Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/t7CymMVK8vn1IUkOASpWCEPVg-Q.roa
File: t7CymMVK8vn1IUkOASpWCEPVg-Q.roa (raw, json)
Hash identifier: wfIulcUs5LkBHWk9libEEBuZiyWVkH7Mu5ycPLSaXJY=
Subject key identifier: B7:B0:B2:98:C5:4A:F2:F9:F5:21:49:0E:01:2A:56:08:43:D5:83:E4
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 03C42BB7
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/t7CymMVK8vn1IUkOASpWCEPVg-Q.roa
Signing time: Sat 01 Jan 2022 09:02:40 +0000
ROA not before: Sat 01 Jan 2022 09:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 178.157.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63187895 (0x3c42bb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 09:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7b0b298c54af2f9f521490e012a560843d583e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:5d:e1:95:09:2b:30:3a:de:14:6c:8b:2b:
69:eb:b1:b4:8b:f3:9f:d0:84:fd:cf:dd:43:a9:5c:
43:a0:9e:1a:18:eb:e1:e4:97:02:09:d0:a5:58:c2:
09:9d:88:ba:e0:a8:e1:fe:f1:84:8f:40:15:3e:36:
af:2a:fe:1d:6a:f0:50:42:d7:9a:ba:67:45:e3:d5:
d9:82:f6:34:a5:37:9a:84:c4:c9:1b:91:47:8b:56:
07:ff:52:bc:dd:84:29:80:73:de:39:ac:8d:bf:32:
f9:6c:af:38:2a:ee:3c:dc:68:a1:be:59:b4:b3:6a:
8d:a2:e6:71:1e:4a:ea:98:52:71:ef:82:ab:c2:d7:
20:e4:11:95:7a:57:bc:ac:bf:9f:c5:76:2f:ff:a0:
a2:b9:26:ae:9c:d7:70:4d:3d:9b:81:91:f1:73:2f:
a6:b0:1b:37:9e:1d:c9:67:84:83:6b:d2:26:fd:a5:
d7:27:27:49:07:35:5a:bf:57:c8:b3:56:82:e2:f0:
f3:55:f5:c0:1a:32:01:10:cb:62:28:09:06:bd:f6:
4b:5b:bc:b8:2b:f0:01:9e:8f:98:5f:6d:a1:31:f9:
ba:b7:56:ab:6b:60:24:f0:02:6f:e5:10:45:c6:fa:
5e:17:42:55:6e:81:c9:1d:b7:49:8e:22:1a:2c:ba:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:B2:98:C5:4A:F2:F9:F5:21:49:0E:01:2A:56:08:43:D5:83:E4
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/t7CymMVK8vn1IUkOASpWCEPVg-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.100.0/24
Signature Algorithm: sha256WithRSAEncryption
37:00:75:15:14:ea:42:f1:9c:5b:3b:4a:52:b2:d0:79:39:3d:
ee:a5:71:58:c4:c1:91:b9:ad:c2:1e:a1:b8:9e:6b:56:4e:8e:
ef:46:17:cd:1b:5e:ee:ff:1c:db:bf:af:7d:3b:80:15:69:9b:
48:e0:80:56:35:d0:f7:21:12:28:5b:80:f2:50:4f:1f:b3:b9:
bc:da:03:c2:d5:c4:26:6e:29:2e:d4:5f:32:ea:f5:be:2b:89:
92:82:7d:88:c1:fa:f5:b6:34:74:69:b2:4e:ef:06:a7:cf:8b:
d1:2f:23:5a:c2:3a:67:50:4e:dc:fb:9f:e5:8f:af:a6:bb:79:
71:1d:22:03:25:79:ef:be:05:0a:33:d8:85:2e:fb:f6:a9:05:
8f:e5:9c:95:26:53:ff:e7:38:bb:16:49:41:fc:a8:f6:04:af:
73:bb:9f:18:45:f2:c2:d9:d7:c3:7b:df:09:f9:d3:15:a4:7a:
ab:5e:78:64:c1:60:2d:4c:d7:7d:41:23:78:0a:29:b3:5b:ed:
58:17:bc:75:df:9e:97:57:d6:06:73:5e:e8:ed:60:82:c0:6d:
54:91:5a:03:e9:7e:93:b2:e8:f7:b7:be:d4:aa:8c:0d:42:e3:
ce:1e:f5:12:d0:c2:f3:43:aa:32:e6:a7:e5:5a:6b:a0:e1:1d:
04:f2:92:72
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8QrtzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YjIzM2Q3NTUwOGI0ZTg1Y2NjZjQ0MzQ5YTdjYjcwMzE5OGQxZDI2MB4XDTIyMDEw
MTA5MDI0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjdiMGIyOThjNTRh
ZjJmOWY1MjE0OTBlMDEyYTU2MDg0M2Q1ODNlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN17XeGVCSswOt4UbIsraeuxtIvzn9CE/c/dQ6lcQ6CeGhjr
4eSXAgnQpVjCCZ2IuuCo4f7xhI9AFT42ryr+HWrwUELXmrpnRePV2YL2NKU3moTE
yRuRR4tWB/9SvN2EKYBz3jmsjb8y+WyvOCruPNxoob5ZtLNqjaLmcR5K6phSce+C
q8LXIOQRlXpXvKy/n8V2L/+gorkmrpzXcE09m4GR8XMvprAbN54dyWeEg2vSJv2l
1ycnSQc1Wr9XyLNWguLw81X1wBoyARDLYigJBr32S1u8uCvwAZ6PmF9toTH5urdW
q2tgJPACb+UQRcb6XhdCVW6ByR23SY4iGiy66xcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS3sLKYxUry+fUhSQ4BKlYIQ9WD5DAfBgNVHSMEGDAWgBRrIz11UItOhczP
RDSafLcDGY0dJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2F5TTlkVkNMVG9YTXowUTBtbnkzQXhtTkhTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTAvOWQ5MTkyLTI3M2MtNGNhOS1iMmJhLWZhOWNiNTFjZDBmMS8x
L3Q3Q3ltTVZLOHZuMUlVa09BU3BXQ0VQVmctUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAv
OWQ5MTkyLTI3M2MtNGNhOS1iMmJhLWZhOWNiNTFjZDBmMS8xL2F5TTlkVkNMVG9Y
TXowUTBtbnkzQXhtTkhTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALKdZDANBgkqhkiG9w0BAQsFAAOC
AQEANwB1FRTqQvGcWztKUrLQeTk97qVxWMTBkbmtwh6huJ5rVk6O70YXzRte7v8c
27+vfTuAFWmbSOCAVjXQ9yESKFuA8lBPH7O5vNoDwtXEJm4pLtRfMur1viuJkoJ9
iMH69bY0dGmyTu8Gp8+L0S8jWsI6Z1BO3Puf5Y+vprt5cR0iAyV5774FCjPYhS77
9qkFj+WclSZT/+c4uxZJQfyo9gSvc7ufGEXywtnXw3vfCfnTFaR6q154ZMFgLUzX
fUEjeAops1vtWBe8dd+el1fWBnNe6O1ggsBtVJFaA+l+k7Lo97e+1KqMDULjzh71
EtDC80OqMuan5VproOEdBPKScg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org