Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/oMCTCn-VDvstSUFDrCzj3NQcDE0.roa
File: oMCTCn-VDvstSUFDrCzj3NQcDE0.roa (raw, json)
Hash identifier: 2LRetscJaNHqxH+kaVBdrhF2VH2jfkHn/CHVEJ7YPKg=
Subject key identifier: A0:C0:93:0A:7F:95:0E:FB:2D:49:41:43:AC:2C:E3:DC:D4:1C:0C:4D
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0183410C6CD1DEE1A9E18ED4FAC195490547
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/oMCTCn-VDvstSUFDrCzj3NQcDE0.roa
Signing time: Thu 15 Sep 2022 12:07:56 +0000
ROA not before: Thu 15 Sep 2022 12:07:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 178.171.70.0/24 maxlen: 24
178.171.69.0/24 maxlen: 24
158.46.177.0/24 maxlen: 24
178.171.88.0/23 maxlen: 23
178.171.20.0/22 maxlen: 24
178.171.32.0/22 maxlen: 22
178.171.36.0/24 maxlen: 24
178.171.37.0/24 maxlen: 24
158.46.251.0/24 maxlen: 24
158.46.250.0/24 maxlen: 24
158.46.188.0/22 maxlen: 24
178.171.104.0/24 maxlen: 24
178.171.101.0/24 maxlen: 24
178.171.100.0/24 maxlen: 24
158.46.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:0c:6c:d1:de:e1:a9:e1:8e:d4:fa:c1:95:49:05:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Sep 15 12:07:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0c0930a7f950efb2d494143ac2ce3dcd41c0c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:05:65:ac:ec:87:56:3d:f6:75:fc:27:2a:
ff:fb:10:54:ad:6f:8e:e6:bc:a4:d5:8c:c1:55:4a:
ec:93:20:f2:55:22:c3:81:d6:30:32:a6:e1:bc:ce:
e0:ef:6b:cf:9a:7b:4c:e2:c4:ec:97:69:89:63:d0:
46:2c:d7:e6:f3:d7:c0:6c:89:86:0a:d6:89:34:21:
49:30:8f:a2:7e:5b:ef:1f:7c:15:6d:2d:df:16:69:
b9:97:e4:73:ea:0c:88:63:62:2c:f9:cf:b5:1b:cc:
3b:be:65:68:e8:08:88:b1:38:50:e5:23:11:c3:67:
bb:49:86:b0:dd:ce:d7:fa:8a:62:5d:de:19:fc:f0:
3c:91:99:4a:52:7f:a3:ad:0b:90:e3:a1:b5:2e:df:
5e:65:2b:7a:dd:55:ef:d4:a0:01:b4:48:a0:6f:02:
0e:35:57:a4:c9:de:f6:25:42:74:eb:82:d6:69:fe:
b6:ae:cf:30:ae:1a:a6:b4:c9:d8:9b:b9:d9:17:27:
9c:31:68:38:7b:eb:d4:cc:b0:33:a1:32:35:fa:24:
ca:4b:6a:25:1f:cc:e9:7b:89:8a:55:e1:8c:48:f1:
37:58:0a:b1:4d:c5:77:1b:76:8b:07:5e:12:3c:07:
7f:8d:e7:7c:d4:f3:6b:55:0d:d0:45:ba:b5:f8:67:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C0:93:0A:7F:95:0E:FB:2D:49:41:43:AC:2C:E3:DC:D4:1C:0C:4D
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/oMCTCn-VDvstSUFDrCzj3NQcDE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.177.0/24
158.46.188.0/22
158.46.200.0/21
158.46.250.0/23
178.171.20.0/22
178.171.32.0-178.171.37.255
178.171.69.0-178.171.70.255
178.171.88.0/23
178.171.100.0/23
178.171.104.0/24
Signature Algorithm: sha256WithRSAEncryption
32:28:ec:e9:91:0f:f7:08:42:9a:cc:ae:55:e2:b6:67:cf:70:
9f:9e:bc:0a:3d:d6:1a:0d:97:65:26:0b:41:72:ff:54:c4:c5:
c2:c4:6f:a7:10:5a:61:33:cc:f1:39:08:1c:07:44:54:13:23:
0f:43:6b:77:25:5f:a2:ab:97:61:93:56:8e:49:f5:17:66:f0:
13:c0:3a:b4:d1:82:6e:f8:a6:48:36:d6:f2:fc:72:61:36:4f:
89:4e:a9:a1:c2:26:d9:48:72:62:a5:13:8d:63:61:50:88:02:
1b:86:12:f6:7d:a7:89:75:d6:ba:82:60:b0:8a:eb:41:78:ea:
71:94:04:8a:f3:9b:e2:99:ec:57:98:f9:b2:55:c8:7f:2e:0d:
51:62:00:a8:dc:54:7a:dc:19:28:85:53:c1:59:29:95:36:1c:
76:0f:17:99:88:2a:66:ae:56:22:b6:89:7a:d1:82:3d:74:9b:
99:da:f0:98:a3:42:05:a1:59:06:9e:ad:28:78:50:b4:f1:1e:
0e:fa:33:18:b6:3b:8d:b0:22:02:16:17:f2:15:86:98:bd:b3:
9d:df:01:e0:eb:dd:0f:b2:b4:56:e3:3c:50:96:4a:ca:76:23:
21:f9:3e:fd:fc:a5:28:a0:b8:66:fb:e4:3a:f0:09:e4:37:e2:
29:67:8b:21
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYNBDGzR3uGp4Y7U+sGVSQVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl
NjNjMTMwHhcNMjIwOTE1MTIwNzU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGMwOTMwYTdmOTUwZWZiMmQ0OTQxNDNhYzJjZTNkY2Q0MWMwYzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22oFZazsh1Y99nX8Jyr/+xBUrW+O
5ryk1YzBVUrskyDyVSLDgdYwMqbhvM7g72vPmntM4sTsl2mJY9BGLNfm89fAbImG
CtaJNCFJMI+iflvvH3wVbS3fFmm5l+Rz6gyIY2Is+c+1G8w7vmVo6AiIsThQ5SMR
w2e7SYaw3c7X+opiXd4Z/PA8kZlKUn+jrQuQ46G1Lt9eZSt63VXv1KABtEigbwIO
NVekyd72JUJ064LWaf62rs8wrhqmtMnYm7nZFyecMWg4e+vUzLAzoTI1+iTKS2ol
H8zpe4mKVeGMSPE3WAqxTcV3G3aLB14SPAd/jed81PNrVQ3QRbq1+GcU5QIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFKDAkwp/lQ77LUlBQ6ws49zUHAxNMB8GA1UdIwQY
MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt
YmE3NzFmZmQyNjljLzEvb01DVENuLVZEdnN0U1VGRHJDemozTlFjREUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj
LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAni6xAwQC
ni68AwQDni7IAwQBni76AwQCsqsUMAwDBAWyqyADBAGyqyQwDAMEALKrRQMEALKr
RgMEAbKrWAMEAbKrZAMEALKraDANBgkqhkiG9w0BAQsFAAOCAQEAMijs6ZEP9whC
msyuVeK2Z89wn568Cj3WGg2XZSYLQXL/VMTFwsRvpxBaYTPM8TkIHAdEVBMjD0Nr
dyVfoquXYZNWjkn1F2bwE8A6tNGCbvimSDbW8vxyYTZPiU6pocIm2UhyYqUTjWNh
UIgCG4YS9n2niXXWuoJgsIrrQXjqcZQEivOb4pnsV5j5slXIfy4NUWIAqNxUetwZ
KIVTwVkplTYcdg8XmYgqZq5WIraJetGCPXSbmdrwmKNCBaFZBp6tKHhQtPEeDvoz
GLY7jbAiAhYX8hWGmL2znd8B4OvdD7K0VuM8UJZKynYjIfk+/fylKKC4ZvvkOvAJ
5DfiKWeLIQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:09 2024 by rpki-client on console-ams.rpki-client.org