Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/voSkPmq9sOeXWgZCRCibQpD_xJg.roa
File: voSkPmq9sOeXWgZCRCibQpD_xJg.roa (raw, json)
Hash identifier: 1AGyciu7I7zC4NC1fuwPafpntbIV5Av6UDz8F9Psti4=
Subject key identifier: BE:84:A4:3E:6A:BD:B0:E7:97:5A:06:42:44:28:9B:42:90:FF:C4:98
Certificate issuer: /CN=5ad9c45020072b3369c2b810fef4527244c5b741
Certificate serial: 1C5B8384
Authority key identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/voSkPmq9sOeXWgZCRCibQpD_xJg.roa
Signing time: Sat 01 Jan 2022 07:02:49 +0000
ROA not before: Sat 01 Jan 2022 07:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203986
IP address blocks: 185.78.176.0/22 maxlen: 22
2a00:67e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475759492 (0x1c5b8384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad9c45020072b3369c2b810fef4527244c5b741
Validity
Not Before: Jan 1 07:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be84a43e6abdb0e7975a064244289b4290ffc498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:2d:e9:1c:78:d4:91:c5:27:01:f0:f8:36:
46:a1:c3:e8:07:34:60:4a:8f:f9:8f:91:04:e0:4c:
15:9c:06:9b:55:74:d2:18:bf:34:50:d9:e4:08:81:
47:6f:e8:38:42:39:7c:49:83:73:f3:df:8c:ea:b5:
a0:7c:31:07:8e:88:e6:0c:66:13:4b:3b:f4:99:22:
3a:a9:fc:e3:d6:95:72:52:12:79:c1:4b:1f:cd:b8:
50:ec:56:ac:7b:33:ea:a3:aa:93:3d:2b:03:4f:8a:
44:89:13:f5:88:54:3b:b6:76:0f:7d:40:80:c1:91:
13:82:6b:27:1e:ad:d4:54:0f:cb:9b:19:e4:7f:58:
e8:65:b3:e8:87:2b:a7:87:bb:ef:0b:8f:b3:f0:f9:
30:52:7f:a0:3f:71:60:a4:84:ab:67:f5:2f:b7:9c:
90:24:8e:22:df:51:8c:57:0a:10:e2:e6:dd:fe:44:
28:91:30:b7:30:f0:37:89:24:f8:ef:92:84:37:0c:
73:51:b9:99:7b:c6:35:2b:dc:2c:e8:fa:ab:84:a5:
b3:c8:5e:46:83:4c:93:7c:89:30:76:49:4d:39:18:
bb:23:77:f2:3d:cc:f0:9d:d5:05:e8:75:c9:00:a6:
9f:a0:12:90:e1:e6:75:35:36:d4:c9:71:fe:7b:f2:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:84:A4:3E:6A:BD:B0:E7:97:5A:06:42:44:28:9B:42:90:FF:C4:98
X509v3 Authority Key Identifier:
keyid:5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/voSkPmq9sOeXWgZCRCibQpD_xJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.176.0/22
IPv6:
2a00:67e0::/32
Signature Algorithm: sha256WithRSAEncryption
64:10:8a:fe:a2:14:79:0d:a6:5c:4c:e1:59:e5:a7:78:02:5b:
4f:c6:aa:47:2d:b8:15:3d:e9:93:9f:c8:83:f8:52:0c:9d:5a:
fc:be:9d:55:67:8a:51:73:a5:e0:04:3a:96:56:d0:42:f6:1e:
2f:5a:6d:21:62:ce:06:67:b7:08:38:f2:6e:15:6e:c9:74:27:
c6:81:b6:96:84:28:bb:0a:91:9b:49:61:5f:74:ef:bd:ed:c4:
d3:c8:15:cd:a9:20:8e:c2:8a:af:d4:c1:c0:d3:8d:ca:07:7e:
70:0c:e0:94:f9:c3:3c:94:6f:58:f9:eb:ee:e4:97:2b:fa:7a:
cb:5e:e1:7c:db:ba:fd:7f:29:3b:f8:85:5b:b3:d4:7e:c2:4a:
98:a9:46:d0:31:c0:53:0f:ff:dc:d3:a2:b2:73:5f:d5:08:85:
15:0a:c4:bb:6e:84:b9:6f:c9:93:65:28:68:47:b9:12:be:43:
f3:4b:ab:0a:e3:5c:42:ac:3e:6f:4b:87:53:95:f3:79:59:b1:
a6:6c:3e:6b:e4:f4:b0:97:64:32:2a:25:4b:80:5a:5a:79:6f:
d8:37:6d:9f:9e:5b:c6:ad:a4:e2:c7:4a:41:f8:50:af:4b:3c:
a3:e5:c4:0c:e9:77:ae:64:aa:51:98:b6:5f:b1:4b:b0:31:0e:
6f:b6:d1:df
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEHFuDhDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YWQ5YzQ1MDIwMDcyYjMzNjljMmI4MTBmZWY0NTI3MjQ0YzViNzQxMB4XDTIyMDEw
MTA3MDI0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmU4NGE0M2U2YWJk
YjBlNzk3NWEwNjQyNDQyODliNDI5MGZmYzQ5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMYXLekceNSRxScB8Pg2RqHD6Ac0YEqP+Y+RBOBMFZwGm1V0
0hi/NFDZ5AiBR2/oOEI5fEmDc/PfjOq1oHwxB46I5gxmE0s79JkiOqn849aVclIS
ecFLH824UOxWrHsz6qOqkz0rA0+KRIkT9YhUO7Z2D31AgMGRE4JrJx6t1FQPy5sZ
5H9Y6GWz6Icrp4e77wuPs/D5MFJ/oD9xYKSEq2f1L7eckCSOIt9RjFcKEOLm3f5E
KJEwtzDwN4kk+O+ShDcMc1G5mXvGNSvcLOj6q4Sls8heRoNMk3yJMHZJTTkYuyN3
8j3M8J3VBeh1yQCmn6ASkOHmdTU21Mlx/nvyXQUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBS+hKQ+ar2w55daBkJEKJtCkP/EmDAfBgNVHSMEGDAWgBRa2cRQIAcrM2nC
uBD+9FJyRMW3QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1d0bkVVQ0FIS3pOcHdyZ1FfdlJTY2tURnQwRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjYvY2YzNjQxLTVjMzAtNGRlYS1iMDA0LWM4ZTdmZDgwOWY5MC8x
L3ZvU2tQbXE5c09lWFdnWkNSQ2liUXBEX3hKZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYv
Y2YzNjQxLTVjMzAtNGRlYS1iMDA0LWM4ZTdmZDgwOWY5MC8xL1d0bkVVQ0FIS3pO
cHdyZ1FfdlJTY2tURnQwRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlOsDANBAIAAjAHAwUAKgBn4DAN
BgkqhkiG9w0BAQsFAAOCAQEAZBCK/qIUeQ2mXEzhWeWneAJbT8aqRy24FT3pk5/I
g/hSDJ1a/L6dVWeKUXOl4AQ6llbQQvYeL1ptIWLOBme3CDjybhVuyXQnxoG2loQo
uwqRm0lhX3Tvve3E08gVzakgjsKKr9TBwNONygd+cAzglPnDPJRvWPnr7uSXK/p6
y17hfNu6/X8pO/iFW7PUfsJKmKlG0DHAUw//3NOisnNf1QiFFQrEu26EuW/Jk2Uo
aEe5Er5D80urCuNcQqw+b0uHU5XzeVmxpmw+a+T0sJdkMiolS4BaWnlv2Ddtn55b
xq2k4sdKQfhQr0s8o+XEDOl3rmSqUZi2X7FLsDEOb7bR3w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:42 2025 by rpki-client