Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/yGmUGpw6WtUWKEb6Eg9TO4X-1g4.roa
File: yGmUGpw6WtUWKEb6Eg9TO4X-1g4.roa (raw, json)
Hash identifier: vHFU+PBWTYDGDs2jel7kNpKpXwly82NTplvN5FO9iGQ=
Subject key identifier: C8:69:94:1A:9C:3A:5A:D5:16:28:46:FA:12:0F:53:3B:85:FE:D6:0E
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 01837E4889CFF8AA0C897125794D9B438D99
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/yGmUGpw6WtUWKEb6Eg9TO4X-1g4.roa
Signing time: Tue 27 Sep 2022 09:30:26 +0000
ROA not before: Tue 27 Sep 2022 09:30:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30902
IP address blocks: 78.111.3.0/24 maxlen: 24
78.111.0.0/23 maxlen: 23
78.111.0.0/24 maxlen: 24
78.111.0.0/22 maxlen: 22
78.111.2.0/23 maxlen: 23
78.111.2.0/24 maxlen: 24
87.247.177.0/24 maxlen: 24
87.247.176.0/23 maxlen: 23
87.247.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:48:89:cf:f8:aa:0c:89:71:25:79:4d:9b:43:8d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Sep 27 09:30:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c869941a9c3a5ad5162846fa120f533b85fed60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:90:af:b2:19:99:0b:93:cd:cd:71:2d:32:
f5:22:67:b2:97:3f:88:d0:29:a4:1c:19:96:1d:d6:
79:eb:09:b8:d7:bb:27:f0:fe:82:f7:d6:f5:41:5e:
51:9e:49:90:80:6b:99:e8:d5:5d:5e:cc:5e:21:f1:
bc:84:71:0b:bd:b2:42:9c:20:23:c4:da:e3:ce:24:
9a:9a:fb:72:98:64:06:df:fa:95:1d:76:b0:61:a0:
d5:b5:7d:f5:bd:95:68:da:39:8b:ba:c7:55:b1:14:
4d:1f:3b:2e:ad:70:60:d9:73:94:aa:01:7f:89:95:
30:c3:22:1a:35:82:86:7e:5f:73:8f:d2:ba:f2:70:
f3:09:f1:3f:69:36:af:99:4a:c1:e4:b8:13:31:a7:
d0:76:22:1a:37:4c:18:43:a0:e8:10:93:d5:89:ee:
b6:fe:14:b5:95:9b:a8:a1:79:ce:7d:fd:65:1a:99:
7a:a0:de:ad:97:b2:2c:a3:fb:a3:c9:21:3e:92:80:
cb:7f:4d:80:b2:08:73:10:38:9e:10:9a:65:2b:04:
4f:fe:f3:c7:da:f8:d0:de:d1:09:92:8e:ef:a5:82:
fc:3f:a3:c1:72:8d:ef:87:a4:64:b3:78:e6:f0:1e:
42:dc:47:df:ee:84:06:65:9f:41:30:a5:84:51:90:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:69:94:1A:9C:3A:5A:D5:16:28:46:FA:12:0F:53:3B:85:FE:D6:0E
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/yGmUGpw6WtUWKEb6Eg9TO4X-1g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.0.0/22
87.247.176.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:e4:b4:3d:e0:9a:9d:6c:3a:ed:85:c9:9b:56:a3:e3:dd:56:
a8:28:d9:ba:dc:b7:24:c7:6d:3f:90:12:ea:40:03:5c:c6:97:
bc:5c:84:55:04:a4:f0:35:d0:9a:53:53:34:26:57:1b:28:8d:
e7:3e:f9:6b:52:55:90:db:11:22:a7:3b:8d:0d:57:d5:ca:43:
76:53:e4:93:a8:b3:24:65:93:2a:e6:ae:39:fc:1f:35:c9:8e:
98:7e:48:51:de:83:cd:7c:4b:d3:96:c5:42:7e:9c:89:ab:7e:
3f:76:d9:79:c8:ff:b2:c9:14:40:15:d0:ed:e6:66:91:f8:90:
7b:27:65:bf:b3:9b:60:fd:47:60:9a:ea:9f:43:84:df:47:40:
64:88:51:11:0a:21:43:54:ec:7f:cc:b4:32:b5:80:cc:b6:cd:
12:f7:5e:31:57:e8:ae:ff:b8:5a:2d:b6:83:ef:96:7c:dd:67:
9e:7f:31:9d:34:c5:64:fe:61:f4:f3:87:73:4e:01:dd:b8:09:
29:01:20:bc:d3:72:ec:c0:b9:81:b3:60:72:7b:7c:82:cb:2e:
b0:5c:3b:f6:be:5b:65:97:54:26:ff:29:87:5c:c5:7b:3a:19:
e8:e9:6b:9a:35:ed:6f:dc:c2:77:9e:e4:f0:fc:15:a5:57:70:
f8:bc:3b:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYN+SInP+KoMiXEleU2bQ42ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NDk3ODc3OWU5MzBlMDFmYmZlN2UwYzVmY2I0MTYxMTEy
OWQ0ZTgwHhcNMjIwOTI3MDkzMDI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODY5OTQxYTljM2E1YWQ1MTYyODQ2ZmExMjBmNTMzYjg1ZmVkNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcSQr7IZmQuTzc1xLTL1Imeylz+I
0CmkHBmWHdZ56wm417sn8P6C99b1QV5RnkmQgGuZ6NVdXsxeIfG8hHELvbJCnCAj
xNrjziSamvtymGQG3/qVHXawYaDVtX31vZVo2jmLusdVsRRNHzsurXBg2XOUqgF/
iZUwwyIaNYKGfl9zj9K68nDzCfE/aTavmUrB5LgTMafQdiIaN0wYQ6DoEJPVie62
/hS1lZuooXnOff1lGpl6oN6tl7Iso/ujySE+koDLf02AsghzEDieEJplKwRP/vPH
2vjQ3tEJko7vpYL8P6PBco3vh6Rks3jm8B5C3Eff7oQGZZ9BMKWEUZB+lQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMhplBqcOlrVFihG+hIPUzuF/tYOMB8GA1UdIwQY
MBaAFOlJeHeekw4B+/5+DF/LQWERKdToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlVsNGQ1NlREZ0g3X240TVg4dEJZUkVwMU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83OGRiMjktZTQ2ZC00MWY0LTg3Yzct
OTVjNDJlNGE4NGMwLzEveUdtVUdwdzZXdFVXS0ViNkVnOVRPNFgtMWc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83OGRiMjktZTQ2ZC00MWY0LTg3YzctOTVjNDJlNGE4NGMw
LzEvNlVsNGQ1NlREZ0g3X240TVg4dEJZUkVwMU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTm8AAwQB
V/ewMA0GCSqGSIb3DQEBCwUAA4IBAQBb5LQ94JqdbDrthcmbVqPj3VaoKNm63Lck
x20/kBLqQANcxpe8XIRVBKTwNdCaU1M0JlcbKI3nPvlrUlWQ2xEipzuNDVfVykN2
U+STqLMkZZMq5q45/B81yY6YfkhR3oPNfEvTlsVCfpyJq34/dtl5yP+yyRRAFdDt
5maR+JB7J2W/s5tg/UdgmuqfQ4TfR0BkiFERCiFDVOx/zLQytYDMts0S914xV+iu
/7haLbaD75Z83WeefzGdNMVk/mH084dzTgHduAkpASC803LswLmBs2Bye3yCyy6w
XDv2vltll1Qm/ymHXMV7Ohno6WuaNe1v3MJ3nuTw/BWlV3D4vDvY
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org