Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jpg0bT1lKJ_TXjVAoU4RvmmHnjE.roa
File: jpg0bT1lKJ_TXjVAoU4RvmmHnjE.roa (raw, json)
Hash identifier: tpi2p7bTeHdXgrk7Zqj6If4ScsUAv2L4SezNjaLlHA8=
Subject key identifier: 8E:98:34:6D:3D:65:28:9F:D3:5E:35:40:A1:4E:11:BE:69:87:9E:31
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0182A97C0F3547B8EC2A05182CF1C9F7F42F
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jpg0bT1lKJ_TXjVAoU4RvmmHnjE.roa
Signing time: Wed 17 Aug 2022 01:47:35 +0000
ROA not before: Wed 17 Aug 2022 01:47:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 178.171.50.0/23 maxlen: 23
178.171.48.0/23 maxlen: 23
178.171.62.0/23 maxlen: 23
158.46.176.0/22 maxlen: 22
178.171.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a9:7c:0f:35:47:b8:ec:2a:05:18:2c:f1:c9:f7:f4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Aug 17 01:47:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e98346d3d65289fd35e3540a14e11be69879e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:12:36:43:06:b5:5f:c2:e6:45:82:dd:1f:
69:94:85:40:98:b2:f7:ad:04:06:cb:3d:eb:8e:f0:
be:4d:4f:f4:cc:e5:00:9f:25:ed:c0:62:ff:e6:72:
85:fc:5a:07:b5:c0:11:7d:03:f3:34:0b:9f:43:7b:
47:a6:38:ad:44:e3:7a:4b:ce:e3:c8:97:8c:e5:2d:
c0:c2:0a:88:ad:b5:e5:3e:d0:1a:3b:2d:f1:f9:35:
a1:6c:ee:4c:57:8b:da:2a:2b:06:1a:b3:52:35:ef:
32:b8:7f:c5:77:f7:52:da:12:27:a1:27:6c:09:88:
27:8c:cb:5e:23:37:a9:8d:e3:e5:b6:6d:0b:eb:a6:
81:28:ca:54:52:f6:86:ea:bf:11:13:3d:7e:ce:cf:
3a:bc:8b:95:b1:5e:12:8c:bb:38:97:73:10:4d:4d:
42:c5:02:9a:f1:81:4b:4e:c1:dd:ca:46:ff:a0:df:
1e:38:0c:c7:eb:92:5a:3d:a8:e8:ff:7f:b5:1b:b7:
6f:03:05:35:13:09:fc:fa:df:66:d7:f4:e5:c2:fc:
7d:0e:d4:5f:ff:1e:a0:b9:eb:55:83:b5:b9:f1:71:
a7:7e:cc:2d:69:c2:ba:61:a2:5f:58:e2:13:d6:15:
cf:f3:37:c9:96:a2:b7:7d:4b:6c:88:c7:d6:1f:0f:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:34:6D:3D:65:28:9F:D3:5E:35:40:A1:4E:11:BE:69:87:9E:31
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jpg0bT1lKJ_TXjVAoU4RvmmHnjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.176.0/22
178.171.48.0/22
178.171.62.0/23
178.171.119.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:36:26:9b:f4:77:3d:64:5b:90:d0:80:78:d0:ab:90:25:4f:
e6:79:69:8a:13:e3:6e:5c:56:66:ff:59:92:98:44:c3:79:2b:
09:ed:df:93:ad:d2:7a:b6:aa:c2:ea:ae:52:77:c7:60:a8:aa:
d6:44:80:1f:6c:15:d4:7d:55:28:6c:4f:da:87:27:aa:fa:25:
37:6b:04:eb:36:e4:0f:af:95:37:be:a0:55:fa:01:18:dd:b1:
93:a4:e7:58:d7:1c:0c:5f:1f:2d:34:54:97:d0:85:fd:0a:e8:
ff:d0:af:3e:f1:f1:ae:30:f4:bb:f9:a8:9d:14:71:8f:15:e7:
b5:01:ac:42:95:20:a1:ce:7a:df:6d:36:b4:02:00:df:67:95:
5a:fa:8c:2f:bf:55:a9:5e:aa:65:4c:eb:e8:8a:ee:94:bd:bf:
72:a5:25:15:06:60:41:9a:18:d6:a0:80:96:77:e7:d1:4f:19:
db:ad:b7:d5:66:f3:32:77:31:01:7e:1b:eb:23:28:ac:c2:29:
18:cc:1d:01:d7:8d:43:cd:19:8d:10:9e:e8:f6:67:46:81:f6:
ef:bb:48:ef:27:b2:7e:91:5b:48:ad:72:f0:e8:5e:f9:72:32:
98:5c:4d:a9:08:87:3a:d0:6b:1e:72:70:ad:2c:8e:da:37:77:
84:2d:19:ae
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYKpfA81R7jsKgUYLPHJ9/QvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl
NjNjMTMwHhcNMjIwODE3MDE0NzM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTk4MzQ2ZDNkNjUyODlmZDM1ZTM1NDBhMTRlMTFiZTY5ODc5ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6QSNkMGtV/C5kWC3R9plIVAmLL3
rQQGyz3rjvC+TU/0zOUAnyXtwGL/5nKF/FoHtcARfQPzNAufQ3tHpjitRON6S87j
yJeM5S3AwgqIrbXlPtAaOy3x+TWhbO5MV4vaKisGGrNSNe8yuH/Fd/dS2hInoSds
CYgnjMteIzepjePltm0L66aBKMpUUvaG6r8REz1+zs86vIuVsV4SjLs4l3MQTU1C
xQKa8YFLTsHdykb/oN8eOAzH65JaPajo/3+1G7dvAwU1Ewn8+t9m1/Tlwvx9DtRf
/x6guetVg7W58XGnfswtacK6YaJfWOIT1hXP8zfJlqK3fUtsiMfWHw83zwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFI6YNG09ZSif0141QKFOEb5ph54xMB8GA1UdIwQY
MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt
YmE3NzFmZmQyNjljLzEvanBnMGJUMWxLSl9UWGpWQW9VNFJ2bW1IbmpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj
LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCni6wAwQC
sqswAwQBsqs+AwQAsqt3MA0GCSqGSIb3DQEBCwUAA4IBAQArNiab9Hc9ZFuQ0IB4
0KuQJU/meWmKE+NuXFZm/1mSmETDeSsJ7d+TrdJ6tqrC6q5Sd8dgqKrWRIAfbBXU
fVUobE/ahyeq+iU3awTrNuQPr5U3vqBV+gEY3bGTpOdY1xwMXx8tNFSX0IX9Cuj/
0K8+8fGuMPS7+aidFHGPFee1AaxClSChznrfbTa0AgDfZ5Va+owvv1WpXqplTOvo
iu6Uvb9ypSUVBmBBmhjWoICWd+fRTxnbrbfVZvMydzEBfhvrIyiswikYzB0B141D
zRmNEJ7o9mdGgfbvu0jvJ7J+kVtIrXLw6F75cjKYXE2pCIc60GsecnCtLI7aN3eE
LRmu
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:04 2023 by rpki-client on console-ams.rpki-client.org