Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/mDG4vGgFbF_bKXitGwfupM-Dxk0.roa
File: mDG4vGgFbF_bKXitGwfupM-Dxk0.roa (raw, json)
Hash identifier: 3+6REoSXTe3F46yh2fWArkAJAxtGQJFu6DkyRF3eZOQ=
Subject key identifier: 98:31:B8:BC:68:05:6C:5F:DB:29:78:AD:1B:07:EE:A4:CF:83:C6:4D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018B1978E806044D964F0CC1B914C90B49EC
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/mDG4vGgFbF_bKXitGwfupM-Dxk0.roa
Signing time: Tue 10 Oct 2023 12:03:55 +0000
ROA not before: Tue 10 Oct 2023 12:03:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 178.239.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:78:e8:06:04:4d:96:4f:0c:c1:b9:14:c9:0b:49:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 10 12:03:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9831b8bc68056c5fdb2978ad1b07eea4cf83c64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:f7:59:99:0f:c5:7e:00:4b:08:0b:1b:26:
d4:40:88:92:d7:b6:19:dd:22:02:d9:7e:78:f9:3c:
00:14:74:2f:79:e9:80:a0:38:ad:01:23:5a:5b:8a:
6e:c0:72:89:88:83:99:7d:aa:1a:32:21:37:40:8f:
b1:e1:3e:7e:99:0a:b7:2b:c3:22:31:58:fa:92:4e:
bf:4d:b8:b5:1f:d4:66:c8:76:bf:65:17:e0:4e:68:
8a:79:bc:8c:fe:37:c0:6a:d5:55:62:8e:03:21:dd:
81:6c:f7:26:55:a0:53:29:7a:f8:06:74:7e:a6:e9:
4f:b0:4f:aa:1c:ec:a4:1a:f5:20:5a:f6:35:e8:ea:
59:42:54:49:82:0e:9b:df:15:5e:9a:c7:85:cc:63:
fd:9a:c1:01:7a:32:7a:c4:cc:6e:6a:5b:84:06:ea:
07:9b:04:a1:41:e4:ca:50:a5:a9:df:db:01:86:c4:
26:df:8b:f9:5c:99:93:5b:be:27:29:0c:af:14:a5:
4b:bc:d8:49:44:11:66:17:40:60:22:b5:5f:11:11:
10:9a:f4:7c:68:4e:82:9e:0c:aa:54:42:8e:87:9b:
ca:36:6f:9b:05:b1:db:72:71:ad:9d:c9:26:b1:ad:
b0:27:eb:b4:b8:69:54:7f:53:fa:4d:47:b0:18:b8:
96:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:B8:BC:68:05:6C:5F:DB:29:78:AD:1B:07:EE:A4:CF:83:C6:4D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/mDG4vGgFbF_bKXitGwfupM-Dxk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ef:5c:65:12:7f:16:6c:18:1b:3e:8b:7c:91:96:ee:69:ef:
53:98:d5:ec:6b:70:ac:c5:14:ff:45:fc:71:8b:90:47:d8:d0:
c3:da:bb:88:0f:15:ca:14:f3:39:a4:4c:88:85:d7:2d:9f:04:
3b:fd:89:d5:2b:f6:4d:02:4a:e2:aa:5e:dc:eb:3a:34:f4:32:
4e:e1:59:51:3c:61:0e:ad:cf:03:cb:71:3a:2d:7b:4d:ae:1d:
3d:10:0e:d9:b3:e7:7b:db:ea:88:5a:c0:8b:e1:7b:b5:43:8d:
49:3a:cf:f3:a7:f1:9d:83:1b:e2:6a:8b:16:2a:8d:ae:5e:51:
1c:4f:1b:41:95:47:98:09:6b:42:6b:59:89:ae:f5:1f:3d:bf:
b1:8b:f7:b3:ba:6f:91:36:8e:3f:2d:b2:af:05:65:c4:9b:5b:
1b:6d:39:0b:2a:bb:a4:3a:6c:bc:17:e0:e7:10:f8:9b:70:db:
9b:80:6c:25:b5:74:31:d4:b8:27:e4:ca:3e:a0:0c:ac:2b:a9:
4d:1e:2d:56:41:d5:3e:41:5c:4b:42:95:53:2c:34:b1:9b:28:
34:9f:4b:ad:26:fb:96:88:32:75:86:a0:67:b5:e9:8f:89:78:
3e:42:15:06:01:b0:9c:41:4d:cd:3c:35:bd:a3:f7:bd:3e:b3:
70:90:3a:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsZeOgGBE2WTwzBuRTJC0nsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMxMDEwMTIwMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODMxYjhiYzY4MDU2YzVmZGIyOTc4YWQxYjA3ZWVhNGNmODNjNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaf3WZkPxX4ASwgLGybUQIiS17YZ
3SIC2X54+TwAFHQveemAoDitASNaW4puwHKJiIOZfaoaMiE3QI+x4T5+mQq3K8Mi
MVj6kk6/Tbi1H9RmyHa/ZRfgTmiKebyM/jfAatVVYo4DId2BbPcmVaBTKXr4BnR+
pulPsE+qHOykGvUgWvY16OpZQlRJgg6b3xVemseFzGP9msEBejJ6xMxualuEBuoH
mwShQeTKUKWp39sBhsQm34v5XJmTW74nKQyvFKVLvNhJRBFmF0BgIrVfEREQmvR8
aE6CngyqVEKOh5vKNm+bBbHbcnGtnckmsa2wJ+u0uGlUf1P6TUewGLiWJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgxuLxoBWxf2yl4rRsH7qTPg8ZNMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvbURHNHZHZ0ZiRl9iS1hpdEd3ZnVwTS1EeGswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+WMA0G
CSqGSIb3DQEBCwUAA4IBAQAf71xlEn8WbBgbPot8kZbuae9TmNXsa3CsxRT/Rfxx
i5BH2NDD2ruIDxXKFPM5pEyIhdctnwQ7/YnVK/ZNAkriql7c6zo09DJO4VlRPGEO
rc8Dy3E6LXtNrh09EA7Zs+d72+qIWsCL4Xu1Q41JOs/zp/GdgxviaosWKo2uXlEc
TxtBlUeYCWtCa1mJrvUfPb+xi/ezum+RNo4/LbKvBWXEm1sbbTkLKrukOmy8F+Dn
EPibcNubgGwltXQx1Lgn5Mo+oAysK6lNHi1WQdU+QVxLQpVTLDSxmyg0n0utJvuW
iDJ1hqBntemPiXg+QhUGAbCcQU3NPDW9o/e9PrNwkDoT
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:33 2025 by rpki-client