Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Ni_BvoaW4m7aXYmLl9OeS1RYu-Q.roa
File: Ni_BvoaW4m7aXYmLl9OeS1RYu-Q.roa (raw, json)
Hash identifier: 8zX+TNxP/5m8fqLAV8L7yi0cbeib5gNsGcILueDqc3Y=
Subject key identifier: 36:2F:C1:BE:86:96:E2:6E:DA:5D:89:8B:97:D3:9E:4B:54:58:BB:E4
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 064D21A2
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Ni_BvoaW4m7aXYmLl9OeS1RYu-Q.roa
Signing time: Tue 15 Mar 2022 13:58:05 +0000
ROA not before: Tue 15 Mar 2022 13:58:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 178.171.48.0/23 maxlen: 23
178.171.50.0/23 maxlen: 23
178.171.62.0/23 maxlen: 23
178.171.60.0/23 maxlen: 23
178.171.0.0/20 maxlen: 20
178.171.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105718178 (0x64d21a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Mar 15 13:58:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=362fc1be8696e26eda5d898b97d39e4b5458bbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:8d:24:f6:24:57:94:a4:5d:54:c3:31:cf:
53:17:09:00:03:fb:8a:43:ba:bd:28:58:c7:ee:e2:
e5:b6:bd:2c:cf:39:45:94:a7:7b:28:94:69:07:bb:
a9:b6:f2:2d:94:ef:a7:c9:51:1a:4a:d3:11:c9:a7:
84:ad:60:c4:82:3c:6c:6f:73:19:0c:1f:a1:50:cc:
35:df:56:a0:cf:da:2b:6d:2f:73:56:f4:71:99:3c:
3c:b8:96:cf:9d:f6:00:61:0e:5e:4b:58:55:d3:09:
4e:4e:df:f6:46:6d:3e:ed:8e:59:76:47:51:47:89:
8b:a5:9b:2d:3c:c6:c3:5c:47:10:85:38:bd:9d:03:
b0:ce:ec:72:3b:c0:bb:c5:c8:c6:16:c6:09:01:4a:
7f:19:40:10:93:a1:54:52:78:bf:41:2c:79:f6:98:
08:c0:04:60:59:b0:52:9a:c1:7a:65:f9:85:40:74:
5b:7b:2c:5f:a7:60:16:99:fc:b0:16:6a:f3:18:7b:
7e:13:58:dc:93:e5:da:88:2a:7a:a5:41:2e:87:e2:
84:58:50:c4:d1:f5:12:f8:d2:d0:11:ca:cb:40:15:
88:1f:17:6f:78:8f:15:ce:83:00:1f:bd:0b:61:68:
82:62:1f:0f:cb:0a:96:95:ee:f1:6a:b4:7f:72:e0:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2F:C1:BE:86:96:E2:6E:DA:5D:89:8B:97:D3:9E:4B:54:58:BB:E4
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Ni_BvoaW4m7aXYmLl9OeS1RYu-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.171.0.0/20
178.171.48.0/22
178.171.60.0/22
178.171.119.0/24
Signature Algorithm: sha256WithRSAEncryption
50:28:02:10:dd:3e:ae:1e:e7:83:d4:fc:98:4e:5c:53:3c:a9:
31:0c:03:b5:f2:ed:f4:4e:0a:52:30:f4:18:94:2f:e9:57:7f:
d5:30:23:5e:6b:c1:92:5a:34:0e:78:c8:7b:e8:10:f9:78:80:
f2:4b:0f:e1:9f:02:68:3c:b8:7e:76:b0:64:19:f6:37:2b:a3:
9a:ed:89:dd:02:d5:d4:26:1e:7b:4b:02:30:5b:23:3e:57:ae:
1d:6b:ed:d2:70:93:be:7e:bd:f5:33:a6:19:f7:1e:7c:72:0e:
a1:89:74:d0:24:d9:b6:35:fe:af:59:51:b6:3c:d1:72:48:02:
e1:3f:84:e6:3c:24:fd:c0:3a:b8:ee:55:a4:8b:30:59:17:fc:
62:ef:5c:40:0f:3f:a0:3d:01:73:d2:0c:c6:c3:49:c3:5d:63:
8f:85:bb:cc:12:05:c0:2c:6d:29:b2:48:82:78:01:a1:62:43:
55:5e:00:4d:e4:cf:25:d1:b9:e2:6a:76:b3:f2:f8:78:1b:11:
88:cb:2d:66:b4:5d:d7:10:b6:44:a4:9a:2d:47:91:30:d6:e1:
c1:9f:f1:3c:c2:aa:c9:8a:f4:e8:f8:2e:15:f9:2d:1f:08:99:
2a:10:e0:ba:cc:94:2a:c6:60:3a:f1:e7:72:34:1e:f4:43:fc:
fc:f8:c9:a4
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBk0hojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZDExY2IwMTVkZjliYWFiNjEyMjhkYmJjZTE3ZGQ0ZTAwZTYzYzEzMB4XDTIyMDMx
NTEzNTgwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzYyZmMxYmU4Njk2
ZTI2ZWRhNWQ4OThiOTdkMzllNGI1NDU4YmJlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN+PjST2JFeUpF1UwzHPUxcJAAP7ikO6vShYx+7i5ba9LM85
RZSneyiUaQe7qbbyLZTvp8lRGkrTEcmnhK1gxII8bG9zGQwfoVDMNd9WoM/aK20v
c1b0cZk8PLiWz532AGEOXktYVdMJTk7f9kZtPu2OWXZHUUeJi6WbLTzGw1xHEIU4
vZ0DsM7scjvAu8XIxhbGCQFKfxlAEJOhVFJ4v0EsefaYCMAEYFmwUprBemX5hUB0
W3ssX6dgFpn8sBZq8xh7fhNY3JPl2ogqeqVBLofihFhQxNH1EvjS0BHKy0AViB8X
b3iPFc6DAB+9C2FogmIfD8sKlpXu8Wq0f3LgQ6cCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQ2L8G+hpbibtpdiYuX055LVFi75DAfBgNVHSMEGDAWgBSNEcsBXfm6q2Ei
jbvOF91OAOY8EzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pSSExBVjM1dXF0aElvMjd6aGZkVGdEbVBCTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvNWQ4OTE1LWM0NDgtNDBlNy04Y2FhLWJhNzcxZmZkMjY5Yy8x
L05pX0J2b2FXNG03YVhZbUxsOU9lUzFSWXUtUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYv
NWQ4OTE1LWM0NDgtNDBlNy04Y2FhLWJhNzcxZmZkMjY5Yy8xL2pSSExBVjM1dXF0
aElvMjd6aGZkVGdEbVBCTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEBLKrAAMEArKrMAMEArKrPAMEALKr
dzANBgkqhkiG9w0BAQsFAAOCAQEAUCgCEN0+rh7ng9T8mE5cUzypMQwDtfLt9E4K
UjD0GJQv6Vd/1TAjXmvBklo0DnjIe+gQ+XiA8ksP4Z8CaDy4fnawZBn2Nyujmu2J
3QLV1CYee0sCMFsjPleuHWvt0nCTvn699TOmGfcefHIOoYl00CTZtjX+r1lRtjzR
ckgC4T+E5jwk/cA6uO5VpIswWRf8Yu9cQA8/oD0Bc9IMxsNJw11jj4W7zBIFwCxt
KbJIgngBoWJDVV4ATeTPJdG54mp2s/L4eBsRiMstZrRd1xC2RKSaLUeRMNbhwZ/x
PMKqyYr06PguFfktHwiZKhDgusyUKsZgOvHncjQe9EP8/PjJpA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:09 2024 by rpki-client on console-ams.rpki-client.org