Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ECWPCGiyM58sA9hdc7tOMvvaz88.roa
File: ECWPCGiyM58sA9hdc7tOMvvaz88.roa (raw, json)
Hash identifier: wjY0a5g07/6cvsjRDNqLd0Pr9SKLQAY5sfMe2GqQTx8=
Subject key identifier: 10:25:8F:08:68:B2:33:9F:2C:03:D8:5D:73:BB:4E:32:FB:DA:CF:CF
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 03D83CA1
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ECWPCGiyM58sA9hdc7tOMvvaz88.roa
Signing time: Sat 01 Jan 2022 13:04:04 +0000
ROA not before: Sat 01 Jan 2022 13:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62235
IP address blocks: 178.19.38.0/23 maxlen: 23
178.19.39.0/24 maxlen: 24
178.19.36.0/24 maxlen: 24
178.19.36.0/23 maxlen: 23
178.19.38.0/24 maxlen: 24
178.19.36.0/22 maxlen: 22
178.19.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64502945 (0x3d83ca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 13:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10258f0868b2339f2c03d85d73bb4e32fbdacfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:13:da:37:c8:1d:4c:8f:05:82:fc:70:eb:
2b:4d:ff:20:24:d4:be:e7:b6:cb:45:8f:d3:51:df:
70:6b:95:5f:02:8e:32:9d:0c:19:0f:31:75:4a:01:
1a:70:d0:78:7e:c3:73:52:43:2c:75:d0:55:94:84:
ba:68:5e:72:bd:8c:29:a7:96:79:9a:45:01:45:ba:
10:82:ab:fa:12:e2:42:76:44:b5:7e:21:60:a4:0d:
7d:8c:6d:14:71:e6:27:54:d8:1a:91:7a:4b:e8:63:
e6:04:7c:82:52:15:1a:21:c0:c6:51:c3:e3:8f:cc:
36:2b:09:4f:4b:56:c7:7a:d6:dd:a7:5e:6b:a9:32:
88:5b:2b:f9:57:9a:75:a5:c8:26:88:7c:f7:89:ef:
e0:70:1d:86:5a:64:7d:53:56:e7:14:73:b3:42:4d:
a2:cf:10:13:24:b3:ca:d5:c0:20:24:a3:92:65:3f:
08:55:cf:25:3d:aa:6f:a3:68:85:78:5f:cf:98:83:
ca:f6:5a:b0:54:79:77:b0:4d:68:34:d2:5e:89:f2:
a1:56:de:b4:b9:79:29:d6:fc:bd:38:9a:27:57:db:
2b:f4:28:60:d1:8e:27:4b:06:b5:00:8f:79:af:cc:
bd:d1:64:06:a7:11:cc:5e:68:cf:cc:33:6b:45:2d:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:8F:08:68:B2:33:9F:2C:03:D8:5D:73:BB:4E:32:FB:DA:CF:CF
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ECWPCGiyM58sA9hdc7tOMvvaz88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.36.0/22
Signature Algorithm: sha256WithRSAEncryption
96:f3:e7:3e:35:df:f5:be:08:12:80:ee:a5:9c:2f:55:19:0b:
23:c5:fe:b0:ee:9d:9f:36:0e:b7:78:49:4c:6c:5f:5b:0d:3b:
9b:e6:17:ab:cf:95:f4:0f:38:41:e8:cb:49:84:28:6a:c0:94:
fc:9a:3c:d8:4a:0e:fe:d2:a7:ae:c6:ef:ba:ea:88:7e:61:1f:
48:bd:e5:0c:2f:5e:d9:5e:50:2d:9a:aa:c8:44:f4:4b:fe:ac:
84:b4:06:be:26:98:e0:ea:f4:75:b3:99:12:b1:8c:63:25:96:
5d:36:24:fa:6f:fc:4b:1f:1a:cc:2c:94:ae:dc:c1:e2:24:8c:
cb:c4:e8:d4:e1:eb:b3:76:4b:d6:5d:01:43:c4:3c:89:27:51:
a5:1e:99:1c:d3:55:bd:44:97:e4:98:41:b7:f4:4a:47:79:5a:
1c:7a:89:cf:e5:30:4b:aa:9a:1a:3b:2d:6b:ec:9a:c7:8c:28:
b6:f7:62:1c:d1:41:b3:f2:71:36:84:5a:c9:51:3a:36:92:ff:
3b:d7:bf:01:8d:1f:01:65:48:81:35:b7:b7:86:db:78:34:bf:
61:1d:b9:00:0c:14:48:71:5b:68:2f:3a:f8:05:30:1a:e4:4f:
43:e1:e5:3c:3b:60:7b:9f:4b:db:95:73:7c:2a:66:bf:f6:18:
b0:fc:a5:95
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA9g8oTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTM0YzQ5ZmNmYThhNDUwNDFkOTVlZDRkOGQ0ZmM2OWM3MjdhNDY3MB4XDTIyMDEw
MTEzMDQwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTAyNThmMDg2OGIy
MzM5ZjJjMDNkODVkNzNiYjRlMzJmYmRhY2ZjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALcVE9o3yB1MjwWC/HDrK03/ICTUvue2y0WP01HfcGuVXwKO
Mp0MGQ8xdUoBGnDQeH7Dc1JDLHXQVZSEumhecr2MKaeWeZpFAUW6EIKr+hLiQnZE
tX4hYKQNfYxtFHHmJ1TYGpF6S+hj5gR8glIVGiHAxlHD44/MNisJT0tWx3rW3ade
a6kyiFsr+VeadaXIJoh894nv4HAdhlpkfVNW5xRzs0JNos8QEySzytXAICSjkmU/
CFXPJT2qb6NohXhfz5iDyvZasFR5d7BNaDTSXonyoVbetLl5Kdb8vTiaJ1fbK/Qo
YNGOJ0sGtQCPea/MvdFkBqcRzF5oz8wza0UtjEUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQQJY8IaLIznywD2F1zu04y+9rPzzAfBgNVHSMEGDAWgBQFNMSfz6ikUEHZ
XtTY1PxpxyekZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8x
L0VDV1BDR2l5TTU4c0E5aGRjN3RPTXZ2YXo4OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8xL0JUVEVuOC1vcEZC
QjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArITJDANBgkqhkiG9w0BAQsFAAOC
AQEAlvPnPjXf9b4IEoDupZwvVRkLI8X+sO6dnzYOt3hJTGxfWw07m+YXq8+V9A84
QejLSYQoasCU/Jo82EoO/tKnrsbvuuqIfmEfSL3lDC9e2V5QLZqqyET0S/6shLQG
viaY4Or0dbOZErGMYyWWXTYk+m/8Sx8azCyUrtzB4iSMy8To1OHrs3ZL1l0BQ8Q8
iSdRpR6ZHNNVvUSX5JhBt/RKR3laHHqJz+UwS6qaGjsta+yax4wotvdiHNFBs/Jx
NoRayVE6NpL/O9e/AY0fAWVIgTW3t4bbeDS/YR25AAwUSHFbaC86+AUwGuRPQ+Hl
PDtge59L25VzfCpmv/YYsPyllQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org