Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/8k7sOVElNHbrsI1og1dNmKnSQo0.roa
File: 8k7sOVElNHbrsI1og1dNmKnSQo0.roa (raw, json)
Hash identifier: 3UUloZWyEmBXHcR8ubKxmdFyaDQcYpO7jj9y/jFcY58=
Subject key identifier: F2:4E:EC:39:51:25:34:76:EB:B0:8D:68:83:57:4D:98:A9:D2:42:8D
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 031017E8
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/8k7sOVElNHbrsI1og1dNmKnSQo0.roa
Signing time: Sat 01 Jan 2022 02:50:57 +0000
ROA not before: Sat 01 Jan 2022 02:50:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3399
IP address blocks: 193.178.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51386344 (0x31017e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jan 1 02:50:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f24eec3951253476ebb08d6883574d98a9d2428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:28:9d:2b:a4:3b:2b:9f:8b:e1:62:13:92:
e1:bf:42:d2:64:af:87:05:20:b0:ed:9c:84:a0:4e:
86:bb:69:5b:6c:a6:12:40:9a:cc:4d:d0:1c:ed:95:
d1:d8:44:e6:e7:a6:0d:94:90:d2:3d:b2:f5:f8:c6:
4b:69:c5:92:d8:07:97:b1:10:7b:01:56:3a:87:49:
31:09:17:a9:14:21:ac:ed:78:dd:29:18:c5:03:47:
90:20:b9:9f:0f:a8:92:1c:84:b3:0f:4b:40:47:f6:
24:9f:c4:07:24:3d:0c:72:4e:b8:44:f5:e2:f2:5a:
98:3c:a1:b3:fb:10:95:5e:a3:93:07:96:78:bc:83:
7a:73:a1:6c:9b:74:40:98:02:f8:f3:d3:e6:f0:ec:
68:1f:dd:86:94:21:a2:96:b2:95:d9:fa:71:9f:16:
68:39:08:5e:6f:9b:6f:8c:08:86:d3:51:f5:41:e2:
35:44:36:cd:3a:55:c3:3e:8d:d5:05:17:34:11:82:
91:e5:b1:1a:74:a9:b1:e8:a3:3f:78:c0:db:cb:54:
48:55:af:41:6d:b7:6b:ef:fb:33:41:9e:2c:48:52:
52:85:bd:9c:82:8d:aa:82:f6:b2:a9:3e:8f:aa:52:
a1:57:50:da:8e:f0:fe:e3:27:a8:b1:74:7f:1c:df:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4E:EC:39:51:25:34:76:EB:B0:8D:68:83:57:4D:98:A9:D2:42:8D
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/8k7sOVElNHbrsI1og1dNmKnSQo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.129.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b3:c4:70:03:07:be:0c:9f:a7:7f:99:bf:59:d0:d4:10:38:
d0:33:0a:f8:c5:f4:68:c4:85:25:14:fb:a5:1d:96:dc:f8:b4:
3b:dd:c6:3d:46:cd:b0:64:70:ac:d6:19:00:a2:eb:7e:92:ab:
a6:00:b6:3f:1f:4d:8a:87:32:97:d3:12:7f:3d:31:8b:a3:67:
d6:55:f0:fa:66:60:ae:8d:9d:88:0c:9a:dc:32:14:47:c3:54:
fd:bc:8c:c3:f3:23:6e:f8:e5:8e:c7:34:dd:ad:ff:af:ad:33:
36:a5:c5:4a:bc:39:1c:22:25:20:a7:fa:d1:0e:ee:87:cd:01:
7a:74:ef:66:b3:1e:3d:31:4b:39:d0:f2:69:d8:29:c2:97:a3:
28:36:aa:8e:ad:48:65:e4:af:b1:ff:e1:e3:fd:2a:c1:47:d6:
13:ae:e0:2d:3e:8e:7b:a6:d3:f3:64:22:38:71:5a:7e:2e:f2:
6e:2c:c4:2c:b9:f5:aa:c0:07:cd:11:ae:63:24:3b:c0:e2:67:
05:d2:de:fa:0b:7b:b2:92:1c:5a:24:9d:2e:31:48:68:dd:08:
e7:79:ce:89:64:d6:b2:c7:83:f8:36:57:3a:9c:b9:96:0c:66:
90:a7:4b:d6:63:8f:de:0b:a2:ed:49:6a:a3:de:69:b5:4a:ce:
5b:3e:13:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAxAX6DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
N2RiNTZjZGEyZTdkZGIwMjMxNjhjNWQ3N2VjOTdkOWEwMDZiYWVkMB4XDTIyMDEw
MTAyNTA1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjI0ZWVjMzk1MTI1
MzQ3NmViYjA4ZDY4ODM1NzRkOThhOWQyNDI4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANknKJ0rpDsrn4vhYhOS4b9C0mSvhwUgsO2chKBOhrtpW2ym
EkCazE3QHO2V0dhE5uemDZSQ0j2y9fjGS2nFktgHl7EQewFWOodJMQkXqRQhrO14
3SkYxQNHkCC5nw+okhyEsw9LQEf2JJ/EByQ9DHJOuET14vJamDyhs/sQlV6jkweW
eLyDenOhbJt0QJgC+PPT5vDsaB/dhpQhopayldn6cZ8WaDkIXm+bb4wIhtNR9UHi
NUQ2zTpVwz6N1QUXNBGCkeWxGnSpseijP3jA28tUSFWvQW23a+/7M0GeLEhSUoW9
nIKNqoL2sqk+j6pSoVdQ2o7w/uMnqLF0fxzfM1MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTyTuw5USU0duuwjWiDV02YqdJCjTAfBgNVHSMEGDAWgBTH21bNoufdsCMW
jF137JfZoAa67TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3g5dFd6YUxuM2JBakZveGRkLXlYMmFBR3V1MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWMvYTk3OGFiLTQzZDUtNDMzNS1hZmEyLTgyZWI2ZmQxMWRkNS8x
LzhrN3NPVkVsTkhicnNJMW9nMWRObUtuU1FvMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMv
YTk3OGFiLTQzZDUtNDMzNS1hZmEyLTgyZWI2ZmQxMWRkNS8xL3g5dFd6YUxuM2JB
akZveGRkLXlYMmFBR3V1MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGygTANBgkqhkiG9w0BAQsFAAOC
AQEAQ7PEcAMHvgyfp3+Zv1nQ1BA40DMK+MX0aMSFJRT7pR2W3Pi0O93GPUbNsGRw
rNYZAKLrfpKrpgC2Px9Niocyl9MSfz0xi6Nn1lXw+mZgro2diAya3DIUR8NU/byM
w/Mjbvjljsc03a3/r60zNqXFSrw5HCIlIKf60Q7uh80BenTvZrMePTFLOdDyadgp
wpejKDaqjq1IZeSvsf/h4/0qwUfWE67gLT6Oe6bT82QiOHFafi7ybizELLn1qsAH
zRGuYyQ7wOJnBdLe+gt7spIcWiSdLjFIaN0I53nOiWTWsseD+DZXOpy5lgxmkKdL
1mOP3gui7Ulqo95ptUrOWz4T4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:17 2024 by rpki-client on console-fra.rpki-client.org