Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/lYoA2UH00aTzwsu37_zB0FNrQpk.roa
File: lYoA2UH00aTzwsu37_zB0FNrQpk.roa (raw, json)
Hash identifier: ph9IIp64LGnS1d02SuB9HMx1jzmBCZi236QIKbWSNlg=
Subject key identifier: 95:8A:00:D9:41:F4:D1:A4:F3:C2:CB:B7:EF:FC:C1:D0:53:6B:42:99
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 01856266C97B0A84A3D13558632F61F8DFB7
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/lYoA2UH00aTzwsu37_zB0FNrQpk.roa
Signing time: Fri 30 Dec 2022 09:39:41 +0000
ROA not before: Fri 30 Dec 2022 09:39:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199199
IP address blocks: 176.97.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:66:c9:7b:0a:84:a3:d1:35:58:63:2f:61:f8:df:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Dec 30 09:39:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=958a00d941f4d1a4f3c2cbb7effcc1d0536b4299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:2c:8d:4c:e5:6f:e7:4b:9b:a5:46:8c:52:
fd:e5:ad:22:99:7f:9f:56:a7:a5:1a:22:b3:50:5c:
86:10:50:2a:a1:4a:da:2e:28:9e:ab:63:02:d1:0b:
c2:61:3e:53:14:6d:1c:ed:33:c9:3f:8b:69:e3:6b:
70:3b:ca:63:1c:14:f1:c0:f6:bb:91:3a:17:4b:fe:
3e:1e:00:47:cd:6a:22:58:f1:35:ee:7a:be:32:1b:
d0:dd:75:53:11:25:a0:30:f5:12:59:7b:da:2a:6d:
77:9b:82:2e:c7:31:21:14:20:e0:7a:96:cb:e9:e9:
c0:34:4f:61:0b:9d:51:83:48:37:6e:f3:62:f4:de:
c3:5a:f9:e3:73:81:e1:18:85:9f:cb:66:e7:af:e2:
29:53:78:97:27:3f:c4:f2:12:38:21:48:8d:ab:5a:
c9:d2:a0:26:c4:f3:f6:9f:e5:73:96:91:d8:cb:53:
0b:70:f2:9d:14:06:f1:5e:d6:85:f0:34:d7:18:90:
63:aa:85:6a:bc:f2:97:fc:89:fb:43:b5:42:b4:ec:
e7:50:61:df:de:4e:93:d5:f9:87:88:73:f8:92:28:
a0:fd:f0:cd:d0:ef:53:db:60:c2:03:68:0c:bf:a8:
a2:fd:05:4b:61:de:3c:eb:9d:63:ba:a0:0e:ca:35:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8A:00:D9:41:F4:D1:A4:F3:C2:CB:B7:EF:FC:C1:D0:53:6B:42:99
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/lYoA2UH00aTzwsu37_zB0FNrQpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.159.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:1a:db:be:7d:54:a6:36:42:1e:0e:c5:8f:03:1b:81:ff:d3:
39:a2:f5:d5:df:74:1b:7d:06:a7:91:c1:6d:20:30:39:0c:23:
24:f1:2b:19:ff:b8:0b:bc:f4:f1:e1:16:da:50:72:8a:62:91:
e4:1a:1c:d6:e1:71:fa:50:12:29:5a:ff:f0:46:84:03:c7:b2:
3f:fb:ac:83:36:2e:d1:e8:37:0e:fd:44:e2:9a:fb:ae:73:05:
da:7a:70:41:03:72:20:3f:77:0b:bd:46:08:75:9c:e3:0f:3a:
9e:8d:88:50:cf:f9:fe:4e:af:4f:88:fb:cb:0f:30:e3:58:55:
cf:10:a0:0a:fd:19:b4:17:7c:07:a7:7a:69:99:f3:2c:23:47:
f8:dd:df:18:00:6a:e7:df:2f:89:80:b6:7e:9b:11:14:af:a4:
70:49:8e:9f:67:4b:8e:e0:64:77:10:f9:bd:03:c3:ec:fa:69:
0b:20:21:de:f7:c5:8c:a9:35:18:72:98:cd:12:aa:4b:ea:6d:
8f:25:4b:d5:69:6f:4a:c1:6e:5e:17:1f:4e:97:d5:d7:26:59:
b8:83:be:51:e5:c3:4d:3f:70:5b:57:eb:5d:a6:39:d7:0f:d0:
67:77:3d:a5:0d:87:a7:f1:c9:77:4a:b8:d4:df:ab:f2:7a:1f:
bf:c7:c1:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYViZsl7CoSj0TVYYy9h+N+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyODA3NWE0ZmJkYWFiNDJjNWJhMTkzM2M3MDJmYjZhNzg0
MTAyMmEwHhcNMjIxMjMwMDkzOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NThhMDBkOTQxZjRkMWE0ZjNjMmNiYjdlZmZjYzFkMDUzNmI0Mjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz4sjUzlb+dLm6VGjFL95a0imX+f
VqelGiKzUFyGEFAqoUraLiieq2MC0QvCYT5TFG0c7TPJP4tp42twO8pjHBTxwPa7
kToXS/4+HgBHzWoiWPE17nq+MhvQ3XVTESWgMPUSWXvaKm13m4IuxzEhFCDgepbL
6enANE9hC51Rg0g3bvNi9N7DWvnjc4HhGIWfy2bnr+IpU3iXJz/E8hI4IUiNq1rJ
0qAmxPP2n+VzlpHYy1MLcPKdFAbxXtaF8DTXGJBjqoVqvPKX/In7Q7VCtOznUGHf
3k6T1fmHiHP4kiig/fDN0O9T22DCA2gMv6ii/QVLYd48651juqAOyjU/xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJWKANlB9NGk88LLt+/8wdBTa0KZMB8GA1UdIwQY
MBaAFHKAdaT72qtCxboZM8cC+2p4QQIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29CMXBQdmFxMExGdWhrenh3TDdhbmhCQWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9iNzUwOTEtM2FhNC00MDMyLWEzOTQt
ZWNkMjhhMjVmZWVmLzEvbFlvQTJVSDAwYVR6d3N1MzdfekIwRk5yUXBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9iNzUwOTEtM2FhNC00MDMyLWEzOTQtZWNkMjhhMjVmZWVm
LzEvY29CMXBQdmFxMExGdWhrenh3TDdhbmhCQWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGGfMA0G
CSqGSIb3DQEBCwUAA4IBAQDHGtu+fVSmNkIeDsWPAxuB/9M5ovXV33QbfQankcFt
IDA5DCMk8SsZ/7gLvPTx4RbaUHKKYpHkGhzW4XH6UBIpWv/wRoQDx7I/+6yDNi7R
6DcO/UTimvuucwXaenBBA3IgP3cLvUYIdZzjDzqejYhQz/n+Tq9PiPvLDzDjWFXP
EKAK/Rm0F3wHp3ppmfMsI0f43d8YAGrn3y+JgLZ+mxEUr6RwSY6fZ0uO4GR3EPm9
A8Ps+mkLICHe98WMqTUYcpjNEqpL6m2PJUvVaW9KwW5eFx9Ol9XXJlm4g75R5cNN
P3BbV+tdpjnXD9Bndz2lDYen8cl3SrjU36vyeh+/x8FK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:41 2024 by rpki-client on console-ams.rpki-client.org