Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/Lr4yivcTq24flqYNwUucmmVt7T0.roa
File: Lr4yivcTq24flqYNwUucmmVt7T0.roa (raw, json)
Hash identifier: AlvWfWAKgdR7JSbS39TcGlfo5NpmCWOOmuNBTgxIORo=
Subject key identifier: 2E:BE:32:8A:F7:13:AB:6E:1F:96:A6:0D:C1:4B:9C:9A:65:6D:ED:3D
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 01892D
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/Lr4yivcTq24flqYNwUucmmVt7T0.roa
Signing time: Tue 17 May 2022 18:39:29 +0000
ROA not before: Tue 17 May 2022 18:39:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210797
IP address blocks: 178.22.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100653 (0x1892d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: May 17 18:39:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ebe328af713ab6e1f96a60dc14b9c9a656ded3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:6b:7b:19:cb:f3:df:95:eb:e4:1e:de:56:
0a:09:16:4a:03:91:bb:fb:4d:70:db:da:a4:46:68:
72:22:99:48:67:a5:f5:ce:bb:e0:23:dd:86:79:ed:
77:3e:a3:9f:7e:1d:bd:40:3e:11:a4:ce:ff:09:55:
1b:f9:b5:8b:bf:c7:87:2f:e5:89:10:d3:aa:de:9f:
ec:55:45:43:11:4f:ce:ed:c0:f2:7d:39:29:a1:be:
df:b1:52:55:6c:f4:a0:0c:6a:a8:58:6c:df:9a:d2:
33:82:31:f8:c6:8c:90:32:d0:a3:17:bf:14:c0:63:
8b:e1:0d:b5:a1:24:67:35:ba:b1:6f:1b:b0:65:97:
73:86:69:77:f4:52:3e:ca:ac:bd:23:d0:cd:4a:b9:
d5:3f:98:5b:e6:e5:42:2c:8d:bc:cb:24:8a:21:65:
95:4b:27:c9:4a:d5:f7:47:19:d5:c7:5d:a1:ac:e2:
4f:b7:5f:96:4e:cc:ad:0b:ad:52:a4:5e:c2:49:38:
01:ba:99:c1:81:79:2a:72:7c:d3:24:de:b2:27:ad:
a3:59:bd:5b:03:7a:fa:97:b9:77:b5:ad:d5:b6:35:
2b:b8:97:80:c3:9e:53:6e:39:a8:b7:74:fb:c0:a7:
8c:f1:ec:6d:60:0e:67:ab:78:93:81:9f:5c:46:a8:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BE:32:8A:F7:13:AB:6E:1F:96:A6:0D:C1:4B:9C:9A:65:6D:ED:3D
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/Lr4yivcTq24flqYNwUucmmVt7T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.27.0/24
Signature Algorithm: sha256WithRSAEncryption
04:18:40:61:3f:46:f9:68:0f:83:95:6a:a7:3b:15:02:e7:b3:
d0:dd:de:70:90:5f:7d:28:a2:e3:29:2f:68:62:a4:48:31:d2:
1f:5b:6d:47:f6:04:ef:12:76:2f:1a:e2:4a:4d:e7:f2:64:1d:
c6:02:df:46:24:12:2f:57:e8:40:48:37:34:be:6f:c3:9d:36:
55:44:4f:50:7c:42:ba:ec:33:1b:6e:7e:a4:8e:03:fa:2e:06:
d9:51:29:43:33:90:59:a4:ec:41:07:04:65:da:51:57:2a:a0:
c4:ab:da:93:cb:94:2b:df:7c:ec:8c:a0:a5:71:9d:9e:54:97:
da:8b:55:d4:6e:fa:ec:65:af:7c:f1:8a:42:64:3e:8d:0b:3b:
ce:10:c6:89:07:9f:26:30:08:46:6c:7e:9d:af:fc:63:77:fa:
cb:2b:9e:63:86:1f:c2:3d:9d:46:1a:94:8f:a9:29:1e:6d:a9:
67:cd:84:8e:5e:da:fa:69:17:68:2f:a8:d5:4a:2b:8a:91:c4:
6a:ea:cd:74:76:0b:a2:4c:2c:d3:6f:9f:26:2d:52:46:1f:93:
75:a9:9b:4c:e2:da:66:cd:cf:ee:bc:de:4d:ed:67:dc:92:21:
22:08:a3:44:a7:62:fa:2c:4e:22:e7:4b:c3:c0:88:f3:85:5e:
ce:4b:7a:df
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAYktMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
YTZmMDY4M2NjNzRiYWRkMjNhODE0MGMzODVmMWM4MWNlMjRkZjcwHhcNMjIwNTE3
MTgzOTI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyZWJlMzI4YWY3MTNh
YjZlMWY5NmE2MGRjMTRiOWM5YTY1NmRlZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqyVrexnL89+V6+Qe3lYKCRZKA5G7+01w29qkRmhyIplIZ6X1
zrvgI92Gee13PqOffh29QD4RpM7/CVUb+bWLv8eHL+WJENOq3p/sVUVDEU/O7cDy
fTkpob7fsVJVbPSgDGqoWGzfmtIzgjH4xoyQMtCjF78UwGOL4Q21oSRnNbqxbxuw
ZZdzhml39FI+yqy9I9DNSrnVP5hb5uVCLI28yySKIWWVSyfJStX3RxnVx12hrOJP
t1+WTsytC61SpF7CSTgBupnBgXkqcnzTJN6yJ62jWb1bA3r6l7l3ta3VtjUruJeA
w55Tbjmot3T7wKeM8extYA5nq3iTgZ9cRqh+HwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFC6+Mor3E6tuH5amDcFLnJplbe09MB8GA1UdIwQYMBaAFKym8Gg8x0ut0jqB
QMOF8cgc4k33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zMS8yZDQ4MTgtZjE4Mi00YjQ2LTllOGMtMDgyNzk2MWMwNWUwLzEv
THI0eWl2Y1RxMjRmbHFZTndVdWNtbVZ0N1QwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8y
ZDQ4MTgtZjE4Mi00YjQ2LTllOGMtMDgyNzk2MWMwNWUwLzEvcktid2FEekhTNjNT
T29GQXc0WHh5QnppVGZjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshYbMA0GCSqGSIb3DQEBCwUAA4IB
AQAEGEBhP0b5aA+DlWqnOxUC57PQ3d5wkF99KKLjKS9oYqRIMdIfW21H9gTvEnYv
GuJKTefyZB3GAt9GJBIvV+hASDc0vm/DnTZVRE9QfEK67DMbbn6kjgP6LgbZUSlD
M5BZpOxBBwRl2lFXKqDEq9qTy5Qr33zsjKClcZ2eVJfai1XUbvrsZa988YpCZD6N
CzvOEMaJB58mMAhGbH6dr/xjd/rLK55jhh/CPZ1GGpSPqSkebalnzYSOXtr6aRdo
L6jVSiuKkcRq6s10dguiTCzTb58mLVJGH5N1qZtM4tpmzc/uvN5N7WfckiEiCKNE
p2L6LE4i50vDwIjzhV7OS3rf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:56 2023 by rpki-client on console-ams.rpki-client.org