Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/vLIG9dHZjND6Navvr2P41Aq2afs.roa
File: vLIG9dHZjND6Navvr2P41Aq2afs.roa (raw, json)
Hash identifier: 9KECQ1nRqnw8zK8tq726nGnp11W9DiVVUSmC3DzaWDE=
Subject key identifier: BC:B2:06:F5:D1:D9:8C:D0:FA:35:AB:EF:AF:63:F8:D4:0A:B6:69:FB
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 08528E9E
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/vLIG9dHZjND6Navvr2P41Aq2afs.roa
Signing time: Wed 02 Feb 2022 10:15:31 +0000
ROA not before: Wed 02 Feb 2022 10:15:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.22.0/23 maxlen: 24
178.253.31.0/24 maxlen: 24
178.253.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139628190 (0x8528e9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 2 10:15:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcb206f5d1d98cd0fa35abefaf63f8d40ab669fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:a8:20:3d:73:41:9e:8d:2f:13:ef:6b:92:
d3:8b:b9:1d:13:72:78:88:3f:df:a9:b3:36:40:92:
07:d9:ff:76:c1:f9:0f:20:d5:0f:f4:c3:3f:d7:bc:
67:1b:89:dc:9c:50:6f:75:bd:a9:a1:66:a3:28:ae:
83:4f:29:c0:2e:51:9d:9a:39:03:bf:9c:b9:e8:8b:
be:0e:ee:14:84:1c:cd:c5:2a:b7:be:9b:21:d3:61:
51:ea:24:be:4c:27:32:26:87:16:a3:2f:3e:75:c0:
e4:91:03:45:f7:9c:69:b3:80:c0:50:97:72:93:1d:
d3:29:0a:e0:20:cf:d5:ba:0f:71:fb:f4:ef:bf:9f:
95:1c:18:1b:d8:d1:9e:29:d8:b1:db:84:59:45:f2:
0c:43:52:7e:2c:90:c1:9e:76:9f:3a:0b:35:88:99:
0b:40:92:ea:6c:76:5e:b2:a2:f2:d2:54:18:9a:03:
4c:67:69:53:36:54:da:64:b5:7d:38:d0:0b:06:86:
5a:aa:57:46:6b:88:9f:fe:a9:71:ef:be:3e:17:bf:
91:b0:44:ce:09:fa:85:bc:b3:1a:f1:56:94:46:f6:
14:ac:4f:75:ec:d3:7b:5f:fe:91:1d:30:46:a8:bb:
16:33:8e:69:2e:b1:e1:29:09:5a:cb:6b:0f:04:bc:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B2:06:F5:D1:D9:8C:D0:FA:35:AB:EF:AF:63:F8:D4:0A:B6:69:FB
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/vLIG9dHZjND6Navvr2P41Aq2afs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.22.0/23
178.253.26.0/23
178.253.31.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a2:c7:fb:a6:d9:14:f1:be:e1:5c:8e:cc:8d:09:b1:27:8c:
14:1b:ad:61:ac:43:7b:b7:59:43:fe:34:03:52:9b:b2:d4:0b:
f6:de:77:a0:0f:51:e8:6c:16:9a:46:c4:d5:e7:e6:9e:e1:d6:
b6:d1:1d:1c:01:db:fe:0f:80:60:94:e9:6a:db:86:fc:79:c5:
6d:e5:ee:82:02:5f:df:35:0a:a0:0d:1a:e7:bf:04:55:aa:6f:
16:8c:38:0e:6e:a4:8b:f7:6f:83:4d:f5:68:fc:57:49:5e:5d:
c0:65:e2:eb:95:0f:92:e6:07:11:3b:16:a1:50:87:72:96:1f:
e9:bf:79:66:13:b9:26:ef:a6:b3:a1:e4:96:f6:f7:a9:bc:35:
0e:81:ea:b0:15:a7:98:d0:04:9b:63:11:9f:bb:a5:0b:8b:2a:
3c:f3:27:a2:ac:f2:54:2d:2c:ec:96:75:bf:7f:4d:8e:46:32:
a7:2b:2c:e1:fe:9b:b4:42:e0:58:9e:77:f4:18:f7:40:a8:69:
82:9c:4c:a4:53:07:43:6c:fc:65:d6:a5:c5:93:f3:c9:95:b1:
17:64:23:14:c2:59:b3:1b:8a:01:25:85:82:8a:b7:e9:2c:69:
96:47:5a:a8:41:32:a4:61:31:04:43:d2:10:1c:d3:e1:34:92:
41:70:cd:5f
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECFKOnjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDIw
MjEwMTUzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmNiMjA2ZjVkMWQ5
OGNkMGZhMzVhYmVmYWY2M2Y4ZDQwYWI2NjlmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJKWqCA9c0GejS8T72uS04u5HRNyeIg/36mzNkCSB9n/dsH5
DyDVD/TDP9e8ZxuJ3JxQb3W9qaFmoyiug08pwC5RnZo5A7+cueiLvg7uFIQczcUq
t76bIdNhUeokvkwnMiaHFqMvPnXA5JEDRfecabOAwFCXcpMd0ykK4CDP1boPcfv0
77+flRwYG9jRninYsduEWUXyDENSfiyQwZ52nzoLNYiZC0CS6mx2XrKi8tJUGJoD
TGdpUzZU2mS1fTjQCwaGWqpXRmuIn/6pce++Phe/kbBEzgn6hbyzGvFWlEb2FKxP
dezTe1/+kR0wRqi7FjOOaS6x4SkJWstrDwS8MNcCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBS8sgb10dmM0Po1q++vY/jUCrZp+zAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
L3ZMSUc5ZEhaak5ENk5hdnZyMlA0MUFxMmFmcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEALL9EAMEAbL9FgMEAbL9GgMEALL9
HzANBgkqhkiG9w0BAQsFAAOCAQEAb6LH+6bZFPG+4VyOzI0JsSeMFButYaxDe7dZ
Q/40A1KbstQL9t53oA9R6GwWmkbE1efmnuHWttEdHAHb/g+AYJTpatuG/HnFbeXu
ggJf3zUKoA0a578EVapvFow4Dm6ki/dvg031aPxXSV5dwGXi65UPkuYHETsWoVCH
cpYf6b95ZhO5Ju+ms6Hklvb3qbw1DoHqsBWnmNAEm2MRn7ulC4sqPPMnoqzyVC0s
7JZ1v39NjkYypyss4f6btELgWJ539Bj3QKhpgpxMpFMHQ2z8ZdalxZPzyZWxF2Qj
FMJZsxuKASWFgoq36SxplkdaqEEypGExBEPSEBzT4TSSQXDNXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:20 2024 by rpki-client on console-ams.rpki-client.org