Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/935bOJWltwkh5SKZJ3an0FE62E0.roa
File: 935bOJWltwkh5SKZJ3an0FE62E0.roa (raw, json)
Hash identifier: 1dWzuL6TgsIS9Gl/OLok54pCHE49DAQVAbcGreYFGkk=
Subject key identifier: F7:7E:5B:38:95:A5:B7:09:21:E5:22:99:27:76:A7:D0:51:3A:D8:4D
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 43AEB5A6
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/935bOJWltwkh5SKZJ3an0FE62E0.roa
Signing time: Sat 01 Jan 2022 14:01:00 +0000
ROA not before: Sat 01 Jan 2022 14:01:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203000
IP address blocks: 176.65.255.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135523238 (0x43aeb5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 14:01:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f77e5b3895a5b70921e522992776a7d0513ad84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:66:c5:a5:bd:94:5e:10:d1:c7:24:0d:e5:69:
0f:2f:17:d0:0a:53:99:38:bb:a6:c1:09:80:c9:2b:
b5:88:a6:6f:07:c9:60:34:82:02:12:35:62:f6:e8:
0d:17:fe:85:ac:c7:ee:a0:7e:fe:35:18:7b:67:44:
a6:f5:eb:33:c8:c5:34:3e:29:b3:7b:6d:57:cc:ee:
bc:2c:d1:9d:95:de:fd:97:2d:01:9e:b5:fd:1f:f6:
d2:0a:b3:65:d9:c8:58:18:50:2b:3d:48:52:54:93:
b3:7e:9e:73:8c:4d:fc:6e:54:c3:d5:71:13:b0:c2:
4f:14:35:18:c2:4d:07:08:ca:8d:37:df:d8:d8:20:
81:55:be:47:1b:e0:ac:1d:09:07:e0:0b:61:3f:3f:
c1:93:ea:ac:45:4c:35:89:eb:45:aa:fa:d4:32:ae:
fe:7f:9e:26:66:a1:c2:95:a5:18:95:8b:e4:08:96:
b7:39:10:8e:7b:1f:c2:ca:54:74:bf:98:c3:f5:c5:
8a:02:09:36:5e:b1:0a:54:3c:b1:27:e7:70:4a:ed:
0f:2f:9a:90:9a:f5:b0:34:41:3d:dd:53:70:7b:0d:
ca:6a:a6:8b:23:00:12:28:7b:ae:f9:db:68:01:06:
29:f9:8e:b0:1e:26:58:72:e9:f1:d3:c8:f9:8b:a9:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7E:5B:38:95:A5:B7:09:21:E5:22:99:27:76:A7:D0:51:3A:D8:4D
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/935bOJWltwkh5SKZJ3an0FE62E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c1:f9:b9:ce:df:36:43:fb:29:59:5c:40:de:24:bd:fa:e3:
ac:25:e8:5f:a9:bc:4b:2b:f7:60:c2:60:42:4c:ed:30:4a:50:
78:e3:e0:a7:54:08:41:c9:4e:ad:5d:f3:82:c7:67:85:45:55:
02:79:e6:3e:8c:2a:4b:da:2c:96:d9:06:53:2e:f2:a5:b6:bd:
c7:a7:68:33:f4:bb:dd:5c:fb:e6:3e:14:dc:92:69:7f:71:d7:
aa:d7:72:b8:1e:4d:53:71:cc:58:a9:f1:cd:86:a3:93:66:e6:
ef:c8:54:d9:d9:c9:50:58:74:d4:a9:b3:ef:a4:eb:89:33:31:
ad:44:e7:a6:c8:47:fa:23:95:b8:06:ea:57:43:a3:18:1c:96:
dc:36:eb:55:5a:ba:1c:d5:76:9f:61:3e:91:9f:0a:8f:8a:f7:
63:5e:c5:e6:47:fa:5d:dd:87:c2:67:c6:b5:3d:46:92:e8:3d:
63:ed:78:ab:8d:d4:24:d1:b9:dd:01:04:f0:52:68:88:3d:c3:
6a:ca:1c:25:ea:52:af:dc:e3:19:ab:ae:8d:e3:8c:a0:8e:2f:
7b:c5:97:0f:06:86:ac:87:b6:df:14:46:a3:69:84:bf:d3:8a:
3f:c4:22:ef:24:a3:7b:0f:20:41:f2:c5:d9:45:a2:0f:5a:86:
a0:e6:b5:f0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQ661pjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjUyNjM0YTJlYjAzZjg1NjViNWUzM2RjMmI5ZjQ5MDQxZjdjZmIwMB4XDTIyMDEw
MTE0MDEwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjc3ZTViMzg5NWE1
YjcwOTIxZTUyMjk5Mjc3NmE3ZDA1MTNhZDg0ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOBmxaW9lF4Q0cckDeVpDy8X0ApTmTi7psEJgMkrtYimbwfJ
YDSCAhI1YvboDRf+hazH7qB+/jUYe2dEpvXrM8jFND4ps3ttV8zuvCzRnZXe/Zct
AZ61/R/20gqzZdnIWBhQKz1IUlSTs36ec4xN/G5Uw9VxE7DCTxQ1GMJNBwjKjTff
2NgggVW+RxvgrB0JB+ALYT8/wZPqrEVMNYnrRar61DKu/n+eJmahwpWlGJWL5AiW
tzkQjnsfwspUdL+Yw/XFigIJNl6xClQ8sSfncErtDy+akJr1sDRBPd1TcHsNymqm
iyMAEih7rvnbaAEGKfmOsB4mWHLp8dPI+YupzMcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT3fls4laW3CSHlIpkndqfQUTrYTTAfBgNVHSMEGDAWgBRbUmNKLrA/hWW1
4z3CufSQQffPsDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cxSmpTaTZ3UDRWbHRlTTl3cm4wa0VIM3o3QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvN2E1YjQ0LTZiMTgtNDJkMy1hOGQ1LWRjNjU1NGZkMTIzNS8x
LzkzNWJPSldsdHdraDVTS1pKM2FuMEZFNjJFMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
N2E1YjQ0LTZiMTgtNDJkMy1hOGQ1LWRjNjU1NGZkMTIzNS8xL1cxSmpTaTZ3UDRW
bHRlTTl3cm4wa0VIM3o3QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALBB/zANBgkqhkiG9w0BAQsFAAOC
AQEAW8H5uc7fNkP7KVlcQN4kvfrjrCXoX6m8Syv3YMJgQkztMEpQeOPgp1QIQclO
rV3zgsdnhUVVAnnmPowqS9osltkGUy7ypba9x6doM/S73Vz75j4U3JJpf3HXqtdy
uB5NU3HMWKnxzYajk2bm78hU2dnJUFh01Kmz76TriTMxrUTnpshH+iOVuAbqV0Oj
GByW3DbrVVq6HNV2n2E+kZ8Kj4r3Y17F5kf6Xd2HwmfGtT1Gkug9Y+14q43UJNG5
3QEE8FJoiD3DasocJepSr9zjGauujeOMoI4ve8WXDwaGrIe23xRGo2mEv9OKP8Qi
7ySjew8gQfLF2UWiD1qGoOa18A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:07 2024 by rpki-client on console-fra.rpki-client.org