Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/8_rulsh5Cn8OFtFpPGD7Flco3_w.roa
File: 8_rulsh5Cn8OFtFpPGD7Flco3_w.roa (raw, json)
Hash identifier: whH3F8X355ixyFbBmhDAgzkCf/XBei4wwDP62lg11pk=
Subject key identifier: F3:FA:EE:96:C8:79:0A:7F:0E:16:D1:69:3C:60:FB:16:57:28:DF:FC
Certificate issuer: /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial: 013DF9
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/8_rulsh5Cn8OFtFpPGD7Flco3_w.roa
Signing time: Mon 24 Jan 2022 13:17:29 +0000
ROA not before: Mon 24 Jan 2022 13:17:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201935
IP address blocks: 178.219.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81401 (0x13df9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Validity
Not Before: Jan 24 13:17:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3faee96c8790a7f0e16d1693c60fb165728dffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:fe:8b:fe:d9:33:c4:64:67:15:9a:62:45:
ab:b1:58:b3:9f:b8:63:92:61:17:c3:3e:9c:c3:ad:
bb:5e:7f:cc:99:1f:67:b8:79:d4:c3:25:42:8b:3b:
e9:3d:98:42:53:fa:d1:f7:a5:47:75:0d:07:68:be:
21:2d:08:a3:ca:75:c2:8f:4f:c0:40:e5:8c:54:3d:
77:d1:da:74:88:75:5a:16:f2:fe:f0:16:98:9b:27:
2b:9e:38:ea:93:5f:6a:18:b9:23:54:55:55:6c:e8:
c4:91:5c:a7:02:f5:0d:a3:54:5b:a1:5d:19:67:c2:
7a:63:28:75:40:14:f8:01:76:ff:14:07:5f:91:bc:
c4:73:ca:bd:b8:c7:d6:0c:4c:38:23:b3:c7:49:45:
d3:68:ba:0e:e7:8a:cb:92:4c:81:24:aa:52:5b:b6:
23:b6:8b:87:cd:26:16:98:ca:4e:51:12:28:65:e8:
aa:67:05:46:8c:72:ed:30:20:75:7a:de:b9:0b:6f:
e1:21:9b:8d:33:c3:eb:88:92:9f:4d:e2:b6:76:68:
63:dd:2b:ad:b4:4d:fb:50:90:f7:01:db:25:fd:b0:
d2:1e:e6:3e:ce:3d:d6:25:ef:cc:fa:11:0f:88:ce:
b0:4f:c1:d5:54:60:8d:05:d0:ed:1c:52:bb:85:1f:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:EE:96:C8:79:0A:7F:0E:16:D1:69:3C:60:FB:16:57:28:DF:FC
X509v3 Authority Key Identifier:
keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/8_rulsh5Cn8OFtFpPGD7Flco3_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.64.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:9f:31:80:e4:a7:97:bb:39:c6:a2:f5:16:e7:54:cf:d7:9d:
a4:f3:6e:73:f3:08:e1:2e:7c:92:0e:a6:bd:b8:d1:93:73:39:
ba:82:18:4a:cd:ff:81:3f:6f:0c:89:b9:64:de:b5:99:be:27:
67:f8:7c:cc:74:ba:ca:9a:5a:61:8f:7d:09:86:29:0a:01:aa:
8c:8b:5b:fa:99:60:bc:6f:a7:02:6b:d7:7e:f6:f2:f1:9e:93:
a1:5d:5d:4f:9a:a6:c4:05:2b:66:b9:88:1a:5a:a8:83:68:f7:
2e:f4:0d:85:29:f4:fa:42:d7:d0:6c:4b:45:77:fc:1c:30:a6:
ab:77:b4:bc:c0:e1:8b:eb:d8:0c:bd:80:0a:cb:a8:42:15:34:
73:e8:1f:e0:9f:2f:96:36:aa:de:75:e0:9d:c7:0a:e6:2a:18:
0f:34:05:2e:ec:6e:24:8a:af:0b:a1:61:f6:51:be:2d:2b:3d:
91:89:58:e3:28:25:70:f9:4e:f6:27:a6:d4:bf:08:19:26:37:
82:33:cf:5e:f9:13:dc:94:b1:44:6d:10:62:b8:eb:5c:0b:8f:
1b:7d:90:5f:b3:e2:5c:46:ce:f6:48:bd:c5:82:88:6f:cf:20:
4e:ca:52:e1:6f:74:a1:01:4a:72:0c:e9:7e:41:81:3e:d0:43:
a5:bb:ca:6c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAT35MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU2
ODhiMTFjNWYyNGYyZTkzOGM4OGE1MWNiNDljZWIxMzUzNjQzODkwHhcNMjIwMTI0
MTMxNzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmM2ZhZWU5NmM4Nzkw
YTdmMGUxNmQxNjkzYzYwZmIxNjU3MjhkZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA34H+i/7ZM8RkZxWaYkWrsVizn7hjkmEXwz6cw627Xn/MmR9n
uHnUwyVCizvpPZhCU/rR96VHdQ0HaL4hLQijynXCj0/AQOWMVD130dp0iHVaFvL+
8BaYmycrnjjqk19qGLkjVFVVbOjEkVynAvUNo1RboV0ZZ8J6Yyh1QBT4AXb/FAdf
kbzEc8q9uMfWDEw4I7PHSUXTaLoO54rLkkyBJKpSW7YjtouHzSYWmMpOURIoZeiq
ZwVGjHLtMCB1et65C2/hIZuNM8PriJKfTeK2dmhj3SuttE37UJD3Adsl/bDSHuY+
zj3WJe/M+hEPiM6wT8HVVGCNBdDtHFK7hR9ETwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFPP67pbIeQp/DhbRaTxg+xZXKN/8MB8GA1UdIwQYMBaAFFaIsRxfJPLpOMiK
UctJzrE1NkOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Vm9peEhGOGs4dWs0eUlwUnkwbk9zVFUyUTRrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84YS8zYjE2NTctNzg5MS00MWEyLThiMWQtYzg0MjFjM2I2NTU0LzEv
OF9ydWxzaDVDbjhPRnRGcFBHRDdGbGNvM193LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8z
YjE2NTctNzg5MS00MWEyLThiMWQtYzg0MjFjM2I2NTU0LzEvVm9peEhGOGs4dWs0
eUlwUnkwbk9zVFUyUTRrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsttAMA0GCSqGSIb3DQEBCwUAA4IB
AQCknzGA5KeXuznGovUW51TP152k825z8wjhLnySDqa9uNGTczm6ghhKzf+BP28M
iblk3rWZvidn+HzMdLrKmlphj30JhikKAaqMi1v6mWC8b6cCa9d+9vLxnpOhXV1P
mqbEBStmuYgaWqiDaPcu9A2FKfT6QtfQbEtFd/wcMKard7S8wOGL69gMvYAKy6hC
FTRz6B/gny+WNqredeCdxwrmKhgPNAUu7G4kiq8LoWH2Ub4tKz2RiVjjKCVw+U72
J6bUvwgZJjeCM89e+RPclLFEbRBiuOtcC48bfZBfs+JcRs72SL3FgohvzyBOylLh
b3ShAUpyDOl+QYE+0EOlu8ps
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:12 2024 by rpki-client on console-fra.rpki-client.org