Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/7CHUO-5iu_rMnfpcYvEiB6ByXKQ.roa
File: 7CHUO-5iu_rMnfpcYvEiB6ByXKQ.roa (raw, json)
Hash identifier: VJ4GyEFoeK5dvl9xbUxh01Rh57blj5EV55QQLeEMwvc=
Subject key identifier: EC:21:D4:3B:EE:62:BB:FA:CC:9D:FA:5C:62:F1:22:07:A0:72:5C:A4
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 0184A9FD2EF59867704BE1E6BF11F972990C
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/7CHUO-5iu_rMnfpcYvEiB6ByXKQ.roa
Signing time: Thu 24 Nov 2022 14:14:12 +0000
ROA not before: Thu 24 Nov 2022 14:14:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196755
IP address blocks: 157.143.248.0/21 maxlen: 21
178.157.24.0/23 maxlen: 23
178.157.28.0/22 maxlen: 22
178.157.26.0/23 maxlen: 23
80.251.108.0/23 maxlen: 23
217.181.252.0/23 maxlen: 23
178.157.40.0/22 maxlen: 22
178.157.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:fd:2e:f5:98:67:70:4b:e1:e6:bf:11:f9:72:99:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Nov 24 14:14:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec21d43bee62bbfacc9dfa5c62f12207a0725ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:1f:91:92:3f:58:8f:87:40:99:94:fa:93:
31:2d:7d:cd:0a:2a:69:b7:08:bb:28:c8:de:1c:c1:
e4:74:11:85:c2:50:e1:03:38:27:42:fe:a4:ee:7c:
ae:f4:a3:1f:aa:99:92:32:e4:b2:3e:4d:12:71:32:
ef:a5:d0:3c:75:19:da:cf:9c:e4:4c:a6:63:2e:d8:
0f:77:f2:cd:e4:7c:4d:64:2d:69:d3:e1:b5:84:f7:
c6:43:69:5e:55:d3:65:1f:48:28:6d:e4:1a:8b:73:
ae:c5:32:7f:13:69:2c:e9:8c:ba:d5:12:f5:93:6f:
72:57:a2:ee:78:dd:5f:b6:0c:d1:3f:14:f5:dd:64:
07:61:68:cd:d9:2c:ac:a5:ea:9d:6d:ed:de:ff:2f:
39:60:a6:3c:a8:82:53:79:5f:04:3d:6f:c3:3a:ed:
54:63:4b:a5:b1:a5:2e:9b:12:10:da:cf:20:b2:37:
b1:58:a7:53:1f:b3:7c:da:1e:2d:df:25:b5:93:a2:
78:78:e1:8a:f8:12:d6:cf:68:6b:00:d2:d4:54:41:
bd:b8:86:fd:0d:3c:59:74:a1:b8:47:cc:18:b7:ec:
8a:ce:ec:eb:c5:3a:8b:82:c9:43:77:d5:f6:04:a3:
5a:04:1d:03:11:f8:31:94:58:28:7c:35:ef:3e:99:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:D4:3B:EE:62:BB:FA:CC:9D:FA:5C:62:F1:22:07:A0:72:5C:A4
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/7CHUO-5iu_rMnfpcYvEiB6ByXKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.251.108.0/23
157.143.248.0/21
178.157.24.0/21
178.157.40.0/21
217.181.252.0/23
Signature Algorithm: sha256WithRSAEncryption
51:ee:3c:6f:d8:92:a7:85:55:dd:c5:d5:0c:2b:4a:33:ad:d9:
33:86:b1:84:da:ea:44:75:36:b1:04:55:71:08:3a:98:a3:85:
82:74:f4:db:3c:23:fd:09:3a:9a:46:7f:27:a8:2f:b4:74:da:
04:c7:2c:46:fb:70:f6:8c:38:25:13:80:c1:fd:53:36:1d:f4:
94:e6:24:71:37:29:8a:98:db:b7:c5:46:a4:55:bf:89:e3:a3:
6c:7f:7f:05:28:82:79:e7:cb:a2:cd:5a:cc:43:d2:4e:0a:51:
83:90:5a:db:a6:88:ee:a8:57:cb:d9:72:ec:31:62:59:b1:64:
8c:f4:f1:79:31:bf:c6:dd:53:f0:75:0b:be:cb:71:01:d7:b2:
3a:a6:6c:f6:33:dc:93:69:a1:14:f2:95:23:30:96:b2:bb:af:
8d:86:03:c9:2b:c0:a6:5e:72:fd:5d:df:de:d2:f2:ce:d7:41:
ef:0b:88:f1:10:a8:6f:4a:c2:0e:5d:1c:8d:63:c9:36:02:af:
23:ac:89:6f:bc:5a:72:86:03:d1:48:46:7d:24:22:df:72:a5:
33:7c:c9:11:0d:81:d3:d6:c9:39:50:eb:4b:7b:f5:e5:11:d9:
1f:ff:a0:5b:6b:b6:0e:1f:7c:4b:63:e6:0c:e5:d4:29:3b:ba:
d5:83:36:93
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYSp/S71mGdwS+HmvxH5cpkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDc5YjgzYzUyMGQ3ODQ0NDVjMjQ4MjhiYWI2MzNmMGQ3
MDJjZjMwHhcNMjIxMTI0MTQxNDEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzIxZDQzYmVlNjJiYmZhY2M5ZGZhNWM2MmYxMjIwN2EwNzI1Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHwfkZI/WI+HQJmU+pMxLX3NCipp
twi7KMjeHMHkdBGFwlDhAzgnQv6k7nyu9KMfqpmSMuSyPk0ScTLvpdA8dRnaz5zk
TKZjLtgPd/LN5HxNZC1p0+G1hPfGQ2leVdNlH0gobeQai3OuxTJ/E2ks6Yy61RL1
k29yV6LueN1ftgzRPxT13WQHYWjN2Syspeqdbe3e/y85YKY8qIJTeV8EPW/DOu1U
Y0ulsaUumxIQ2s8gsjexWKdTH7N82h4t3yW1k6J4eOGK+BLWz2hrANLUVEG9uIb9
DTxZdKG4R8wYt+yKzuzrxTqLgslDd9X2BKNaBB0DEfgxlFgofDXvPpmMNwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOwh1DvuYrv6zJ36XGLxIgegclykMB8GA1UdIwQY
MBaAFPFHm4PFINeERFwkgourYz8NcCzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEt
YmRkNGFmNWYzNWQxLzEvN0NIVU8tNWl1X3JNbmZwY1l2RWlCNkJ5WEtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEtYmRkNGFmNWYzNWQx
LzEvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUPtsAwQD
nY/4AwQDsp0YAwQDsp0oAwQB2bX8MA0GCSqGSIb3DQEBCwUAA4IBAQBR7jxv2JKn
hVXdxdUMK0ozrdkzhrGE2upEdTaxBFVxCDqYo4WCdPTbPCP9CTqaRn8nqC+0dNoE
xyxG+3D2jDglE4DB/VM2HfSU5iRxNymKmNu3xUakVb+J46Nsf38FKIJ558uizVrM
Q9JOClGDkFrbpojuqFfL2XLsMWJZsWSM9PF5Mb/G3VPwdQu+y3EB17I6pmz2M9yT
aaEU8pUjMJayu6+NhgPJK8CmXnL9Xd/e0vLO10HvC4jxEKhvSsIOXRyNY8k2Aq8j
rIlvvFpyhgPRSEZ9JCLfcqUzfMkRDYHT1sk5UOtLe/XlEdkf/6Bba7YOH3xLY+YM
5dQpO7rVgzaT
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org