Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/aIJTan9DgSvRWxoODWDPlYua3f0.roa
File: aIJTan9DgSvRWxoODWDPlYua3f0.roa (raw, json)
Hash identifier: MfSAIvDatL1VX+hhHfnp8NvsASNLP/x35ztKavGum5k=
Subject key identifier: 68:82:53:6A:7F:43:81:2B:D1:5B:1A:0E:0D:60:CF:95:8B:9A:DD:FD
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16EEA531
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/aIJTan9DgSvRWxoODWDPlYua3f0.roa
Signing time: Sat 01 Jan 2022 12:01:46 +0000
ROA not before: Sat 01 Jan 2022 12:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211381
IP address blocks: 178.170.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384738609 (0x16eea531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6882536a7f43812bd15b1a0e0d60cf958b9addfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:f3:be:de:47:34:e9:13:3b:fe:11:f7:0c:
cf:3d:90:3b:91:05:2f:f0:05:28:eb:78:04:d7:f2:
59:d8:7a:c3:47:95:ca:70:05:f5:4f:ec:77:c0:86:
7e:06:dc:75:38:a8:02:d7:dd:4e:11:9b:a5:db:9f:
86:71:3f:e2:ac:42:c3:60:7c:d2:ec:b2:94:63:82:
15:2a:22:a3:66:46:1f:b3:03:a2:43:c3:1a:ea:fe:
3f:17:8b:23:73:27:8e:dd:6a:13:b3:fd:d8:3a:2a:
7c:d4:18:fe:0c:01:6d:1d:13:75:9b:72:55:ab:81:
f2:fe:5b:92:f1:5d:71:bf:de:6e:c5:05:cb:43:c8:
20:53:61:da:09:66:5d:4e:56:fa:4d:2c:e5:16:00:
5b:19:7f:4b:b3:16:88:3d:53:9c:0e:9f:50:7b:cb:
bd:bb:b9:5b:b5:e8:0f:11:e3:1c:8c:41:64:5b:27:
82:86:06:f9:39:b4:cb:e9:78:ef:e2:96:85:12:4a:
20:0f:60:30:d5:e9:c6:e9:dc:da:b6:02:8e:c1:ca:
42:af:4a:6d:2d:40:32:70:66:f4:d6:01:05:67:c8:
99:0c:5b:f7:08:83:91:02:ec:df:99:ad:51:4a:a1:
23:6f:60:d6:64:7a:11:85:b4:63:67:e0:4c:64:82:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:82:53:6A:7F:43:81:2B:D1:5B:1A:0E:0D:60:CF:95:8B:9A:DD:FD
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/aIJTan9DgSvRWxoODWDPlYua3f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2b:d1:49:40:89:95:d8:c6:67:67:93:05:f4:08:5e:b8:36:
66:39:9a:d4:24:7d:d9:36:78:c5:db:2a:ac:50:97:7a:9d:05:
9b:ba:eb:60:7f:ce:06:31:05:28:a9:76:95:bd:77:b8:4d:6a:
b3:2a:1f:39:d7:07:e0:6b:83:a2:bc:a1:d0:01:f6:b3:9a:6f:
f8:af:72:e0:12:40:ad:19:38:a0:76:49:32:02:35:15:39:4f:
d9:3b:95:2f:34:6e:25:c9:70:5e:c0:fa:f5:4d:a3:07:0b:2c:
83:eb:50:a8:ea:fb:d6:92:c0:21:8f:ed:af:07:da:96:03:99:
bf:12:45:2a:b5:cc:e4:2e:7b:49:d5:26:0c:e5:79:cb:25:04:
45:ed:9b:54:88:78:cf:be:1c:d6:e4:5e:3a:ed:83:94:28:2a:
fe:d4:dd:47:cc:0f:43:97:22:b7:70:05:9d:eb:65:d4:81:7d:
c0:68:ca:84:57:f9:35:cf:8f:4b:46:52:18:65:a3:f9:7f:3f:
bd:66:94:d8:8b:da:4e:b5:44:e9:86:11:40:61:f1:ec:73:ca:
c3:55:36:ad:f9:39:d4:1c:bc:45:61:4c:22:f0:f5:a1:15:ac:
e8:46:95:ff:b4:fa:9f:32:36:2a:19:af:4a:ae:28:f5:83:49:
e0:32:42:1c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFu6lMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDEw
MTEyMDE0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjg4MjUzNmE3ZjQz
ODEyYmQxNWIxYTBlMGQ2MGNmOTU4YjlhZGRmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVz877eRzTpEzv+EfcMzz2QO5EFL/AFKOt4BNfyWdh6w0eV
ynAF9U/sd8CGfgbcdTioAtfdThGbpdufhnE/4qxCw2B80uyylGOCFSoio2ZGH7MD
okPDGur+PxeLI3Mnjt1qE7P92DoqfNQY/gwBbR0TdZtyVauB8v5bkvFdcb/ebsUF
y0PIIFNh2glmXU5W+k0s5RYAWxl/S7MWiD1TnA6fUHvLvbu5W7XoDxHjHIxBZFsn
goYG+Tm0y+l47+KWhRJKIA9gMNXpxunc2rYCjsHKQq9KbS1AMnBm9NYBBWfImQxb
9wiDkQLs35mtUUqhI29g1mR6EYW0Y2fgTGSC8MUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRoglNqf0OBK9FbGg4NYM+Vi5rd/TAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L2FJSlRhbjlEZ1N2Uld4b09EV0RQbFl1YTNmMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALKqvTANBgkqhkiG9w0BAQsFAAOC
AQEAfSvRSUCJldjGZ2eTBfQIXrg2Zjma1CR92TZ4xdsqrFCXep0Fm7rrYH/OBjEF
KKl2lb13uE1qsyofOdcH4GuDoryh0AH2s5pv+K9y4BJArRk4oHZJMgI1FTlP2TuV
LzRuJclwXsD69U2jBwssg+tQqOr71pLAIY/trwfalgOZvxJFKrXM5C57SdUmDOV5
yyUERe2bVIh4z74c1uReOu2DlCgq/tTdR8wPQ5cit3AFnetl1IF9wGjKhFf5Nc+P
S0ZSGGWj+X8/vWaU2IvaTrVE6YYRQGHx7HPKw1U2rfk51By8RWFMIvD1oRWs6EaV
/7T6nzI2KhmvSq4o9YNJ4DJCHA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org