Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/3gB9WtpVVZVAdhRwWJkuooE7ZDU.roa
File: 3gB9WtpVVZVAdhRwWJkuooE7ZDU.roa (raw, json)
Hash identifier: qC1xsscpBXNU31//6O/6NM4VmI6cgWxW9THpvBfd/jE=
Subject key identifier: DE:00:7D:5A:DA:55:55:95:40:76:14:70:58:99:2E:A2:81:3B:64:35
Certificate issuer: /CN=03452c9dbfc9e4193c7e55e0d2016568d9465285
Certificate serial: 0169C6A9
Authority key identifier: 03:45:2C:9D:BF:C9:E4:19:3C:7E:55:E0:D2:01:65:68:D9:46:52:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0Usnb_J5Bk8flXg0gFlaNlGUoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/3gB9WtpVVZVAdhRwWJkuooE7ZDU.roa
Signing time: Sat 01 Jan 2022 04:57:21 +0000
ROA not before: Sat 01 Jan 2022 04:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 213.232.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23709353 (0x169c6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03452c9dbfc9e4193c7e55e0d2016568d9465285
Validity
Not Before: Jan 1 04:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de007d5ada5555954076147058992ea2813b6435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:b7:11:33:ad:e5:fb:c6:81:c0:b7:b3:82:
76:af:0a:80:3b:75:f3:b9:b4:1a:df:db:15:9f:e4:
47:35:2b:f9:c6:bc:cb:91:b1:8c:91:88:b0:3e:ac:
ee:12:2b:5c:9a:77:5e:d8:96:b9:31:18:a4:d7:17:
9c:ef:f7:9d:30:c7:21:93:62:36:1f:69:69:67:74:
1b:a2:b7:1a:6e:a6:b0:c0:8b:1e:ba:17:ff:77:dc:
e6:a3:b9:82:9e:30:43:bf:ef:38:be:7f:23:9d:b3:
bd:56:77:fe:5c:34:e8:f2:37:77:19:83:bf:0d:46:
4e:cb:d8:b3:4e:c8:b5:49:20:ee:ff:ee:d5:37:d1:
e3:42:3c:30:de:f3:20:04:a6:c6:15:2d:a6:1c:c0:
9f:09:44:14:8e:41:a1:ac:55:7e:6b:bd:fa:0a:2f:
2e:b1:e9:65:d6:bb:43:46:7b:70:af:8e:5f:fc:96:
9c:4b:6b:59:db:4e:7c:b2:d5:31:bf:dc:2d:6a:a4:
88:c7:1f:d5:02:8c:3c:a6:e9:26:98:6e:ab:a9:d6:
06:39:68:38:74:53:c5:34:bb:aa:7d:5a:0e:cc:b1:
14:f9:64:e8:e6:b3:89:c0:34:06:09:ab:ab:b1:59:
85:99:3a:80:c2:78:9d:c1:ab:46:1c:20:77:9b:c6:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:7D:5A:DA:55:55:95:40:76:14:70:58:99:2E:A2:81:3B:64:35
X509v3 Authority Key Identifier:
keyid:03:45:2C:9D:BF:C9:E4:19:3C:7E:55:E0:D2:01:65:68:D9:46:52:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0Usnb_J5Bk8flXg0gFlaNlGUoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/3gB9WtpVVZVAdhRwWJkuooE7ZDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/A0Usnb_J5Bk8flXg0gFlaNlGUoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.252.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8e:13:bb:dc:e4:17:af:5d:98:e5:5f:27:3e:33:21:3f:95:
c5:07:01:da:19:5b:f4:e8:65:9f:61:4b:1f:04:ec:d3:ec:ef:
97:93:94:53:e4:bc:e3:28:86:f9:15:20:50:76:b1:3a:10:77:
e3:8d:57:46:19:65:32:be:a4:0a:95:ab:a2:5c:30:56:c3:49:
cb:16:c2:45:4c:13:d5:11:dd:0f:21:fb:a0:a8:07:c2:1c:bb:
61:d3:90:fe:2d:30:18:51:36:d2:ab:af:9e:f6:b5:c2:ca:52:
d6:45:58:27:62:bc:28:04:6e:3a:df:6c:fc:e6:8d:1b:1a:16:
a4:1b:1d:44:40:f9:24:3e:99:24:d1:e0:17:20:17:a3:b1:0c:
29:1c:7c:34:ba:47:84:02:ce:03:2a:3d:65:4e:3f:5a:87:6f:
c9:1e:a6:b3:4a:1d:6c:52:76:60:ca:c1:41:74:bd:38:49:e5:
ba:89:0d:25:aa:a6:07:b3:49:0c:fe:70:2f:41:4c:33:97:8d:
c0:9a:fb:45:9b:12:df:0a:e3:6f:6d:8b:d0:e3:78:16:57:ab:
e7:0f:78:2d:6b:28:e1:18:8b:b7:8e:f6:54:7c:ab:95:78:c3:
5a:99:cc:9c:fd:d7:9b:cf:2e:94:bc:89:64:ef:90:8e:ed:f2:
85:d5:12:1c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAWnGqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MzQ1MmM5ZGJmYzllNDE5M2M3ZTU1ZTBkMjAxNjU2OGQ5NDY1Mjg1MB4XDTIyMDEw
MTA0NTcyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGUwMDdkNWFkYTU1
NTU5NTQwNzYxNDcwNTg5OTJlYTI4MTNiNjQzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALrJtxEzreX7xoHAt7OCdq8KgDt187m0Gt/bFZ/kRzUr+ca8
y5GxjJGIsD6s7hIrXJp3XtiWuTEYpNcXnO/3nTDHIZNiNh9paWd0G6K3Gm6msMCL
HroX/3fc5qO5gp4wQ7/vOL5/I52zvVZ3/lw06PI3dxmDvw1GTsvYs07ItUkg7v/u
1TfR40I8MN7zIASmxhUtphzAnwlEFI5BoaxVfmu9+govLrHpZda7Q0Z7cK+OX/yW
nEtrWdtOfLLVMb/cLWqkiMcf1QKMPKbpJphuq6nWBjloOHRTxTS7qn1aDsyxFPlk
6OazicA0Bgmrq7FZhZk6gMJ4ncGrRhwgd5vGJtUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTeAH1a2lVVlUB2FHBYmS6igTtkNTAfBgNVHSMEGDAWgBQDRSydv8nkGTx+
VeDSAWVo2UZShTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0EwVXNuYl9KNUJrOGZsWGcwZ0ZsYU5sR1VvVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNWZkZGNiLTYzMmQtNDM5ZS1hYTY5LWQzZWU5OGZjMjc3Ni8x
LzNnQjlXdHBWVlpWQWRoUndXSmt1b29FN1pEVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NWZkZGNiLTYzMmQtNDM5ZS1hYTY5LWQzZWU5OGZjMjc3Ni8xL0EwVXNuYl9KNUJr
OGZsWGcwZ0ZsYU5sR1VvVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXo/DANBgkqhkiG9w0BAQsFAAOC
AQEAgY4Tu9zkF69dmOVfJz4zIT+VxQcB2hlb9Ohln2FLHwTs0+zvl5OUU+S84yiG
+RUgUHaxOhB3441XRhllMr6kCpWrolwwVsNJyxbCRUwT1RHdDyH7oKgHwhy7YdOQ
/i0wGFE20quvnva1wspS1kVYJ2K8KARuOt9s/OaNGxoWpBsdRED5JD6ZJNHgFyAX
o7EMKRx8NLpHhALOAyo9ZU4/WodvyR6ms0odbFJ2YMrBQXS9OEnluokNJaqmB7NJ
DP5wL0FMM5eNwJr7RZsS3wrjb22L0ON4Fler5w94LWso4RiLt472VHyrlXjDWpnM
nP3Xm88ulLyJZO+Qju3yhdUSHA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:10 2023 by rpki-client on console-fra.rpki-client.org