:1d:cc:ce:58:04:
96:f4:8a:89:f4:23:47:90:be:9b:c2:8c:39:e5:e4:
b2:78:89:0e:ca:ac:b4:bd:48:f9:84:d0:4d:87:40:
e3:ec:28:46:a3:12:79:5b:36:8e:24:91:1b:72:3a:
78:ce:53:1a:3d:91:9b:a8:2f:68:a6:82:06:ca:d7:
ac:bc:67:ec:94:9f:d2:9c:c1:bf:80:fd:bc:75:a6:
b2:0b:38:24:a4:1e:15:26:5b:c9:aa:33:aa:3b:ee:
27:bc:d3:31:15:77:a9:9d:de:10:93:f9:8b:89:a7:
a3:f5:e3:82:bf:ac:f2:c7:73:b8:e1:5d:30:1f:7f:
ea:c4:a0:b6:36:c4:2f:be:bf:ef:20:17:7b:98:26:
08:1c:09:da:ee:56:69:c9:23:60:4d:1d:74:3b:31:
6b:8e:96:8b:92:bd:45:14:ff:54:e1:14:06:51:59:
30:d9:29:2d:06:86:08:5d:56:dd:06:33:11:99:dd:
7b:40:78:be:06:a6:34:79:8a:01:46:6a:e0:0c:78:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0E:37:D8:ED:1C:02:E7:0A:8C:8D:A1:4C:2E:17:C6:C5:2E:6B:35
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PQ432O0cAucKjI2hTC4XxsUuazU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.8.0-213.176.19.255
213.176.32.0/19
213.176.76.0-213.176.87.255
213.176.96.0/20
Signature Algorithm: sha256WithRSAEncryption
58:64:5d:52:e6:9b:76:d8:90:6b:67:90:38:74:8c:c4:67:b8:
7f:c1:18:fe:5c:c5:98:9d:d0:d6:57:58:17:41:3b:22:71:b0:
ad:6c:5d:15:12:19:67:36:8b:ce:f7:fb:00:f9:c1:5c:0a:d4:
73:c1:0a:c8:8a:8a:6d:68:d5:4a:bb:f7:a5:32:e1:ad:d5:83:
2c:5c:60:8b:71:f7:1b:44:df:56:6d:be:77:be:5d:a7:ad:4c:
4b:46:bd:f7:6e:de:d0:c2:c9:56:29:63:c9:96:03:d8:99:33:
21:2d:7c:7b:d1:c9:76:29:1d:86:2c:29:52:66:0a:7a:f6:a1:
30:43:11:e0:d2:81:eb:24:c4:78:ba:90:6c:e2:b1:fe:a6:22:
32:28:c5:89:21:ba:af:02:74:c9:3b:af:30:2d:bb:13:38:55:
33:43:26:46:43:97:ce:38:da:fe:76:b1:cd:17:a7:29:85:fa:
4f:8e:d5:6e:8d:5d:e3:c8:41:2d:80:23:ca:f8:ee:94:01:db:
49:86:95:e1:d2:94:13:ef:18:94:1e:02:14:4b:19:50:a1:4d:
99:f4:cf:de:0e:bc:0d:d3:5e:ad:99:45:f1:7b:ac:9b:2f:c3:
54:3e:f2:ac:f1:2f:64:2c:c6:26:c9:4e:0c:d1:15:0c:71:96:
a3:9a:e3:12
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIECfenZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
M2MxODUyN2UzYTIwNmFmMjg0MjAyOGQ5NWFlYzQxMzM4ZThkYWY4MB4XDTIyMDEw
MTAzMDExNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2QwZTM3ZDhlZDFj
MDJlNzBhOGM4ZGExNGMyZTE3YzZjNTJlNmIzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJYtWWoyTi8bqrST9fGhdiR7N8ox9bHA/KuzJPuM7gozSYEl
dOzYyzQQqcW59YwV3lcRS1SyNR3MzlgElvSKifQjR5C+m8KMOeXksniJDsqstL1I
+YTQTYdA4+woRqMSeVs2jiSRG3I6eM5TGj2Rm6gvaKaCBsrXrLxn7JSf0pzBv4D9
vHWmsgs4JKQeFSZbyaozqjvuJ7zTMRV3qZ3eEJP5i4mno/Xjgr+s8sdzuOFdMB9/
6sSgtjbEL76/7yAXe5gmCBwJ2u5WackjYE0ddDsxa46Wi5K9RRT/VOEUBlFZMNkp
LQaGCF1W3QYzEZnde0B4vgamNHmKAUZq4Ax4cz8CAwEAAaOCAiswggInMB0GA1Ud
DgQWBBQ9DjfY7RwC5wqMjaFMLhfGxS5rNTAfBgNVHSMEGDAWgBTDwYUn46IGryhC
Ao2VrsQTOOja+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3c4R0ZKLU9pQnE4b1FnS05sYTdFRXpqbzJ2Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvMTMzOWRmLThlMDYtNDFkZS05NGYzLTBjYmEzM2VmYzViYi8x
L1BRNDMyTzBjQXVjS2pJMmhUQzRYeHNVdWF6VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
MTMzOWRmLThlMDYtNDFkZS05NGYzLTBjYmEzM2VmYzViYi8xL3c4R0ZKLU9pQnE4
b1FnS05sYTdFRXpqbzJ2Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBB
BggrBgEFBQcBBwEB/wQyMDAwLgQCAAEwKDAMAwQD1bAIAwQC1bAQAwQF1bAgMAwD
BALVsEwDBAPVsFADBATVsGAwDQYJKoZIhvcNAQELBQADggEBAFhkXVLmm3bYkGtn
kDh0jMRnuH/BGP5cxZid0NZXWBdBOyJxsK1sXRUSGWc2i873+wD5wVwK1HPBCsiK
im1o1Uq796Uy4a3VgyxcYItx9xtE31Ztvne+XaetTEtGvfdu3tDCyVYpY8mWA9iZ
MyEtfHvRyXYpHYYsKVJmCnr2oTBDEeDSgeskxHi6kGzisf6mIjIoxYkhuq8CdMk7
rzAtuxM4VTNDJkZDl8442v52sc0XpymF+k+O1W6NXePIQS2AI8r47pQB20mGleHS
lBPvGJQeAhRLGVChTZn0z94OvA3TXq2ZRfF7rJsvw1Q+8qzxL2QsxibJTgzRFQxx
lqOa4xI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org