Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/BCXNh7PPFf7WjvyT7WworFozknU.roa
File: BCXNh7PPFf7WjvyT7WworFozknU.roa (raw, json)
Hash identifier: cRrRJdGaxq8Qhk5DalCNfexZDlUcJQNne0dIQVPwiJE=
Subject key identifier: 04:25:CD:87:B3:CF:15:FE:D6:8E:FC:93:ED:6C:28:AC:5A:33:92:75
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0184325E469FC7638A98C8DA505AD4E9A890
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/BCXNh7PPFf7WjvyT7WworFozknU.roa
Signing time: Tue 01 Nov 2022 08:45:50 +0000
ROA not before: Tue 01 Nov 2022 08:45:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 178.236.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:5e:46:9f:c7:63:8a:98:c8:da:50:5a:d4:e9:a8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Nov 1 08:45:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0425cd87b3cf15fed68efc93ed6c28ac5a339275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:cf:17:df:08:a4:2d:9c:dc:f6:02:f2:cd:
f5:c0:7e:e8:86:10:06:be:4c:eb:f4:35:fc:d6:ce:
7e:f0:37:0f:09:6f:f9:5c:be:1f:4d:af:c3:97:81:
ab:a2:f0:2d:e4:82:2c:88:6a:b5:09:70:b8:98:7e:
15:33:ba:a8:d1:94:41:b8:44:b3:ff:4c:82:8f:58:
7d:e1:34:ba:75:08:ec:9e:c1:31:47:c5:fc:23:9f:
ef:38:2d:41:26:b9:f2:ee:ec:87:98:94:4c:69:68:
3e:b7:74:ac:88:8d:40:7a:cc:18:dd:2a:37:1a:b2:
e4:6a:2c:9d:3d:0e:6a:18:d0:e4:6d:d9:6e:0f:e2:
f0:67:e5:34:60:4e:b8:64:30:b8:ad:1e:da:46:4d:
cb:92:4f:ed:f7:68:31:30:83:bc:2f:6b:b6:e8:3c:
3d:33:5d:25:1e:eb:7d:d9:aa:e8:04:28:3e:70:e2:
c3:28:0b:f9:fd:5d:cd:6b:95:4f:ac:dc:1b:1c:36:
46:11:10:1e:e1:14:7f:23:b2:33:99:34:b5:80:47:
08:27:39:27:f5:0f:1b:16:b0:12:e1:da:f9:96:16:
59:52:56:80:9a:f7:37:99:2e:0d:4f:7d:01:0f:21:
98:dd:8c:65:26:18:45:31:36:bc:94:9d:b1:59:6e:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:25:CD:87:B3:CF:15:FE:D6:8E:FC:93:ED:6C:28:AC:5A:33:92:75
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/BCXNh7PPFf7WjvyT7WworFozknU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.226.0/24
Signature Algorithm: sha256WithRSAEncryption
45:23:0c:84:13:1b:09:86:b3:66:7a:f2:7e:20:26:ee:5b:04:
e0:5a:34:6b:85:0d:00:c4:56:8e:ae:62:97:86:82:25:5c:9d:
c3:c8:a8:5b:c1:78:ae:d9:10:ca:26:56:58:41:0c:ac:1e:b3:
25:5a:7e:c1:25:77:b8:3c:6f:37:70:e4:84:76:10:84:c5:e5:
e8:2e:4b:eb:e1:c7:f3:19:ef:f2:ed:17:d1:c9:45:7c:ee:1b:
66:f3:a5:4a:4e:15:5a:39:3a:2e:97:95:3d:a7:e4:b8:4d:84:
e2:0a:d7:a1:10:7b:86:58:cb:26:58:01:58:db:e8:69:de:dc:
b2:93:95:55:26:9e:18:64:c0:37:c7:da:a5:09:a8:cc:a1:54:
27:56:0e:7e:8d:e7:80:f0:fa:a3:69:cf:2f:4b:24:0d:d7:2b:
80:6d:1b:66:be:92:d5:cf:08:9b:aa:84:7d:02:6e:76:2e:f5:
c6:c7:f4:4c:06:0f:b9:68:c7:5d:96:eb:9d:ea:98:d8:f5:49:
c9:a7:fb:73:ad:7f:03:9d:e3:bf:f7:0b:ea:29:63:de:a2:be:
78:fe:53:c2:57:43:b7:26:90:a9:83:e6:e0:d2:44:84:9b:0b:
18:26:9a:a2:28:4d:6e:c5:5a:f3:a5:51:ae:3e:2a:7a:f0:ec:
e5:da:05:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQyXkafx2OKmMjaUFrU6aiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjIxMTAxMDg0NTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDI1Y2Q4N2IzY2YxNWZlZDY4ZWZjOTNlZDZjMjhhYzVhMzM5Mjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1rPF98IpC2c3PYC8s31wH7ohhAG
vkzr9DX81s5+8DcPCW/5XL4fTa/Dl4GrovAt5IIsiGq1CXC4mH4VM7qo0ZRBuESz
/0yCj1h94TS6dQjsnsExR8X8I5/vOC1BJrny7uyHmJRMaWg+t3SsiI1AeswY3So3
GrLkaiydPQ5qGNDkbdluD+LwZ+U0YE64ZDC4rR7aRk3Lkk/t92gxMIO8L2u26Dw9
M10lHut92aroBCg+cOLDKAv5/V3Na5VPrNwbHDZGERAe4RR/I7IzmTS1gEcIJzkn
9Q8bFrAS4dr5lhZZUlaAmvc3mS4NT30BDyGY3YxlJhhFMTa8lJ2xWW6kzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQlzYezzxX+1o78k+1sKKxaM5J1MB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvQkNYTmg3UFBGZjdXanZ5VDdXd29yRm96a25VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuziMA0G
CSqGSIb3DQEBCwUAA4IBAQBFIwyEExsJhrNmevJ+ICbuWwTgWjRrhQ0AxFaOrmKX
hoIlXJ3DyKhbwXiu2RDKJlZYQQysHrMlWn7BJXe4PG83cOSEdhCExeXoLkvr4cfz
Ge/y7RfRyUV87htm86VKThVaOToul5U9p+S4TYTiCtehEHuGWMsmWAFY2+hp3tyy
k5VVJp4YZMA3x9qlCajMoVQnVg5+jeeA8Pqjac8vSyQN1yuAbRtmvpLVzwibqoR9
Am52LvXGx/RMBg+5aMddluud6pjY9UnJp/tzrX8DneO/9wvqKWPeor54/lPCV0O3
JpCpg+bg0kSEmwsYJpqiKE1uxVrzpVGuPip68Ozl2gU1
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:27 2023 by rpki-client on console-fra.rpki-client.org