Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/1-R6OMryztZxAYviRwD48-Pehdz0.roa
File: 1-R6OMryztZxAYviRwD48-Pehdz0.roa (raw, json)
Hash identifier: XqdgZCxFBuT8BFG3XBZLsDzDDpAXV8qGguRtjwTpoBg=
Subject key identifier: F9:1E:8E:32:BC:B3:B5:9C:40:62:F8:91:C0:3E:3C:F8:F7:A1:77:3D
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0184554A677251D410B4EBA559103C2D0F40
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/1-R6OMryztZxAYviRwD48-Pehdz0.roa
Signing time: Tue 08 Nov 2022 03:30:50 +0000
ROA not before: Tue 08 Nov 2022 03:30:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 178.236.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:55:4a:67:72:51:d4:10:b4:eb:a5:59:10:3c:2d:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Nov 8 03:30:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f91e8e32bcb3b59c4062f891c03e3cf8f7a1773d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:e8:22:c0:8a:43:cf:3c:f1:14:05:2a:f7:
54:cf:b0:36:bc:74:65:73:30:a7:a6:a3:30:9a:57:
8c:b4:94:39:1f:86:6c:52:81:7c:a4:02:e7:6d:5d:
14:43:4f:9f:7b:cb:21:b8:a4:54:59:97:09:30:e3:
8e:0b:d0:2f:98:52:6e:ee:7d:a2:b0:e6:57:06:52:
1f:a6:c0:95:0d:1d:fa:ec:fa:ae:e1:42:cd:ea:4b:
9e:55:20:2d:ab:4c:50:3a:65:9f:96:a8:55:f1:69:
f5:ea:43:6a:4c:03:47:45:17:14:b8:68:bf:4a:04:
43:2a:4a:0f:66:c5:fc:c6:23:b6:a8:9c:7e:7d:8f:
cf:ec:35:3f:f2:30:ca:03:bc:aa:a7:22:72:04:10:
14:90:ee:f4:40:f8:bb:4a:29:d3:ee:ff:9b:dc:79:
5f:07:75:31:92:41:21:97:69:9e:5c:cf:3b:4d:12:
a9:3a:b3:5c:39:10:f3:d7:f8:43:e2:9d:26:46:c6:
98:d6:cb:ae:3c:4c:e0:e1:9d:7c:c1:37:6b:10:bd:
51:e7:74:3c:9e:1a:b3:7c:d4:b1:a0:34:cb:97:47:
bd:b4:aa:b7:55:88:79:b8:32:d7:d5:51:e1:19:ba:
50:0b:e7:6b:2c:2c:90:53:da:b7:5d:39:dd:fe:fe:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1E:8E:32:BC:B3:B5:9C:40:62:F8:91:C0:3E:3C:F8:F7:A1:77:3D
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/1-R6OMryztZxAYviRwD48-Pehdz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.235.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1d:03:77:73:b9:24:7a:ea:80:28:43:46:d4:26:01:d4:1f:
09:10:7a:25:d3:8f:14:97:8a:7f:67:95:8a:e7:b8:9d:89:f0:
0f:46:7c:e9:e4:e8:c0:fe:45:00:7a:a7:24:3a:57:40:12:b2:
94:32:db:51:0d:54:35:c2:17:be:54:5d:3d:9f:50:a1:ff:6c:
a2:63:9f:c1:76:e1:13:5f:61:df:d0:73:aa:11:0b:14:f5:71:
30:41:bd:e2:60:ce:20:07:22:33:e9:25:0b:37:1e:49:bb:cc:
3d:3b:1d:c0:25:86:ac:6c:66:fc:3c:4a:f8:19:48:77:cf:26:
3c:5d:9a:15:90:05:c8:69:66:5b:c5:de:a1:1b:99:e7:05:d4:
b0:18:6b:e3:60:76:67:1d:ce:f9:9b:10:06:71:7d:9f:e4:03:
bc:5e:69:10:49:22:bd:51:8a:05:25:8b:1f:fa:51:3d:46:fb:
bd:81:e9:c3:9e:0b:31:aa:65:e6:03:5f:91:cb:79:c6:71:74:
98:20:b7:fa:f2:3c:97:26:8a:b1:31:28:f5:f8:32:05:7e:73:
91:ef:31:28:e9:03:73:16:61:ad:63:37:80:dd:1b:44:08:2a:
88:40:90:90:45:50:fb:66:04:e7:2b:8c:82:2c:81:b0:ca:12:
58:28:db:87
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYRVSmdyUdQQtOulWRA8LQ9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjIxMTA4MDMzMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTFlOGUzMmJjYjNiNTljNDA2MmY4OTFjMDNlM2NmOGY3YTE3NzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOzoIsCKQ8888RQFKvdUz7A2vHRl
czCnpqMwmleMtJQ5H4ZsUoF8pALnbV0UQ0+fe8shuKRUWZcJMOOOC9AvmFJu7n2i
sOZXBlIfpsCVDR367Pqu4ULN6kueVSAtq0xQOmWflqhV8Wn16kNqTANHRRcUuGi/
SgRDKkoPZsX8xiO2qJx+fY/P7DU/8jDKA7yqpyJyBBAUkO70QPi7SinT7v+b3Hlf
B3UxkkEhl2meXM87TRKpOrNcORDz1/hD4p0mRsaY1suuPEzg4Z18wTdrEL1R53Q8
nhqzfNSxoDTLl0e9tKq3VYh5uDLX1VHhGbpQC+drLCyQU9q3XTnd/v4dyQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPkejjK8s7WcQGL4kcA+PPj3oXc9MB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvMS1SNk9Ncnl6dFp4QVl2aVJ3RDQ4LVBlaGR6MC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjEvZGRjZTRkLTk5MTItNDg3ZC1iNTVkLTQ3ZDgyYTQxYThm
My8xL1Y1U3YyMTVxR0lWNENTQ2xUX3FDUUk2b1c2RS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLs6zAN
BgkqhkiG9w0BAQsFAAOCAQEAgx0Dd3O5JHrqgChDRtQmAdQfCRB6JdOPFJeKf2eV
iue4nYnwD0Z86eTowP5FAHqnJDpXQBKylDLbUQ1UNcIXvlRdPZ9Qof9somOfwXbh
E19h39BzqhELFPVxMEG94mDOIAciM+klCzceSbvMPTsdwCWGrGxm/DxK+BlId88m
PF2aFZAFyGlmW8XeoRuZ5wXUsBhr42B2Zx3O+ZsQBnF9n+QDvF5pEEkivVGKBSWL
H/pRPUb7vYHpw54LMapl5gNfkct5xnF0mCC3+vI8lyaKsTEo9fgyBX5zke8xKOkD
cxZhrWM3gN0bRAgqiECQkEVQ+2YE5yuMgiyBsMoSWCjbhw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:19 2024 by rpki-client on console-fra.rpki-client.org