Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/f_5-tvXXBHvcZRKJ9RbYnh1_TIA.roa
File: f_5-tvXXBHvcZRKJ9RbYnh1_TIA.roa (raw, json)
Hash identifier: m8TfTuXsnAKr5Y02z5/kHSKvtMD7HVO5zqH792b8/Qg=
Subject key identifier: 7F:FE:7E:B6:F5:D7:04:7B:DC:65:12:89:F5:16:D8:9E:1D:7F:4C:80
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 0A508B
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/f_5-tvXXBHvcZRKJ9RbYnh1_TIA.roa
Signing time: Wed 22 Jun 2022 06:02:45 +0000
ROA not before: Wed 22 Jun 2022 06:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60700
IP address blocks: 176.120.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675979 (0xa508b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jun 22 06:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ffe7eb6f5d7047bdc651289f516d89e1d7f4c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:7d:e5:5f:82:7b:4d:b8:d0:1b:21:7c:26:
85:03:cb:92:13:c4:2c:90:08:be:81:80:a4:30:b1:
36:85:5a:5f:4d:d8:6d:15:1c:13:2c:27:c7:70:20:
45:17:41:10:54:86:4b:e2:1d:14:a2:e8:e0:6b:5e:
74:9b:34:5f:ad:c0:28:e9:c0:e4:75:96:12:b0:53:
22:5d:ca:70:1f:ad:8e:e6:e3:2a:37:14:da:1b:ef:
cd:11:e7:f6:c0:5a:b2:74:d1:3f:14:6d:81:c5:55:
55:c1:5a:c3:ef:f7:4a:8e:eb:90:0f:82:f2:da:00:
92:c8:d8:9f:ee:c1:38:ca:92:49:cd:1c:08:61:65:
39:48:f8:d1:ca:4a:dc:0a:24:af:24:70:9a:31:10:
c1:90:3e:72:47:04:42:51:62:ab:9b:ba:e6:73:92:
ad:50:37:05:d9:e8:e1:88:69:f2:0d:90:fd:39:06:
ad:c3:9a:6e:f1:85:39:47:2c:ea:a4:23:1a:15:75:
be:35:4e:98:22:0e:6a:4a:31:90:a3:b7:19:b0:02:
88:3e:29:c9:c9:4f:ba:8a:58:c0:10:4a:b8:0d:0c:
82:1a:d8:a1:a9:a4:17:71:4d:ce:1d:fc:0f:4e:2e:
2e:28:be:59:18:70:65:6d:27:7a:ff:9a:dc:10:40:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:7E:B6:F5:D7:04:7B:DC:65:12:89:F5:16:D8:9E:1D:7F:4C:80
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/f_5-tvXXBHvcZRKJ9RbYnh1_TIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:19:81:d1:52:45:e2:2a:cc:03:3f:1f:4c:23:73:3d:08:01:
09:c7:92:cb:f8:55:66:7c:90:e1:ae:7e:47:30:5d:5c:e0:37:
72:3d:e7:ac:c8:dd:77:93:92:02:d5:7c:39:b7:47:5d:d6:39:
81:66:44:6d:51:5d:2a:d2:86:89:dc:ae:01:38:29:d9:94:44:
d4:53:da:22:0e:bc:3b:5f:7b:12:9e:20:77:39:34:a6:7e:a5:
b9:a3:d4:10:41:dc:55:d5:dc:73:b3:c7:a9:ee:d8:bf:f4:ca:
f4:26:33:f5:18:cc:2d:34:af:73:e6:68:c7:0e:7c:37:c2:a9:
b2:ce:91:c6:54:a9:76:c3:bc:d0:ce:d0:48:64:b1:b2:cb:f9:
34:45:58:a6:6c:5a:e8:4d:52:d0:25:d5:46:c5:e7:14:65:e3:
22:6d:c4:54:12:1b:a7:85:ec:99:01:d0:4d:6c:d5:e5:e0:c4:
2d:80:64:3a:02:b2:45:73:b9:84:9d:7b:c6:a9:e8:17:69:f8:
47:53:45:19:94:b8:f0:91:3c:35:99:5d:f8:85:de:61:ec:f9:
40:21:6a:c5:00:e9:6b:93:05:c3:dd:80:bf:e6:73:38:e8:e5:
6f:ce:3d:8e:14:0f:82:df:a1:9d:c3:24:e9:d6:fa:67:65:51:
4e:2e:ec:3c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDClCLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE3
YmU4MjdhNTgwZGU2MTUzOGRkZWZhMjgyMzk0NjhjNGU5MDFiNDAwHhcNMjIwNjIy
MDYwMjQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3ZmZlN2ViNmY1ZDcw
NDdiZGM2NTEyODlmNTE2ZDg5ZTFkN2Y0YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsL595V+Ce0240BshfCaFA8uSE8QskAi+gYCkMLE2hVpfTdht
FRwTLCfHcCBFF0EQVIZL4h0Uoujga150mzRfrcAo6cDkdZYSsFMiXcpwH62O5uMq
NxTaG+/NEef2wFqydNE/FG2BxVVVwVrD7/dKjuuQD4Ly2gCSyNif7sE4ypJJzRwI
YWU5SPjRykrcCiSvJHCaMRDBkD5yRwRCUWKrm7rmc5KtUDcF2ejhiGnyDZD9OQat
w5pu8YU5RyzqpCMaFXW+NU6YIg5qSjGQo7cZsAKIPinJyU+6iljAEEq4DQyCGtih
qaQXcU3OHfwPTi4uKL5ZGHBlbSd6/5rcEEA1VwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFH/+frb11wR73GUSifUW2J4df0yAMB8GA1UdIwQYMBaAFBe+gnpYDeYVON3v
ooI5RoxOkBtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Rjc2Q2VsZ041aFU0M2UtaWdqbEdqRTZRRzBBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84Ni80OTBlMDEtY2FmOS00ZDQ0LThmNTctYTFkOWQwZjg4NjI5LzEv
Zl81LXR2WFhCSHZjWlJLSjlSYlluaDFfVElBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80
OTBlMDEtY2FmOS00ZDQ0LThmNTctYTFkOWQwZjg4NjI5LzEvRjc2Q2VsZ041aFU0
M2UtaWdqbEdqRTZRRzBBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHhrMA0GCSqGSIb3DQEBCwUAA4IB
AQCnGYHRUkXiKswDPx9MI3M9CAEJx5LL+FVmfJDhrn5HMF1c4DdyPeesyN13k5IC
1Xw5t0dd1jmBZkRtUV0q0oaJ3K4BOCnZlETUU9oiDrw7X3sSniB3OTSmfqW5o9QQ
QdxV1dxzs8ep7ti/9Mr0JjP1GMwtNK9z5mjHDnw3wqmyzpHGVKl2w7zQztBIZLGy
y/k0RVimbFroTVLQJdVGxecUZeMibcRUEhunheyZAdBNbNXl4MQtgGQ6ArJFc7mE
nXvGqegXafhHU0UZlLjwkTw1mV34hd5h7PlAIWrFAOlrkwXD3YC/5nM46OVvzj2O
FA+C36GdwyTp1vpnZVFOLuw8
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:31 2023 by rpki-client on console-ams.rpki-client.org