Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dtUrf82lr0WoZYNGLrAQscNWIdE.roa
File: dtUrf82lr0WoZYNGLrAQscNWIdE.roa (raw, json)
Hash identifier: Y9RaqA0oD3F41qjdznSJxAc8RFGRkLFOJTGSZUuL8oI=
Subject key identifier: 76:D5:2B:7F:CD:A5:AF:45:A8:65:83:46:2E:B0:10:B1:C3:56:21:D1
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 07FDDC32
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dtUrf82lr0WoZYNGLrAQscNWIdE.roa
Signing time: Sat 01 Jan 2022 03:02:09 +0000
ROA not before: Sat 01 Jan 2022 03:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 178.253.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134077490 (0x7fddc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 1 03:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76d52b7fcda5af45a86583462eb010b1c35621d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:51:2a:ba:ff:e8:00:96:0d:a5:a3:12:ff:
61:c0:94:43:98:13:90:b1:b0:3c:71:b6:71:be:0c:
8f:cf:3c:a1:ba:07:c1:a1:7f:ef:79:28:a3:ed:69:
6d:7c:62:22:d0:99:e2:c2:17:eb:41:8f:25:6f:a9:
99:f3:ba:ca:a6:00:f5:e9:79:f3:71:56:38:ff:a9:
00:2b:12:13:bf:6f:1e:b6:f5:06:9c:01:55:fa:2c:
ba:bb:c6:55:da:2f:02:f9:c0:a6:ab:2f:4e:42:a9:
b3:61:6c:cf:d5:7b:6f:af:92:be:19:40:24:66:27:
df:d4:8b:74:7d:ed:f6:59:b3:c0:16:03:65:4a:79:
70:cf:49:c1:09:0e:27:58:49:a4:47:95:1a:9f:f9:
c2:ed:e0:45:85:61:d1:34:c2:9b:34:9b:8a:ff:68:
d9:f2:de:84:ec:ab:ab:b5:97:50:ea:5f:13:e5:02:
cc:bb:5c:7a:68:b4:6d:54:a5:68:3c:1f:83:ec:7f:
6e:0c:cf:5f:d2:19:41:2a:32:d7:4b:64:ae:4f:10:
fc:cf:66:cd:3b:69:25:df:73:a9:e4:2b:34:20:f5:
01:ef:53:80:f2:4d:41:27:7f:f6:d8:2f:82:ed:82:
97:1e:59:e0:62:dd:45:6d:53:22:da:bc:0a:f2:9b:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D5:2B:7F:CD:A5:AF:45:A8:65:83:46:2E:B0:10:B1:C3:56:21:D1
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dtUrf82lr0WoZYNGLrAQscNWIdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9c:46:97:54:01:0a:e3:12:16:76:4b:d7:43:c5:5e:38:ef:
d8:00:d9:c9:90:9d:3a:bd:ff:e8:43:e1:35:6a:0a:d6:5a:d3:
76:a4:34:ba:6b:05:1e:9c:49:d2:18:d0:f9:c3:b9:da:22:71:
db:27:2f:0d:d9:80:8c:e9:1c:ce:a1:b4:20:aa:b8:1c:97:4e:
4e:13:3e:0b:54:f6:66:1d:64:94:d6:4b:8e:e7:99:8f:e7:8c:
62:ed:b0:d2:ec:d8:20:7a:68:cb:c9:8e:7e:34:02:af:06:30:
7b:9f:e3:2c:d1:c6:fa:67:fc:cc:fa:59:a5:1c:43:12:e0:c9:
13:ad:af:83:dd:7a:45:4a:9e:a8:b8:84:19:61:d7:80:da:4d:
87:16:6e:5c:31:08:f8:74:41:c7:96:2c:7b:8f:6e:30:c4:cc:
6c:4d:4a:3d:54:8f:02:ab:5c:6e:e6:5a:12:b7:cd:48:41:fa:
ca:e1:17:8a:11:df:6e:d5:70:88:85:a7:f6:f0:bf:57:3a:21:
a9:f9:3f:dc:45:08:73:d3:a1:c4:32:4e:19:43:95:8e:e4:76:
6c:24:ca:de:49:48:40:ce:d2:2b:f0:74:2b:88:30:03:68:eb:
1a:c6:89:5a:f8:51:1e:5f:22:7e:37:7d:16:f3:48:04:da:40:
31:37:2f:7c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB/3cMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDEw
MTAzMDIwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzZkNTJiN2ZjZGE1
YWY0NWE4NjU4MzQ2MmViMDEwYjFjMzU2MjFkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM7YUSq6/+gAlg2loxL/YcCUQ5gTkLGwPHG2cb4Mj888oboH
waF/73koo+1pbXxiItCZ4sIX60GPJW+pmfO6yqYA9el583FWOP+pACsSE79vHrb1
BpwBVfosurvGVdovAvnApqsvTkKps2Fsz9V7b6+SvhlAJGYn39SLdH3t9lmzwBYD
ZUp5cM9JwQkOJ1hJpEeVGp/5wu3gRYVh0TTCmzSbiv9o2fLehOyrq7WXUOpfE+UC
zLtcemi0bVSlaDwfg+x/bgzPX9IZQSoy10tkrk8Q/M9mzTtpJd9zqeQrNCD1Ae9T
gPJNQSd/9tgvgu2Clx5Z4GLdRW1TItq8CvKb0i8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR21St/zaWvRahlg0YusBCxw1Yh0TAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
L2R0VXJmODJscjBXb1pZTkdMckFRc2NOV0lkRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALL9NTANBgkqhkiG9w0BAQsFAAOC
AQEAe5xGl1QBCuMSFnZL10PFXjjv2ADZyZCdOr3/6EPhNWoK1lrTdqQ0umsFHpxJ
0hjQ+cO52iJx2ycvDdmAjOkczqG0IKq4HJdOThM+C1T2Zh1klNZLjueZj+eMYu2w
0uzYIHpoy8mOfjQCrwYwe5/jLNHG+mf8zPpZpRxDEuDJE62vg916RUqeqLiEGWHX
gNpNhxZuXDEI+HRBx5Yse49uMMTMbE1KPVSPAqtcbuZaErfNSEH6yuEXihHfbtVw
iIWn9vC/Vzohqfk/3EUIc9OhxDJOGUOVjuR2bCTK3klIQM7SK/B0K4gwA2jrGsaJ
WvhRHl8ifjd9FvNIBNpAMTcvfA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org