Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/4L6hTWKIUt61EuqBL8qE3nfXeHk.roa
File: 4L6hTWKIUt61EuqBL8qE3nfXeHk.roa (raw, json)
Hash identifier: Hht3mzCTzfRmXXuT7XnZ/YMUVDOr5pR8VpHGIhacYfw=
Subject key identifier: E0:BE:A1:4D:62:88:52:DE:B5:12:EA:81:2F:CA:84:DE:77:D7:78:79
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0183B7E3C7705C1BDDDDA61C8C83049C8664
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/4L6hTWKIUt61EuqBL8qE3nfXeHk.roa
Signing time: Sat 08 Oct 2022 13:58:21 +0000
ROA not before: Sat 08 Oct 2022 13:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210583
IP address blocks: 79.132.216.0/24 maxlen: 24
78.158.167.0/24 maxlen: 24
86.109.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b7:e3:c7:70:5c:1b:dd:dd:a6:1c:8c:83:04:9c:86:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Oct 8 13:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0bea14d628852deb512ea812fca84de77d77879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:0c:18:c4:b1:87:8e:d5:6e:40:d4:b5:64:
a7:21:f5:c1:8d:76:6c:9a:ee:aa:1f:6d:65:e7:bf:
2a:76:5e:24:e8:18:ae:4d:46:3a:cf:2b:ed:08:1b:
63:55:b1:29:25:8f:6b:18:cf:a6:fd:e5:f3:d1:3e:
c2:0d:af:d8:e4:6c:64:eb:9a:3e:19:39:77:80:24:
6f:18:49:dd:51:33:5e:49:b1:49:63:f9:7b:03:ae:
76:ff:f2:c0:de:5a:48:c7:31:2a:9c:a8:9c:f6:dd:
77:13:df:45:61:0c:f0:e6:73:8a:94:8e:95:af:b9:
8f:0e:98:4d:5a:76:16:41:ec:aa:eb:bf:11:23:ec:
e6:6b:74:1e:da:42:df:23:55:f0:25:e6:9c:f1:5f:
7e:b5:80:a3:c5:5c:d9:ab:6a:d7:5e:1c:3e:9d:e6:
20:d7:34:1d:4c:a6:63:3b:7e:76:0d:55:2e:fe:c1:
33:c2:8d:31:60:cc:4c:b7:af:83:a9:91:19:c8:81:
64:fb:b6:b2:e9:ea:1b:45:33:bf:3d:f1:35:36:50:
e2:49:52:70:ec:71:50:3b:18:1a:10:84:59:53:73:
d2:99:74:0e:1a:f2:5c:34:3b:6a:c9:1a:d1:15:36:
e3:d2:88:58:58:b0:7b:42:9c:31:99:5f:d5:f8:aa:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:A1:4D:62:88:52:DE:B5:12:EA:81:2F:CA:84:DE:77:D7:78:79
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/4L6hTWKIUt61EuqBL8qE3nfXeHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.167.0/24
79.132.216.0/24
86.109.61.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a2:b8:99:7a:27:fb:3e:0e:62:c5:ff:c6:ea:33:d2:3d:b8:
6c:a0:87:56:69:4d:6f:86:b1:36:29:3d:45:00:63:33:ff:bf:
af:d8:43:2f:bb:d6:b7:21:2c:04:17:71:76:7a:a2:a5:b7:86:
9b:ca:38:64:27:2d:90:69:3b:40:f7:c8:48:6a:cf:2b:bf:7f:
b0:8d:ca:4e:26:9b:87:a2:6e:79:14:64:c9:b2:83:bc:3c:af:
52:64:32:54:60:96:d2:ef:64:66:4b:c6:f7:5d:e7:d0:4b:ea:
ba:e5:6f:95:2c:5b:c0:68:4e:b9:4f:60:0e:78:34:ae:71:99:
2c:30:3b:bc:3b:64:5e:a5:b0:cb:9f:89:f0:c5:49:8f:19:4d:
67:4d:46:51:97:ae:8f:6b:9a:5a:08:82:21:b4:63:4d:fb:35:
9f:7e:51:8a:df:46:55:6b:e9:8f:bc:61:b4:19:1f:3b:ba:e5:
61:3c:8a:de:d3:28:70:61:55:80:f4:ab:a2:fc:ba:15:95:21:
3f:05:37:e5:c2:71:85:22:c8:8c:a9:96:64:47:3f:2e:4b:c2:
18:df:79:d1:35:df:23:d9:bc:a6:fc:c7:15:6a:47:94:71:df:
17:ca:1f:eb:b8:06:9a:0d:d5:5d:34:85:b7:62:aa:75:8f:1b:
9e:fd:2e:56
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYO348dwXBvd3aYcjIMEnIZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjIxMDA4MTM1ODIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGJlYTE0ZDYyODg1MmRlYjUxMmVhODEyZmNhODRkZTc3ZDc3ODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4AMGMSxh47VbkDUtWSnIfXBjXZs
mu6qH21l578qdl4k6BiuTUY6zyvtCBtjVbEpJY9rGM+m/eXz0T7CDa/Y5Gxk65o+
GTl3gCRvGEndUTNeSbFJY/l7A652//LA3lpIxzEqnKic9t13E99FYQzw5nOKlI6V
r7mPDphNWnYWQeyq678RI+zma3Qe2kLfI1XwJeac8V9+tYCjxVzZq2rXXhw+neYg
1zQdTKZjO352DVUu/sEzwo0xYMxMt6+DqZEZyIFk+7ay6eobRTO/PfE1NlDiSVJw
7HFQOxgaEIRZU3PSmXQOGvJcNDtqyRrRFTbj0ohYWLB7QpwxmV/V+KpKmwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOC+oU1iiFLetRLqgS/KhN5313h5MB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvNEw2aFRXS0lVdDYxRXVxQkw4cUUzbmZYZUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATp6nAwQA
T4TYAwQAVm09MA0GCSqGSIb3DQEBCwUAA4IBAQB4oriZeif7Pg5ixf/G6jPSPbhs
oIdWaU1vhrE2KT1FAGMz/7+v2EMvu9a3ISwEF3F2eqKlt4abyjhkJy2QaTtA98hI
as8rv3+wjcpOJpuHom55FGTJsoO8PK9SZDJUYJbS72RmS8b3XefQS+q65W+VLFvA
aE65T2AOeDSucZksMDu8O2RepbDLn4nwxUmPGU1nTUZRl66Pa5paCIIhtGNN+zWf
flGK30ZVa+mPvGG0GR87uuVhPIre0yhwYVWA9Kui/LoVlSE/BTflwnGFIsiMqZZk
Rz8uS8IY33nRNd8j2bym/McVakeUcd8Xyh/ruAaaDdVdNIW3Yqp1jxue/S5W
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org