Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/HunSz0ASFK_QpdG8k-QXKLGVsR0.roa
File: HunSz0ASFK_QpdG8k-QXKLGVsR0.roa (raw, json)
Hash identifier: MF56+RF1/HBJ60Oe0HFufqCztB4irlmyGWZVRy/xu88=
Subject key identifier: 1E:E9:D2:CF:40:12:14:AF:D0:A5:D1:BC:93:E4:17:28:B1:95:B1:1D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 08F6BBEE
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/HunSz0ASFK_QpdG8k-QXKLGVsR0.roa
Signing time: Tue 12 Apr 2022 09:15:39 +0000
ROA not before: Tue 12 Apr 2022 09:15:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.22.0/23 maxlen: 24
178.253.31.0/24 maxlen: 24
178.253.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150387694 (0x8f6bbee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 12 09:15:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ee9d2cf401214afd0a5d1bc93e41728b195b11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:7e:b0:cd:fa:5b:b6:32:eb:c4:8e:8c:12:
3d:98:c0:53:69:e4:1f:61:53:5e:9b:2f:e1:7c:a5:
cb:90:55:b5:f6:5d:25:dc:f0:70:73:75:dc:02:49:
b9:47:bb:aa:4c:ad:94:62:e7:b9:af:20:26:31:dd:
20:02:62:32:42:44:d8:2e:b8:82:39:2f:e3:04:55:
3f:db:69:33:c2:27:05:75:2f:16:df:d7:42:8c:e2:
40:e6:18:27:fc:93:2f:59:f3:cf:6f:23:42:70:fa:
27:ee:f2:a0:87:31:ae:d6:0f:f3:f9:8d:b8:b4:19:
00:c1:7c:1d:cc:5f:c0:45:87:11:12:95:2a:2f:df:
eb:40:b0:29:88:64:fd:9d:5c:bc:ba:9e:77:17:44:
76:d2:82:5e:b2:fe:a5:e3:1e:48:ea:ef:96:aa:ac:
f4:37:96:51:7a:df:d7:bc:05:e6:2b:54:39:9e:e8:
4d:d3:f4:bc:a9:a1:92:7e:f4:e7:08:f4:59:50:b0:
db:06:43:86:e2:2f:b9:ac:4d:a8:0a:00:c0:d9:89:
c7:bb:df:d0:cc:48:63:8e:ad:ba:8f:54:ff:75:ae:
78:ef:e6:39:19:de:44:2f:65:0f:91:3b:f0:0d:bc:
15:29:c6:93:20:3a:0b:a0:5b:ff:12:3f:af:bc:9b:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E9:D2:CF:40:12:14:AF:D0:A5:D1:BC:93:E4:17:28:B1:95:B1:1D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/HunSz0ASFK_QpdG8k-QXKLGVsR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.22.0/23
178.253.26.0/23
178.253.31.0/24
Signature Algorithm: sha256WithRSAEncryption
16:86:ba:82:09:23:75:75:2b:bb:eb:79:13:ae:ff:98:9a:2b:
48:b7:40:fc:e1:7b:3d:25:96:c9:02:13:56:3d:3a:b9:81:07:
4b:77:50:f4:09:ea:7a:6b:e9:9e:16:f7:7b:0a:6a:fb:c0:81:
7b:41:7d:67:9f:dd:ee:94:1c:bf:53:e9:de:90:c8:48:ac:52:
ea:6b:6c:c6:70:64:4f:37:0d:18:5f:5b:9f:0e:52:13:16:f4:
23:c0:fa:b4:54:75:d7:84:90:72:26:89:3b:99:56:50:84:df:
57:1d:00:d6:c3:80:cd:2b:ea:f6:ce:52:38:96:ea:b1:f6:c3:
dd:b5:36:07:65:16:8b:e1:0b:35:67:a2:b4:f0:82:86:da:05:
83:f9:d0:43:a2:6e:ad:eb:b9:cf:ee:33:f8:06:8e:e6:61:dd:
dd:64:c2:8f:77:6e:16:de:ce:3c:e9:a4:7b:95:a3:8b:9e:43:
f1:98:31:09:b2:f8:fa:31:dc:2c:44:fa:56:c6:f2:2d:38:47:
50:4a:83:9c:8b:c8:03:a1:ef:82:48:12:ba:52:17:e9:79:50:
b0:83:ef:d5:25:92:7b:31:26:92:c8:ed:0f:22:4a:da:0c:da:
2e:6e:29:38:96:0f:14:0d:12:07:8e:46:fb:fd:5b:f8:19:31:
9b:7b:aa:d2
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECPa77jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDQx
MjA5MTUzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWVlOWQyY2Y0MDEy
MTRhZmQwYTVkMWJjOTNlNDE3MjhiMTk1YjExZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJH2frDN+lu2MuvEjowSPZjAU2nkH2FTXpsv4Xyly5BVtfZd
JdzwcHN13AJJuUe7qkytlGLnua8gJjHdIAJiMkJE2C64gjkv4wRVP9tpM8InBXUv
Ft/XQoziQOYYJ/yTL1nzz28jQnD6J+7yoIcxrtYP8/mNuLQZAMF8HcxfwEWHERKV
Ki/f60CwKYhk/Z1cvLqedxdEdtKCXrL+peMeSOrvlqqs9DeWUXrf17wF5itUOZ7o
TdP0vKmhkn705wj0WVCw2wZDhuIvuaxNqAoAwNmJx7vf0MxIY46tuo9U/3WueO/m
ORneRC9lD5E78A28FSnGkyA6C6Bb/xI/r7yb2H0CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQe6dLPQBIUr9Cl0byT5BcosZWxHTAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
L0h1blN6MEFTRktfUXBkRzhrLVFYS0xHVnNSMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEALL9EAMEAbL9FgMEAbL9GgMEALL9
HzANBgkqhkiG9w0BAQsFAAOCAQEAFoa6ggkjdXUru+t5E67/mJorSLdA/OF7PSWW
yQITVj06uYEHS3dQ9Anqemvpnhb3ewpq+8CBe0F9Z5/d7pQcv1Pp3pDISKxS6mts
xnBkTzcNGF9bnw5SExb0I8D6tFR114SQciaJO5lWUITfVx0A1sOAzSvq9s5SOJbq
sfbD3bU2B2UWi+ELNWeitPCChtoFg/nQQ6Jureu5z+4z+AaO5mHd3WTCj3duFt7O
POmke5Wji55D8ZgxCbL4+jHcLET6VsbyLThHUEqDnIvIA6HvgkgSulIX6XlQsIPv
1SWSezEmksjtDyJK2gzaLm4pOJYPFA0SB45G+/1b+Bkxm3uq0g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org