Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ZT5ToA7nvWnp1Js9q2U2aZRnk4c.roa
File: ZT5ToA7nvWnp1Js9q2U2aZRnk4c.roa (raw, json)
Hash identifier: e+Z5zelmwQGm0pSr2tYBzPWxIVYw/cjoIZ1mH50KJys=
Subject key identifier: 65:3E:53:A0:0E:E7:BD:69:E9:D4:9B:3D:AB:65:36:69:94:67:93:87
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1AC39754
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ZT5ToA7nvWnp1Js9q2U2aZRnk4c.roa
Signing time: Sat 01 Jan 2022 16:03:16 +0000
ROA not before: Sat 01 Jan 2022 16:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208916
IP address blocks: 176.236.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449025876 (0x1ac39754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=653e53a00ee7bd69e9d49b3dab65366994679387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:07:68:d1:76:cb:b4:c9:ec:ab:14:8d:6c:
e4:41:cd:68:57:07:a2:46:46:96:c0:65:6b:f3:01:
40:00:b7:95:18:dc:b0:ac:35:74:e8:ed:41:ca:64:
89:b3:46:e1:e8:46:5c:74:88:04:63:3d:bf:d3:9e:
12:d3:09:1b:cb:48:cc:3a:ca:a5:d5:b4:8e:27:c2:
63:16:b9:70:fb:7a:a2:64:43:43:a0:73:31:16:41:
6a:55:02:c4:57:ce:96:4b:fc:5c:9b:48:b9:a2:d9:
b7:5b:45:36:9b:47:ee:3b:c7:6b:ea:88:65:8b:53:
31:c8:97:0b:66:ca:45:69:53:8a:00:d7:0c:ad:60:
3c:6a:db:d7:de:2a:c7:14:af:a8:55:c8:8a:31:e2:
f2:b1:af:eb:6f:70:52:c2:f4:36:cd:aa:a6:9e:ee:
a6:3a:b4:c0:02:62:89:d3:e8:98:f7:93:6a:3c:42:
2e:26:13:7d:14:56:58:da:9f:cc:fe:50:b6:42:f8:
cf:7a:bb:9b:20:2f:bf:8a:59:6a:22:74:13:b4:69:
c8:8c:09:23:d8:71:f2:e5:ee:c7:c1:81:6e:c2:20:
a2:8c:10:ea:10:41:9e:2d:1a:ca:84:45:56:d1:59:
4d:38:43:08:84:a6:d2:70:17:2a:05:1c:4d:1f:82:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3E:53:A0:0E:E7:BD:69:E9:D4:9B:3D:AB:65:36:69:94:67:93:87
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ZT5ToA7nvWnp1Js9q2U2aZRnk4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.236.246.0/24
Signature Algorithm: sha256WithRSAEncryption
14:10:f4:5e:bd:02:0e:a1:e6:8a:1a:16:69:f1:96:62:84:d0:
f5:fa:32:f7:4a:56:f2:11:8e:71:48:3b:00:06:e2:3d:60:b3:
7e:8a:a5:fa:e9:06:97:87:1b:a8:8e:2f:62:17:43:ce:f3:bd:
60:f1:fe:32:4a:8f:c8:6f:9a:a9:13:ca:9c:1a:21:aa:bd:d0:
65:83:23:ed:c0:16:3b:f2:64:e9:eb:78:3a:de:a4:6f:52:47:
bc:c0:97:db:51:dd:66:ba:6e:47:00:aa:a0:4e:46:c4:48:2a:
e6:3e:ac:8e:8d:77:60:39:c1:c3:44:9e:e6:01:77:59:7b:d3:
09:5b:4b:bd:eb:74:bd:1f:e7:60:5a:49:4e:fb:11:99:28:84:
4f:6b:f4:87:d3:87:d6:c4:36:f5:ea:22:55:ec:79:86:3c:b8:
37:bf:5a:1c:cf:25:37:00:94:d6:f0:1f:b0:e4:1d:96:40:5a:
08:1a:58:f0:d7:34:a3:a6:56:94:e4:8c:aa:e6:55:03:a0:31:
d6:21:bf:9d:59:ab:f9:21:dc:2d:1e:85:5a:bf:58:04:d9:d8:
a1:32:16:da:7e:bb:d2:f9:42:1c:86:e4:68:01:1a:0c:ab:62:
b2:95:33:5f:4d:ae:43:d6:91:19:37:df:c7:bc:51:07:0c:90:
b0:6c:45:58
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGsOXVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZDU5YzQzMjNmNzY3Y2U0ZmZjODVkYWFkMjA4YjkwYzA0ZmJkM2U5MB4XDTIyMDEw
MTE2MDMxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjUzZTUzYTAwZWU3
YmQ2OWU5ZDQ5YjNkYWI2NTM2Njk5NDY3OTM4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANWNB2jRdsu0yeyrFI1s5EHNaFcHokZGlsBla/MBQAC3lRjc
sKw1dOjtQcpkibNG4ehGXHSIBGM9v9OeEtMJG8tIzDrKpdW0jifCYxa5cPt6omRD
Q6BzMRZBalUCxFfOlkv8XJtIuaLZt1tFNptH7jvHa+qIZYtTMciXC2bKRWlTigDX
DK1gPGrb194qxxSvqFXIijHi8rGv629wUsL0Ns2qpp7upjq0wAJiidPomPeTajxC
LiYTfRRWWNqfzP5QtkL4z3q7myAvv4pZaiJ0E7RpyIwJI9hx8uXux8GBbsIgoowQ
6hBBni0ayoRFVtFZTThDCISm0nAXKgUcTR+CIa8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRlPlOgDue9aenUmz2rZTZplGeThzAfBgNVHSMEGDAWgBSNWcQyP3Z85P/I
XarSCLkMBPvT6TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pWbkVNajkyZk9UX3lGMnEwZ2k1REFUNzAtay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjYvZjA5ZWNmLWU4MDUtNDE1OC1iMzE1LWYyYmU5ZjZjNjY0Yy8x
L1pUNVRvQTdudlducDFKczlxMlUyYVpSbms0Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYv
ZjA5ZWNmLWU4MDUtNDE1OC1iMzE1LWYyYmU5ZjZjNjY0Yy8xL2pWbkVNajkyZk9U
X3lGMnEwZ2k1REFUNzAtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALDs9jANBgkqhkiG9w0BAQsFAAOC
AQEAFBD0Xr0CDqHmihoWafGWYoTQ9foy90pW8hGOcUg7AAbiPWCzfoql+ukGl4cb
qI4vYhdDzvO9YPH+MkqPyG+aqRPKnBohqr3QZYMj7cAWO/Jk6et4Ot6kb1JHvMCX
21HdZrpuRwCqoE5GxEgq5j6sjo13YDnBw0Se5gF3WXvTCVtLvet0vR/nYFpJTvsR
mSiET2v0h9OH1sQ29eoiVex5hjy4N79aHM8lNwCU1vAfsOQdlkBaCBpY8Nc0o6ZW
lOSMquZVA6Ax1iG/nVmr+SHcLR6FWr9YBNnYoTIW2n670vlCHIbkaAEaDKtispUz
X02uQ9aRGTffx7xRBwyQsGxFWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org