Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/u3wajj7fKnUQuf65iQz6iwi7tJA.roa
File: u3wajj7fKnUQuf65iQz6iwi7tJA.roa (raw, json)
Hash identifier: 778mK/zKwil+haERiat5T/BmHio2R3MBedQbP/rm6cY=
Subject key identifier: BB:7C:1A:8E:3E:DF:2A:75:10:B9:FE:B9:89:0C:FA:8B:08:BB:B4:90
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018409B266E738647EC544B384D9E3ECCB05
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/u3wajj7fKnUQuf65iQz6iwi7tJA.roa
Signing time: Mon 24 Oct 2022 11:13:17 +0000
ROA not before: Mon 24 Oct 2022 11:13:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60068
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:b2:66:e7:38:64:7e:c5:44:b3:84:d9:e3:ec:cb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 24 11:13:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb7c1a8e3edf2a7510b9feb9890cfa8b08bbb490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d2:58:9b:40:6c:d3:7d:4f:ea:1f:82:b1:3c:
eb:67:80:82:b5:58:2a:9c:2d:17:70:e7:2d:f9:da:
c3:78:80:e5:b9:a4:ee:0e:2d:c3:9f:23:67:4e:7f:
0a:5d:88:99:be:68:1e:20:60:d4:d7:dd:27:b4:a6:
5e:6b:f8:3e:83:dc:26:cc:ea:09:c8:a9:36:60:51:
60:06:95:9a:9c:8e:f4:76:44:d8:07:24:31:ab:1b:
fb:a0:87:f9:2b:2c:43:59:a2:0c:f3:0f:f6:4b:ec:
b9:e7:b6:ab:7c:03:77:86:9c:1a:df:9e:9a:8b:4d:
97:a3:7b:a6:01:6d:06:3e:42:54:b4:d9:f3:2d:6d:
76:25:c0:b0:69:fd:93:df:63:eb:84:53:4b:b1:c3:
da:a1:d1:2d:08:56:9c:3c:60:5f:bc:f8:b5:c1:88:
87:95:33:5c:94:7e:30:5b:03:51:cc:0c:4a:63:f7:
6c:b0:76:c9:9c:e5:1b:df:18:bf:d3:e6:be:5d:d8:
0e:cd:8e:99:2e:1c:de:58:9e:93:cf:c8:57:8b:8d:
8a:84:a6:94:46:64:55:f1:0d:4b:d6:d1:c8:6f:39:
bb:0f:5c:ca:03:10:b6:8e:a6:88:be:b4:7c:cb:03:
0d:89:99:f7:a8:e5:cd:30:78:5f:17:f6:e4:12:d1:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7C:1A:8E:3E:DF:2A:75:10:B9:FE:B9:89:0C:FA:8B:08:BB:B4:90
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/u3wajj7fKnUQuf65iQz6iwi7tJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:e8:b6:77:33:cf:c5:f6:92:c6:bd:2c:a2:08:4e:c1:58:77:
57:4b:22:51:ff:0b:24:e9:49:da:cd:c3:8e:1f:e9:5d:a9:50:
ac:d0:fa:df:4a:3f:90:68:0e:02:0c:f2:a3:13:06:7c:6d:5e:
14:b5:09:57:ef:1a:7f:b6:9b:04:1c:bf:f8:4a:c3:cc:dd:31:
45:3b:e4:91:1d:3c:0d:25:fc:69:79:3c:7a:06:d7:80:a6:a0:
aa:9f:75:7f:df:11:fd:c5:2b:9e:63:4c:30:28:64:bf:f4:ba:
27:81:b4:6f:a5:d8:9b:9f:49:36:b7:f9:d1:b1:02:74:e5:e0:
04:6e:56:53:72:45:38:a2:69:e7:79:2a:ae:ad:96:f2:5c:7e:
e5:1f:39:0c:3b:f8:d1:74:46:55:82:9d:6a:20:28:c9:9f:1e:
e5:72:1c:43:3b:a9:57:00:70:be:fe:e7:5c:04:f8:fc:71:40:
e6:4c:d1:e2:32:87:fd:d8:be:07:30:61:7b:ee:59:71:98:f9:
6f:0c:c8:f6:ea:8a:e8:4a:b4:5f:d6:b1:cb:d2:3f:06:4e:90:
71:85:a2:32:48:bc:06:21:28:02:f4:95:10:10:af:77:a7:01:
54:73:84:39:51:c8:38:f5:77:3e:12:96:ea:0f:35:7a:b9:f2:
b4:50:4e:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQJsmbnOGR+xUSzhNnj7MsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjIxMDI0MTExMzE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjdjMWE4ZTNlZGYyYTc1MTBiOWZlYjk4OTBjZmE4YjA4YmJiNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59JYm0Bs031P6h+CsTzrZ4CCtVgq
nC0XcOct+drDeIDluaTuDi3DnyNnTn8KXYiZvmgeIGDU190ntKZea/g+g9wmzOoJ
yKk2YFFgBpWanI70dkTYByQxqxv7oIf5KyxDWaIM8w/2S+y557arfAN3hpwa356a
i02Xo3umAW0GPkJUtNnzLW12JcCwaf2T32PrhFNLscPaodEtCFacPGBfvPi1wYiH
lTNclH4wWwNRzAxKY/dssHbJnOUb3xi/0+a+XdgOzY6ZLhzeWJ6Tz8hXi42KhKaU
RmRV8Q1L1tHIbzm7D1zKAxC2jqaIvrR8ywMNiZn3qOXNMHhfF/bkEtG66wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLt8Go4+3yp1ELn+uYkM+osIu7SQMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvdTN3YWpqN2ZLblVRdWY2NWlRejZpd2k3dEpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsv0QAwQB
sv0mMA0GCSqGSIb3DQEBCwUAA4IBAQBN6LZ3M8/F9pLGvSyiCE7BWHdXSyJR/wsk
6UnazcOOH+ldqVCs0PrfSj+QaA4CDPKjEwZ8bV4UtQlX7xp/tpsEHL/4SsPM3TFF
O+SRHTwNJfxpeTx6BteApqCqn3V/3xH9xSueY0wwKGS/9LongbRvpdibn0k2t/nR
sQJ05eAEblZTckU4omnneSqurZbyXH7lHzkMO/jRdEZVgp1qICjJnx7lchxDO6lX
AHC+/udcBPj8cUDmTNHiMof92L4HMGF77llxmPlvDMj26oroSrRf1rHL0j8GTpBx
haIySLwGISgC9JUQEK93pwFUc4Q5Ucg49Xc+EpbqDzV6ufK0UE49
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org