Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/tPh2e2cdKhzPyLBVynig0e_CymQ.roa
File: tPh2e2cdKhzPyLBVynig0e_CymQ.roa (raw, json)
Hash identifier: ecp4RMl0fuzLH1Gr+qBqF+H/3m7A6prGTlp6+qp24l8=
Subject key identifier: B4:F8:76:7B:67:1D:2A:1C:CF:C8:B0:55:CA:78:A0:D1:EF:C2:CA:64
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 0120CDAE
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/tPh2e2cdKhzPyLBVynig0e_CymQ.roa
Signing time: Sat 01 Jan 2022 12:54:15 +0000
ROA not before: Sat 01 Jan 2022 12:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202421
IP address blocks: 185.204.176.0/24 maxlen: 24
185.204.176.0/23 maxlen: 24
185.204.176.0/22 maxlen: 24
185.204.179.0/24 maxlen: 24
185.204.178.0/24 maxlen: 24
185.204.178.0/23 maxlen: 24
185.204.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18927022 (0x120cdae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Jan 1 12:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4f8767b671d2a1ccfc8b055ca78a0d1efc2ca64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:a1:d4:79:f5:ce:5d:21:8f:df:9f:f1:65:
f3:aa:13:15:5c:35:c4:ed:d1:1c:89:9f:c1:53:79:
0e:70:1b:ef:74:f5:a9:ee:97:d2:ec:ae:bf:5d:df:
94:a3:b5:d0:46:ff:39:46:dc:7a:cd:7f:56:e7:96:
9c:0e:41:88:d7:3f:2b:4f:ef:f8:3e:8f:b1:2c:e4:
dc:a1:5d:a8:0a:c5:d4:3f:0b:0a:74:24:d2:bc:f6:
98:a4:2d:88:d0:a9:a5:ed:43:b9:d8:ee:ee:ed:f7:
c1:05:d2:59:a8:93:b5:a2:d9:5f:f1:74:3e:d3:15:
fd:9b:10:2f:6d:68:b6:b8:f4:b3:7a:3d:1d:35:2b:
57:8c:f0:77:e6:66:7e:66:7e:c2:3d:5e:28:53:59:
ae:bc:32:85:3a:97:55:bd:5a:11:e8:c9:7a:25:f1:
7c:e0:61:f4:98:c9:fa:5f:46:b3:36:08:30:3a:10:
18:33:7e:af:b4:b8:e4:ca:fd:c0:41:6b:d0:26:25:
1f:95:1d:36:c0:36:8d:b3:b0:5f:86:28:84:95:00:
bf:6b:65:80:fd:5d:ad:92:2f:97:56:22:d7:24:c7:
7d:a2:01:0d:4f:a6:0b:60:27:f4:f4:e4:a3:39:6d:
0f:ce:60:f9:50:f5:2c:96:64:38:35:0f:a5:aa:84:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F8:76:7B:67:1D:2A:1C:CF:C8:B0:55:CA:78:A0:D1:EF:C2:CA:64
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/tPh2e2cdKhzPyLBVynig0e_CymQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.176.0/22
Signature Algorithm: sha256WithRSAEncryption
41:26:f2:79:b5:6e:3e:51:98:e6:fe:26:6b:92:fe:9c:2d:66:
c0:01:20:9c:47:b0:26:a3:e8:d4:96:5b:26:f7:a1:b0:28:9a:
ad:11:9b:0a:8e:62:86:46:c3:d7:ad:8b:fc:3e:ba:d5:8c:b0:
5a:f9:eb:05:24:ad:55:e4:2b:d8:2c:40:93:3f:bd:f1:bd:8c:
9e:77:1f:c9:c1:a0:4e:6a:26:bc:68:89:01:5f:30:23:e4:f9:
5b:39:85:43:21:cc:a3:ba:ab:1b:37:75:ba:4a:dc:ea:1e:b7:
90:af:b2:b9:df:21:13:a9:58:12:28:38:0d:96:8c:d7:dc:a4:
21:8c:1a:e0:19:12:85:9d:48:3c:91:22:b5:ce:83:fa:45:2d:
11:93:66:61:50:07:19:ec:52:be:53:13:fa:98:69:0d:fc:33:
a9:5c:dd:21:5d:68:d1:d6:20:68:ad:31:8c:76:fe:c0:ad:53:
d0:0f:40:e5:47:55:9a:2a:54:0e:60:22:45:27:40:74:a0:77:
34:7c:a8:a5:72:72:99:5a:9e:81:45:25:ef:19:59:eb:31:9a:
e2:81:9e:9b:39:97:8e:22:c0:1b:85:d6:d5:fb:74:16:4b:be:
5e:c4:39:67:85:c0:cd:6f:90:92:81:d3:3d:23:6a:1b:dd:20:
64:e8:9c:3d
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEASDNrjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
Yjk1ZTY1OTRkYzM3MDUzY2U5OGJkNTg4OTA2MzU5MWIzNWUyZDgwMB4XDTIyMDEw
MTEyNTQxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjRmODc2N2I2NzFk
MmExY2NmYzhiMDU1Y2E3OGEwZDFlZmMyY2E2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALk+odR59c5dIY/fn/Fl86oTFVw1xO3RHImfwVN5DnAb73T1
qe6X0uyuv13flKO10Eb/OUbces1/VueWnA5BiNc/K0/v+D6PsSzk3KFdqArF1D8L
CnQk0rz2mKQtiNCppe1Dudju7u33wQXSWaiTtaLZX/F0PtMV/ZsQL21otrj0s3o9
HTUrV4zwd+ZmfmZ+wj1eKFNZrrwyhTqXVb1aEejJeiXxfOBh9JjJ+l9GszYIMDoQ
GDN+r7S45Mr9wEFr0CYlH5UdNsA2jbOwX4YohJUAv2tlgP1drZIvl1Yi1yTHfaIB
DU+mC2An9PTkozltD85g+VD1LJZkODUPpaqEC58CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBS0+HZ7Zx0qHM/IsFXKeKDR78LKZDAfBgNVHSMEGDAWgBT7leZZTcNwU86Y
vViJBjWRs14tgDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtNVhtV1UzRGNGUE9tTDFZaVFZMWtiTmVMWUEuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2JiLzc4MTc4Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2MzYv
MS90UGgyZTJjZEtoelB5TEJWeW5pZzBlX0N5bVEucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Ji
Lzc4MTc4Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2MzYvMS8xLTVYbVdVM0Rj
RlBPbUwxWWlRWTFrYk5lTFlBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucywMA0GCSqGSIb3DQEBCwUA
A4IBAQBBJvJ5tW4+UZjm/iZrkv6cLWbAASCcR7Amo+jUllsm96GwKJqtEZsKjmKG
RsPXrYv8PrrVjLBa+esFJK1V5CvYLECTP73xvYyedx/JwaBOaia8aIkBXzAj5Plb
OYVDIcyjuqsbN3W6StzqHreQr7K53yETqVgSKDgNlozX3KQhjBrgGRKFnUg8kSK1
zoP6RS0Rk2ZhUAcZ7FK+UxP6mGkN/DOpXN0hXWjR1iBorTGMdv7ArVPQD0DlR1Wa
KlQOYCJFJ0B0oHc0fKilcnKZWp6BRSXvGVnrMZrigZ6bOZeOIsAbhdbV+3QWS75e
xDlnhcDNb5CSgdM9I2ob3SBk6Jw9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:36 2024 by rpki-client on console-fra.rpki-client.org