Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1nAwGmNYKhDJ94YuNdMTv727Ka4.roa
File: 1nAwGmNYKhDJ94YuNdMTv727Ka4.roa (raw, json)
Hash identifier: uu3cm5jnjczFoZXc7NVQ1/CrYxnMzMSmMPqu2vsWA8Y=
Subject key identifier: D6:70:30:1A:63:58:2A:10:C9:F7:86:2E:35:D3:13:BF:BD:BB:29:AE
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 08472E30
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1nAwGmNYKhDJ94YuNdMTv727Ka4.roa
Signing time: Sat 01 Jan 2022 08:02:30 +0000
ROA not before: Sat 01 Jan 2022 08:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 176.57.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138882608 (0x8472e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 1 08:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d670301a63582a10c9f7862e35d313bfbdbb29ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:53:e4:e9:3d:41:b3:13:be:ce:b9:b7:61:
0e:9e:ec:7a:8b:65:76:e4:31:1e:26:6f:cc:c8:ea:
c6:8a:96:75:e7:54:15:15:87:d9:b3:3e:e9:91:29:
03:8f:25:df:78:53:42:1b:de:96:d9:45:74:c2:28:
91:3b:a0:f1:18:3c:b3:f8:6d:cf:c2:0a:f4:af:63:
63:f6:d2:a5:65:e7:66:54:7f:48:67:b0:05:e5:67:
d3:6d:95:3c:55:1a:8d:61:8f:51:0d:5b:0d:52:f1:
47:1e:94:7f:fb:7b:73:d4:e9:f8:a1:db:e3:e4:b9:
8a:0b:42:c8:c8:bd:2b:14:d4:ba:e9:57:1f:94:8e:
04:61:e2:45:28:e0:8f:47:c4:00:72:f7:e1:90:0f:
de:95:5f:2f:10:e9:d4:06:60:df:1a:04:1d:e8:ed:
fe:7e:c2:41:0b:a1:9a:2a:b4:bd:ed:f5:00:86:68:
82:1d:a4:d4:1c:b0:f3:48:ba:23:c4:41:df:e5:09:
c1:fd:a2:93:22:40:b8:2f:78:73:d7:82:58:3a:30:
c0:0a:00:68:60:f1:d9:f7:dd:60:54:63:95:5d:77:
f1:27:a8:66:b9:94:5d:b0:dc:42:14:8a:93:8d:5c:
97:20:26:77:d1:d8:e9:8d:cc:1b:57:23:f8:8e:14:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:70:30:1A:63:58:2A:10:C9:F7:86:2E:35:D3:13:BF:BD:BB:29:AE
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1nAwGmNYKhDJ94YuNdMTv727Ka4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.178.0/24
Signature Algorithm: sha256WithRSAEncryption
74:87:37:bb:f4:8c:94:6b:a6:28:64:01:7f:a0:39:da:58:6c:
8f:d6:2e:60:2b:8c:8d:3a:9d:59:36:8e:1f:da:5d:87:e9:41:
84:1f:c7:b3:72:bc:9c:b0:54:93:ab:e0:17:ea:0d:a5:66:ef:
80:a0:d2:87:1f:a3:09:48:dd:86:d2:f7:e3:33:a1:54:38:ca:
f8:51:89:22:70:f6:d7:7c:d4:7f:de:44:cd:60:49:0f:a6:9c:
ad:67:6a:70:fa:d6:fd:1c:a5:f5:9a:dc:15:95:01:2f:b1:43:
c8:71:30:8b:be:03:3e:18:0c:ab:8f:fb:e8:94:48:f8:44:f1:
f8:e7:78:e8:c4:82:8e:5b:00:b3:bf:33:65:f6:43:da:05:a2:
29:74:87:99:fa:8a:ed:2a:f1:03:53:af:9e:cc:5d:f6:07:e1:
58:bd:a5:15:d1:60:34:fd:e9:47:2f:8b:39:d9:f2:fa:60:b8:
8d:f5:71:88:d2:2f:0d:91:99:e4:32:21:7a:b5:2f:32:db:f8:
e9:f3:fa:92:0a:47:88:20:a2:d0:1c:c4:80:62:af:59:d9:5a:
aa:08:fc:b7:5f:38:d5:a1:86:cf:db:42:0d:7c:63:38:b4:07:
8b:b8:40:1d:92:36:86:d4:e0:ca:76:dc:02:00:d5:cb:38:d3:
a5:e1:94:d1
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECEcuMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ODg1N2VjZjQ0MWU1ZWExZDcxODFmZWM3ZTk3ZTZkYmMxMjIwZmMyMB4XDTIyMDEw
MTA4MDIzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDY3MDMwMWE2MzU4
MmExMGM5Zjc4NjJlMzVkMzEzYmZiZGJiMjlhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN8gU+TpPUGzE77OubdhDp7seotlduQxHiZvzMjqxoqWdedU
FRWH2bM+6ZEpA48l33hTQhveltlFdMIokTug8Rg8s/htz8IK9K9jY/bSpWXnZlR/
SGewBeVn022VPFUajWGPUQ1bDVLxRx6Uf/t7c9Tp+KHb4+S5igtCyMi9KxTUuulX
H5SOBGHiRSjgj0fEAHL34ZAP3pVfLxDp1AZg3xoEHejt/n7CQQuhmiq0ve31AIZo
gh2k1Byw80i6I8RB3+UJwf2ikyJAuC94c9eCWDowwAoAaGDx2ffdYFRjlV138Seo
ZrmUXbDcQhSKk41clyAmd9HY6Y3MG1cj+I4UXCUCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTWcDAaY1gqEMn3hi410xO/vbsprjAfBgNVHSMEGDAWgBT4hX7PRB5eodcY
H+x+l+bbwSIPwjAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0MDYv
MS8xbkF3R21OWUtoREo5NFl1TmRNVHY3MjdLYTQucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJh
L2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0MDYvMS8xLUlWLXowUWVY
cUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDmyMA0GCSqGSIb3DQEBCwUA
A4IBAQB0hze79IyUa6YoZAF/oDnaWGyP1i5gK4yNOp1ZNo4f2l2H6UGEH8ezcryc
sFSTq+AX6g2lZu+AoNKHH6MJSN2G0vfjM6FUOMr4UYkicPbXfNR/3kTNYEkPppyt
Z2pw+tb9HKX1mtwVlQEvsUPIcTCLvgM+GAyrj/volEj4RPH453joxIKOWwCzvzNl
9kPaBaIpdIeZ+ortKvEDU6+ezF32B+FYvaUV0WA0/elHL4s52fL6YLiN9XGI0i8N
kZnkMiF6tS8y2/jp8/qSCkeIIKLQHMSAYq9Z2VqqCPy3XzjVoYbP20INfGM4tAeL
uEAdkjaG1ODKdtwCANXLONOl4ZTR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:36 2024 by rpki-client on console-fra.rpki-client.org