Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qLSd4W80y3ntVWb5WHzjsnSFwrs.roa
File: qLSd4W80y3ntVWb5WHzjsnSFwrs.roa (raw, json)
Hash identifier: p7OYKTw6AXw9blVZvB/8Gd8yJaYyvEnSoxv5cGLL5cA=
Subject key identifier: A8:B4:9D:E1:6F:34:CB:79:ED:55:66:F9:58:7C:E3:B2:74:85:C2:BB
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0183FA14D7B538DF4FD62E71FEFA8A79A8C1
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qLSd4W80y3ntVWb5WHzjsnSFwrs.roa
Signing time: Fri 21 Oct 2022 10:26:53 +0000
ROA not before: Fri 21 Oct 2022 10:26:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206812
IP address blocks: 178.170.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:14:d7:b5:38:df:4f:d6:2e:71:fe:fa:8a:79:a8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Oct 21 10:26:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8b49de16f34cb79ed5566f9587ce3b27485c2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:73:62:84:07:4d:e2:de:52:99:7c:d3:b9:
89:64:3e:3e:4b:4f:b6:af:7d:c8:86:90:9f:93:31:
7c:2f:7d:e2:39:aa:ad:42:fc:44:92:9c:d6:88:fd:
1f:ef:40:fa:dd:23:db:a5:9b:1e:10:3d:63:58:75:
22:5e:03:ee:83:fe:2c:1e:4c:88:a2:12:4c:77:be:
29:a8:cc:8e:dd:18:48:71:c0:a5:53:7d:48:ec:4f:
31:fd:c5:5e:b9:ed:9a:0a:53:64:44:28:61:71:36:
e2:a9:29:0a:26:86:cb:19:c2:62:8f:3d:78:b1:97:
be:fd:f7:7d:54:89:a7:f1:8d:74:27:02:c4:02:62:
e2:df:e1:31:36:02:62:ed:0b:db:2e:d6:41:a5:2f:
1f:0d:01:bf:ab:58:ab:67:e6:1e:a8:eb:ad:99:7e:
7d:bf:28:06:3a:c7:c1:05:96:c6:dd:b9:64:ed:b7:
67:2a:ee:67:74:71:00:94:38:fb:f9:00:fe:8d:fb:
9d:39:fa:74:1d:30:02:c5:dd:30:f6:36:db:00:5f:
ae:db:a9:5a:e7:c4:84:df:6a:42:f7:f6:e4:fb:f6:
d8:86:8b:4c:4c:a5:ca:52:70:d6:4e:09:8e:d0:27:
71:df:72:4d:05:3a:06:66:f9:18:d2:94:50:ee:ef:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B4:9D:E1:6F:34:CB:79:ED:55:66:F9:58:7C:E3:B2:74:85:C2:BB
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qLSd4W80y3ntVWb5WHzjsnSFwrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.189.0/24
Signature Algorithm: sha256WithRSAEncryption
38:56:5b:35:3d:d4:48:23:be:20:ee:4d:47:6f:fb:4c:5c:ab:
29:a7:6b:e4:20:66:b2:f6:a7:9e:df:30:6c:b4:0d:27:66:eb:
c0:60:83:13:99:f3:a6:c9:79:08:f4:e7:52:23:ab:1b:f8:97:
36:58:86:30:93:1f:80:70:e3:38:bd:65:98:c8:dd:08:6a:2a:
d5:fc:ba:07:7a:40:bf:01:37:2a:d5:d8:10:9a:dc:d4:2a:91:
5e:70:de:be:c9:0e:9f:0f:3c:20:05:f1:f3:77:35:a9:d6:e5:
38:99:e6:24:7e:df:2a:6d:6a:63:46:65:7e:31:67:c8:d6:f2:
6d:e5:9a:c7:d3:82:98:f4:67:dc:d1:b1:12:17:27:84:f9:8d:
6e:8d:ae:90:68:78:37:ca:59:ec:6c:93:21:f0:38:fe:23:9e:
9f:57:3f:6f:8c:32:bf:d2:d3:5c:f7:e8:f2:52:25:e4:ea:75:
e4:0e:ad:cc:19:f6:9a:6f:ef:76:44:69:95:be:24:a1:24:5f:
6d:3e:c7:ac:44:b0:d9:06:46:13:96:14:19:6c:5b:5a:c7:0c:
d0:15:bf:5d:22:e3:69:e4:60:1b:e0:9f:e9:9e:40:78:2f:b5:
2a:c8:62:de:bb:db:44:32:c8:51:c9:de:f8:87:11:b0:85:71:
25:59:e4:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYP6FNe1ON9P1i5x/vqKeajBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjIxMDIxMTAyNjUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGI0OWRlMTZmMzRjYjc5ZWQ1NTY2Zjk1ODdjZTNiMjc0ODVjMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ZzYoQHTeLeUpl807mJZD4+S0+2
r33IhpCfkzF8L33iOaqtQvxEkpzWiP0f70D63SPbpZseED1jWHUiXgPug/4sHkyI
ohJMd74pqMyO3RhIccClU31I7E8x/cVeue2aClNkRChhcTbiqSkKJobLGcJijz14
sZe+/fd9VImn8Y10JwLEAmLi3+ExNgJi7QvbLtZBpS8fDQG/q1irZ+YeqOutmX59
vygGOsfBBZbG3blk7bdnKu5ndHEAlDj7+QD+jfudOfp0HTACxd0w9jbbAF+u26la
58SE32pC9/bk+/bYhotMTKXKUnDWTgmO0Cdx33JNBToGZvkY0pRQ7u9+iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKi0neFvNMt57VVm+Vh847J0hcK7MB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvcUxTZDRXODB5M250VldiNVdIempzblNGd3JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsqq9MA0G
CSqGSIb3DQEBCwUAA4IBAQA4Vls1PdRII74g7k1Hb/tMXKspp2vkIGay9qee3zBs
tA0nZuvAYIMTmfOmyXkI9OdSI6sb+Jc2WIYwkx+AcOM4vWWYyN0IairV/LoHekC/
ATcq1dgQmtzUKpFecN6+yQ6fDzwgBfHzdzWp1uU4meYkft8qbWpjRmV+MWfI1vJt
5ZrH04KY9Gfc0bESFyeE+Y1uja6QaHg3ylnsbJMh8Dj+I56fVz9vjDK/0tNc9+jy
UiXk6nXkDq3MGfaab+92RGmVviShJF9tPsesRLDZBkYTlhQZbFtaxwzQFb9dIuNp
5GAb4J/pnkB4L7UqyGLeu9tEMshRyd74hxGwhXElWeRT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org