Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9W3plgRfiYaDKnOC3Dwro0RcwGQ.roa
File: 9W3plgRfiYaDKnOC3Dwro0RcwGQ.roa (raw, json)
Hash identifier: SKlG5QVLc0dJFtP8sa3NTRKYmsVFjEh9FvyiDhRlHQ8=
Subject key identifier: F5:6D:E9:96:04:5F:89:86:83:2A:73:82:DC:3C:2B:A3:44:5C:C0:64
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0AECDA98
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9W3plgRfiYaDKnOC3Dwro0RcwGQ.roa
Signing time: Fri 24 Jun 2022 22:26:36 +0000
ROA not before: Fri 24 Jun 2022 22:26:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 27176
IP address blocks: 78.108.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183294616 (0xaecda98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jun 24 22:26:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f56de996045f8986832a7382dc3c2ba3445cc064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:a3:bc:e0:14:bd:99:62:d9:66:1e:bb:14:
0e:50:69:2b:ba:08:36:de:ae:4e:02:cc:a8:99:22:
96:81:e9:ae:d8:af:4e:4c:27:69:8d:a1:5a:8a:54:
af:84:96:1b:3a:c5:1d:4d:fa:b3:db:fc:6d:19:fb:
ba:53:d8:2e:ae:dc:b1:32:6c:7b:a5:4d:e9:6e:31:
39:2b:df:97:8d:79:66:d3:b7:94:96:8d:73:02:cf:
c9:02:68:d4:69:e6:be:ed:3e:73:9a:c5:33:56:c0:
b1:49:47:db:3f:b7:6f:d4:67:bc:85:57:fd:ae:ef:
60:28:7a:25:75:8d:37:13:86:87:1f:6b:ce:d2:8e:
57:b1:32:06:2a:dd:e1:9e:72:ad:d4:19:8a:2e:2b:
28:e5:7a:12:b1:c7:ae:3c:eb:27:48:e8:8a:2b:6e:
10:08:75:b5:2f:84:d0:ed:c8:fd:75:d3:b2:e5:39:
cc:3e:76:d7:bd:6c:8b:dc:c5:a3:44:a5:e7:e5:69:
cc:68:43:20:fe:0b:e4:02:47:e3:d3:fe:42:f7:0a:
ff:dd:a4:77:10:36:39:fd:4d:0b:c7:f6:61:34:02:
5e:8c:3e:f7:94:b2:8e:19:26:c6:d2:7a:8f:71:df:
a6:99:85:da:3e:db:04:85:a2:0f:e8:df:e6:4b:3a:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6D:E9:96:04:5F:89:86:83:2A:73:82:DC:3C:2B:A3:44:5C:C0:64
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9W3plgRfiYaDKnOC3Dwro0RcwGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5e:ef:4c:c9:24:85:99:e6:d2:42:af:b8:11:20:8a:0a:52:
90:b6:08:a7:e1:97:91:89:05:34:ea:e1:aa:d7:76:4b:bf:63:
0f:aa:70:c3:54:9a:c8:6e:31:11:30:22:df:ff:27:71:c1:a6:
be:ad:6d:38:b0:9d:9d:b1:9a:5d:4e:92:95:58:fd:21:aa:a6:
52:20:94:39:21:df:db:b2:31:7d:a0:5d:b6:aa:a6:a9:e8:00:
1d:80:e8:0e:95:c5:b3:50:b3:65:6f:96:3b:87:bb:00:d9:9d:
bd:57:e5:17:35:11:0e:36:e4:bd:84:08:f5:d5:80:84:57:a5:
d1:a8:8b:80:57:21:4e:42:eb:1a:cf:86:19:97:25:a4:e6:f9:
41:5c:a3:c0:26:8e:64:72:c7:40:70:dc:54:da:f6:2c:85:a3:
44:e9:16:ed:74:13:71:df:01:7a:a7:87:e9:73:94:51:55:f4:
c2:9e:d4:60:71:0d:e5:22:35:bf:6d:51:c1:1e:ff:6a:63:c0:
18:36:90:db:dc:e9:65:0d:52:2e:06:f1:da:82:47:df:a5:42:
52:57:a8:64:cc:7c:50:57:ae:18:14:0f:c1:48:a1:c0:a3:4b:
bd:5a:d0:b7:cf:58:8d:ee:48:92:02:9a:0a:7d:bf:7f:0b:ca:
4e:0e:f3:ab
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECuzamDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MB4XDTIyMDYy
NDIyMjYzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjU2ZGU5OTYwNDVm
ODk4NjgzMmE3MzgyZGMzYzJiYTM0NDVjYzA2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMzYo7zgFL2ZYtlmHrsUDlBpK7oINt6uTgLMqJkiloHprtiv
TkwnaY2hWopUr4SWGzrFHU36s9v8bRn7ulPYLq7csTJse6VN6W4xOSvfl415ZtO3
lJaNcwLPyQJo1Gnmvu0+c5rFM1bAsUlH2z+3b9RnvIVX/a7vYCh6JXWNNxOGhx9r
ztKOV7EyBird4Z5yrdQZii4rKOV6ErHHrjzrJ0joiituEAh1tS+E0O3I/XXTsuU5
zD52171si9zFo0Sl5+VpzGhDIP4L5AJH49P+QvcK/92kdxA2Of1NC8f2YTQCXow+
95SyjhkmxtJ6j3HfppmF2j7bBIWiD+jf5ks6imkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT1bemWBF+JhoMqc4LcPCujRFzAZDAfBgNVHSMEGDAWgBSxp7DY3oJR0218
g/r2vH7+xztQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8x
LzlXM3BsZ1JmaVlhREtuT0MzRHdybzBSY3dHUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWRO
dGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE5s2jANBgkqhkiG9w0BAQsFAAOC
AQEAnV7vTMkkhZnm0kKvuBEgigpSkLYIp+GXkYkFNOrhqtd2S79jD6pww1SayG4x
ETAi3/8nccGmvq1tOLCdnbGaXU6SlVj9IaqmUiCUOSHf27IxfaBdtqqmqegAHYDo
DpXFs1CzZW+WO4e7ANmdvVflFzURDjbkvYQI9dWAhFel0aiLgFchTkLrGs+GGZcl
pOb5QVyjwCaOZHLHQHDcVNr2LIWjROkW7XQTcd8BeqeH6XOUUVX0wp7UYHEN5SI1
v21RwR7/amPAGDaQ29zpZQ1SLgbx2oJH36VCUleoZMx8UFeuGBQPwUihwKNLvVrQ
t89Yje5IkgKaCn2/fwvKTg7zqw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org