Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/YJ_sCaiPK9HDlIZZK4Pd0PVLcRc.roa
File: YJ_sCaiPK9HDlIZZK4Pd0PVLcRc.roa (raw, json)
Hash identifier: z4YDFdAjhCnP2iMa5NTZfyDIcdVvRWC3cfWfUIcNN4A=
Subject key identifier: 60:9F:EC:09:A8:8F:2B:D1:C3:94:86:59:2B:83:DD:D0:F5:4B:71:17
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 082745D9
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/YJ_sCaiPK9HDlIZZK4Pd0PVLcRc.roa
Signing time: Sat 01 Jan 2022 06:03:22 +0000
ROA not before: Sat 01 Jan 2022 06:03:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205297
IP address blocks: 178.236.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136791513 (0x82745d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Jan 1 06:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=609fec09a88f2bd1c39486592b83ddd0f54b7117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:2f:6c:7e:08:bf:75:ab:e7:d6:cf:e1:2a:
53:f9:fd:b0:6c:54:ed:a6:55:c3:c4:b2:6c:a3:46:
01:47:ce:6e:86:92:c6:2a:f4:cb:97:b5:16:03:62:
12:ab:ad:cb:ef:51:eb:44:9b:70:d4:9c:8d:14:d3:
39:ad:25:bc:a3:e7:03:cf:46:e5:58:4b:95:a4:b0:
ca:3c:c0:58:38:f8:33:19:79:dc:8a:b4:07:a4:24:
06:f8:92:83:f6:25:0b:db:da:5b:bb:d9:ee:70:68:
90:2f:6b:0c:fc:d3:ff:da:13:32:6c:21:a8:a2:58:
f5:7e:19:dd:0d:b7:99:56:23:95:52:c2:31:41:18:
d5:9f:c8:14:b7:7f:9c:33:38:82:9f:b7:e6:7f:8f:
4a:cc:b6:21:9e:3c:dd:04:3d:ac:41:5b:60:f5:4f:
53:19:c6:a6:44:5a:d1:a7:4f:ac:ae:ef:b5:59:4a:
e0:38:ce:90:99:bf:71:20:22:af:9d:45:fc:29:54:
aa:fb:a9:0d:2e:e4:63:c3:09:35:ac:a1:85:f4:0d:
12:6f:46:29:0b:2e:e5:f8:73:e5:7c:ab:c1:1e:76:
74:d5:fd:4b:e0:59:f9:7f:08:7f:41:f8:b5:ce:c9:
cf:bf:4a:e4:56:bf:ca:a2:ea:2a:92:f7:d2:ac:87:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:EC:09:A8:8F:2B:D1:C3:94:86:59:2B:83:DD:D0:F5:4B:71:17
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/YJ_sCaiPK9HDlIZZK4Pd0PVLcRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:03:d3:d7:39:f0:71:07:e3:45:9e:69:53:6a:ff:bb:25:e5:
34:45:d7:00:20:ca:9d:53:e1:a5:70:2a:f9:1e:ba:b4:d6:23:
bc:8c:de:02:43:10:2d:9e:3c:4e:70:b5:e7:c8:ca:56:3e:7f:
ff:ef:80:e9:9f:09:aa:6b:aa:4e:8f:4c:2f:73:2e:69:8f:6f:
e9:8d:a6:12:b8:2a:c8:53:8f:1c:84:bf:fb:5f:16:1f:5f:c2:
ec:bc:f3:6b:09:a2:fa:a7:9c:48:a5:b8:b7:92:73:c0:81:d9:
84:e8:5f:aa:02:16:3a:14:aa:19:c4:d4:4e:bd:89:bb:60:1c:
b7:7d:b1:f6:f4:91:c5:4b:e3:df:46:7a:25:a5:f5:97:8f:57:
23:45:40:ca:8b:14:88:7e:32:bf:28:9c:f4:45:df:51:c7:73:
ec:82:2b:5b:bb:ad:a9:7d:ea:d8:13:47:61:66:de:09:13:09:
81:28:21:61:bd:67:3a:0d:be:9f:f8:1d:78:2c:79:a6:37:85:
ca:17:96:56:81:23:f6:be:9b:4a:b6:a8:d8:c6:0e:ea:1a:3c:
2d:46:e4:51:2e:ee:29:76:e8:73:f9:7b:d1:9d:8c:05:0b:fa:
8c:17:b7:96:c9:22:1e:dc:5d:45:36:59:91:34:8c:b4:80:ca:
fd:92:17:3d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECCdF2TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NzI1ODhjMDBlZWY3MTU4MDllYjVmZGQ2ZDY3MTdjYzI4YzBkZmFjMB4XDTIyMDEw
MTA2MDMyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjA5ZmVjMDlhODhm
MmJkMWMzOTQ4NjU5MmI4M2RkZDBmNTRiNzExNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTOL2x+CL91q+fWz+EqU/n9sGxU7aZVw8SybKNGAUfOboaS
xir0y5e1FgNiEquty+9R60SbcNScjRTTOa0lvKPnA89G5VhLlaSwyjzAWDj4Mxl5
3Iq0B6QkBviSg/YlC9vaW7vZ7nBokC9rDPzT/9oTMmwhqKJY9X4Z3Q23mVYjlVLC
MUEY1Z/IFLd/nDM4gp+35n+PSsy2IZ483QQ9rEFbYPVPUxnGpkRa0adPrK7vtVlK
4DjOkJm/cSAir51F/ClUqvupDS7kY8MJNayhhfQNEm9GKQsu5fhz5XyrwR52dNX9
S+BZ+X8If0H4tc7Jz79K5Fa/yqLqKpL30qyH2UcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRgn+wJqI8r0cOUhlkrg93Q9UtxFzAfBgNVHSMEGDAWgBS3JYjADu9xWAnr
X91tZxfMKMDfrDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3R5V0l3QTd2Y1ZnSjYxX2RiV2NYekNqQTM2dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvZWJiYWM5LWZlZTctNGYzYi04Y2Q1LTdhNDEyNTRlYWFjYS8x
L1lKX3NDYWlQSzlIRGxJWlpLNFBkMFBWTGNSYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
ZWJiYWM5LWZlZTctNGYzYi04Y2Q1LTdhNDEyNTRlYWFjYS8xL3R5V0l3QTd2Y1Zn
SjYxX2RiV2NYekNqQTM2dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLsijANBgkqhkiG9w0BAQsFAAOC
AQEAGgPT1znwcQfjRZ5pU2r/uyXlNEXXACDKnVPhpXAq+R66tNYjvIzeAkMQLZ48
TnC158jKVj5//++A6Z8JqmuqTo9ML3MuaY9v6Y2mErgqyFOPHIS/+18WH1/C7Lzz
awmi+qecSKW4t5JzwIHZhOhfqgIWOhSqGcTUTr2Ju2Act32x9vSRxUvj30Z6JaX1
l49XI0VAyosUiH4yvyic9EXfUcdz7IIrW7utqX3q2BNHYWbeCRMJgSghYb1nOg2+
n/gdeCx5pjeFyheWVoEj9r6bSrao2MYO6ho8LUbkUS7uKXboc/l70Z2MBQv6jBe3
lskiHtxdRTZZkTSMtIDK/ZIXPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:35 2024 by rpki-client on console-ams.rpki-client.org