Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/40BUiMjEju9XkmMUiQr4xZ7XZ9M.roa
File: 40BUiMjEju9XkmMUiQr4xZ7XZ9M.roa (raw, json)
Hash identifier: WLKQ1Sjret2WInGq5Dfe5iFgh59c2IZOuIponYk7Mu8=
Subject key identifier: E3:40:54:88:C8:C4:8E:EF:57:92:63:14:89:0A:F8:C5:9E:D7:67:D3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0183170F07F6025FDB0744CE50D442E925F2
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/40BUiMjEju9XkmMUiQr4xZ7XZ9M.roa
Signing time: Wed 07 Sep 2022 08:26:44 +0000
ROA not before: Wed 07 Sep 2022 08:26:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197890
IP address blocks: 178.253.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:0f:07:f6:02:5f:db:07:44:ce:50:d4:42:e9:25:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 7 08:26:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3405488c8c48eef57926314890af8c59ed767d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:30:69:3e:de:68:30:d0:e9:e3:37:f7:80:
83:6b:51:c8:d1:28:da:9b:5e:f8:87:5c:1a:62:b9:
5d:d6:1d:1c:57:64:00:ca:d4:72:96:c4:a6:24:43:
ad:86:1d:d3:c6:3f:1e:f8:69:96:52:cb:50:d6:00:
ed:18:17:31:a3:69:e7:f5:53:ac:bc:b1:24:7b:9f:
b2:a5:12:a0:29:24:91:b6:27:05:19:94:ba:3a:64:
7a:79:86:03:89:a2:52:80:a2:58:83:7a:50:c3:7f:
a9:63:18:d7:e0:40:4f:9e:2a:9e:ea:27:f3:92:46:
e0:bf:df:53:06:ea:58:20:8c:f7:cd:4a:78:45:35:
00:cc:0d:85:d5:7a:b9:83:7d:67:d1:e7:54:77:91:
4c:c8:3e:3b:9a:29:ca:08:a8:04:5b:d4:98:06:66:
e3:4f:1f:2b:30:53:89:3e:57:46:f3:33:c2:8d:38:
31:e8:29:c5:1f:f5:27:64:c1:59:a5:67:24:00:57:
3f:b7:b1:74:9f:87:7b:c9:39:65:8b:51:22:42:38:
51:77:09:94:57:8c:6c:b9:19:54:42:fd:04:0e:39:
d4:3f:f4:64:ec:57:48:2e:14:81:8e:6e:92:4b:39:
25:78:37:76:50:84:74:97:9b:b4:27:77:f1:7b:f6:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:40:54:88:C8:C4:8E:EF:57:92:63:14:89:0A:F8:C5:9E:D7:67:D3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/40BUiMjEju9XkmMUiQr4xZ7XZ9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
43:99:f4:22:08:b5:26:da:8c:b6:0c:3e:43:61:96:68:0f:eb:
ac:7b:2d:f2:8a:f1:41:d5:ec:7a:89:c8:c6:b7:78:c2:4d:00:
11:97:bc:aa:57:72:29:10:04:4e:7d:f0:07:21:6f:51:81:29:
f9:5b:f2:f2:fa:30:76:d2:13:02:f9:90:3c:37:2a:c7:df:5a:
85:49:58:14:9f:08:fe:67:da:86:79:5e:25:6b:86:25:92:42:
d5:e9:ee:96:c5:52:2d:ef:d2:d1:d8:28:72:29:94:5f:02:5e:
c7:0c:e1:1d:52:9d:c1:20:19:2e:90:3b:4d:1c:fb:15:4a:5a:
ce:5a:d7:2a:88:b1:7d:8e:60:6d:bf:7a:d4:e2:07:b6:07:b8:
88:b4:ec:ba:94:17:50:d8:18:c2:60:65:a9:70:0f:e2:9e:d5:
de:4c:eb:f3:e6:32:43:6a:4d:6f:92:7e:c7:9c:11:a0:8f:11:
23:b5:88:bc:37:35:b8:d0:d6:97:e0:25:ba:af:e9:ad:e5:1f:
49:d1:4a:b1:08:03:75:b1:ff:73:80:5a:00:b7:9f:18:57:e9:
14:d1:9b:0e:89:fc:3c:39:c3:ea:be:a8:2c:22:e8:af:29:b8:
d6:07:e4:fb:b4:e2:de:a6:c3:88:76:3b:97:7d:4a:41:95:3b:
6d:46:18:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMXDwf2Al/bB0TOUNRC6SXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIwOTA3MDgyNjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzQwNTQ4OGM4YzQ4ZWVmNTc5MjYzMTQ4OTBhZjhjNTllZDc2N2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNMwaT7eaDDQ6eM394CDa1HI0Sja
m174h1waYrld1h0cV2QAytRylsSmJEOthh3Txj8e+GmWUstQ1gDtGBcxo2nn9VOs
vLEke5+ypRKgKSSRticFGZS6OmR6eYYDiaJSgKJYg3pQw3+pYxjX4EBPniqe6ifz
kkbgv99TBupYIIz3zUp4RTUAzA2F1Xq5g31n0edUd5FMyD47minKCKgEW9SYBmbj
Tx8rMFOJPldG8zPCjTgx6CnFH/UnZMFZpWckAFc/t7F0n4d7yTlli1EiQjhRdwmU
V4xsuRlUQv0EDjnUP/Rk7FdILhSBjm6SSzkleDd2UIR0l5u0J3fxe/aI+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFONAVIjIxI7vV5JjFIkK+MWe12fTMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvNDBCVWlNakVqdTlYa21NVWlRcjR4WjdYWjlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3rMA0G
CSqGSIb3DQEBCwUAA4IBAQBDmfQiCLUm2oy2DD5DYZZoD+usey3yivFB1ex6icjG
t3jCTQARl7yqV3IpEAROffAHIW9RgSn5W/Ly+jB20hMC+ZA8NyrH31qFSVgUnwj+
Z9qGeV4la4YlkkLV6e6WxVIt79LR2ChyKZRfAl7HDOEdUp3BIBkukDtNHPsVSlrO
WtcqiLF9jmBtv3rU4ge2B7iItOy6lBdQ2BjCYGWpcA/intXeTOvz5jJDak1vkn7H
nBGgjxEjtYi8NzW40NaX4CW6r+mt5R9J0UqxCAN1sf9zgFoAt58YV+kU0ZsOifw8
OcPqvqgsIuivKbjWB+T7tOLepsOIdjuXfUpBlTttRhg9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:25 2024 by rpki-client on console-fra.rpki-client.org