Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/olYOWWqPZCiuDK8WdPrDquAktgg.roa
File: olYOWWqPZCiuDK8WdPrDquAktgg.roa (raw, json)
Hash identifier: Rj/eV9+Vo9DFiPTgbLT1YoIspm3MA6ltgXp4JCwJX80=
Subject key identifier: A2:56:0E:59:6A:8F:64:28:AE:0C:AF:16:74:FA:C3:AA:E0:24:B6:08
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0762983C
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/olYOWWqPZCiuDK8WdPrDquAktgg.roa
Signing time: Sat 01 Jan 2022 03:51:32 +0000
ROA not before: Sat 01 Jan 2022 03:51:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211193
IP address blocks: 176.105.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123902012 (0x762983c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 03:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2560e596a8f6428ae0caf1674fac3aae024b608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:70:40:86:90:69:c8:e4:e8:7e:3c:20:61:
c4:eb:f7:a3:98:91:83:7f:ee:26:52:cb:62:cb:d0:
2d:86:80:07:a7:af:98:0b:04:59:7c:ac:17:c4:aa:
ed:3c:8d:e0:48:10:1d:9a:38:9a:42:49:4d:84:99:
07:91:29:99:9e:9b:f6:8c:f9:a7:c1:a2:a8:55:db:
4d:0c:ff:09:64:ee:f5:29:bc:0f:7b:76:f8:c3:2e:
94:53:0d:cf:99:5e:44:77:19:21:72:3d:40:39:4c:
5b:27:82:6f:00:d9:af:19:10:91:ec:a5:25:2c:ad:
e4:19:92:f8:c5:54:70:eb:fb:d4:e5:b8:cc:8f:1c:
06:17:66:64:23:94:37:59:d0:01:0b:36:be:11:bd:
18:02:c0:29:be:83:ce:28:e3:aa:23:6f:3b:d7:59:
c4:86:91:85:6f:31:55:42:ac:75:9f:17:f3:47:a6:
ef:b5:15:93:1b:14:91:7f:95:5f:47:a2:4f:3f:cf:
f1:fb:2e:da:13:38:f6:37:ce:0f:c3:3e:d7:82:e0:
16:bc:65:dd:68:2e:f7:4b:5c:f4:9d:f9:67:19:a2:
7d:f2:e4:fd:67:4a:99:de:9c:38:91:90:7e:76:96:
26:60:2a:17:bd:4f:16:4c:4f:c4:68:1d:1e:6d:a4:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:56:0E:59:6A:8F:64:28:AE:0C:AF:16:74:FA:C3:AA:E0:24:B6:08
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/olYOWWqPZCiuDK8WdPrDquAktgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
69:16:ac:1b:e6:49:bd:b4:5c:51:84:f2:19:61:5b:c2:34:9a:
8d:12:31:c6:5a:a3:f0:fd:8c:f5:56:fa:88:7c:4e:00:aa:a9:
ab:fd:16:16:42:2b:ea:9e:78:ab:05:93:3a:81:61:4b:8a:6d:
95:48:47:d1:6b:25:e8:fd:f7:10:4c:3d:69:90:50:07:ee:63:
51:3f:09:42:4d:a7:b3:82:69:41:b9:f6:9d:c7:03:1b:89:20:
b4:cf:c9:15:9d:b5:5c:c4:13:61:b3:7e:71:49:bd:82:bf:9e:
e4:19:e4:41:7f:98:4a:b3:25:36:c9:16:74:31:2a:90:23:84:
63:c7:16:32:46:88:84:f9:26:ed:28:d6:25:8f:25:8d:e1:30:
35:b9:db:49:51:d8:71:71:3a:2a:ea:70:c2:e1:ff:45:94:a9:
7e:e8:98:0d:d8:14:cd:86:3b:14:b8:7b:de:16:4f:0e:1c:4a:
de:1e:e7:e1:8c:c3:42:b9:7d:a0:2c:26:72:4b:ba:90:ec:7d:
70:d4:23:28:6e:78:18:7d:78:61:64:66:f3:a0:03:02:a2:91:
0c:35:08:a2:b1:07:f0:4b:05:0d:a6:cb:ca:5c:10:20:d2:dc:
51:ac:8c:28:ae:b4:45:bd:5e:08:d3:9f:9f:aa:60:05:df:80:
a2:4e:ce:9e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB2KYPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjBjMGQwNDIyNTU2NmRiOTVlOWFkM2IyZWY2MDUwMTQ5NzVhYWEyMB4XDTIyMDEw
MTAzNTEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTI1NjBlNTk2YThm
NjQyOGFlMGNhZjE2NzRmYWMzYWFlMDI0YjYwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALwNcECGkGnI5Oh+PCBhxOv3o5iRg3/uJlLLYsvQLYaAB6ev
mAsEWXysF8Sq7TyN4EgQHZo4mkJJTYSZB5EpmZ6b9oz5p8GiqFXbTQz/CWTu9Sm8
D3t2+MMulFMNz5leRHcZIXI9QDlMWyeCbwDZrxkQkeylJSyt5BmS+MVUcOv71OW4
zI8cBhdmZCOUN1nQAQs2vhG9GALAKb6DzijjqiNvO9dZxIaRhW8xVUKsdZ8X80em
77UVkxsUkX+VX0eiTz/P8fsu2hM49jfOD8M+14LgFrxl3Wgu90tc9J35ZxmiffLk
/WdKmd6cOJGQfnaWJmAqF71PFkxPxGgdHm2kHFUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSiVg5Zao9kKK4MrxZ0+sOq4CS2CDAfBgNVHSMEGDAWgBSbDA0EIlVm25Xp
rTsu9gUBSXWqojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L213d05CQ0pWWnR1VjZhMDdMdllGQVVsMXFxSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvMGVjNmQyLWYxZDctNGIwYS1hZDMzLWU4ZWYyZjA5NTk4ZS8x
L29sWU9XV3FQWkNpdURLOFdkUHJEcXVBa3RnZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
MGVjNmQyLWYxZDctNGIwYS1hZDMzLWU4ZWYyZjA5NTk4ZS8xL213d05CQ0pWWnR1
VjZhMDdMdllGQVVsMXFxSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALBp5TANBgkqhkiG9w0BAQsFAAOC
AQEAaRasG+ZJvbRcUYTyGWFbwjSajRIxxlqj8P2M9Vb6iHxOAKqpq/0WFkIr6p54
qwWTOoFhS4ptlUhH0Wsl6P33EEw9aZBQB+5jUT8JQk2ns4JpQbn2nccDG4kgtM/J
FZ21XMQTYbN+cUm9gr+e5BnkQX+YSrMlNskWdDEqkCOEY8cWMkaIhPkm7SjWJY8l
jeEwNbnbSVHYcXE6KupwwuH/RZSpfuiYDdgUzYY7FLh73hZPDhxK3h7n4YzDQrl9
oCwmcku6kOx9cNQjKG54GH14YWRm86ADAqKRDDUIorEH8EsFDabLylwQINLcUayM
KK60Rb1eCNOfn6pgBd+Aok7Ong==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:19 2023 by rpki-client on console-fra.rpki-client.org