Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/lSZzDtuMctV4ej_KiS6OKy2uM8w.roa
File: lSZzDtuMctV4ej_KiS6OKy2uM8w.roa (raw, json)
Hash identifier: +fnxV7SnoA5M3VVKBjoRA/lJZ2sbtB2wM2C8OPuKXhE=
Subject key identifier: 95:26:73:0E:DB:8C:72:D5:78:7A:3F:CA:89:2E:8E:2B:2D:AE:33:CC
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 3A133793
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/lSZzDtuMctV4ej_KiS6OKy2uM8w.roa
Signing time: Sat 01 Jan 2022 14:00:46 +0000
ROA not before: Sat 01 Jan 2022 14:00:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211746
IP address blocks: 78.133.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 974337939 (0x3a133793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9526730edb8c72d5787a3fca892e8e2b2dae33cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:2d:2b:81:5f:66:cc:b5:88:4d:4e:12:d6:
5c:37:73:03:43:75:19:f8:e3:77:10:6a:b7:25:c4:
3c:a2:66:fe:5e:c6:c8:79:d1:4d:57:b9:ba:29:6d:
20:31:2d:51:49:ef:5e:64:2b:32:3d:de:b4:73:08:
5b:62:e7:2c:35:e5:0b:c8:05:4d:df:41:d7:53:c5:
d0:35:df:9f:db:e4:31:9f:19:d4:fa:0c:cb:11:fb:
7a:0c:a2:87:67:72:2b:a9:47:bf:80:a5:f4:3c:76:
a0:59:4f:56:41:17:8d:1d:a7:b8:d6:b7:33:42:bb:
5b:61:88:bf:4f:38:6d:db:de:16:34:3b:2a:24:e3:
af:55:b0:6e:7d:76:ff:5d:ab:61:00:61:2b:58:82:
a9:e5:1c:04:2b:d2:3b:49:73:32:9f:2d:79:4d:0c:
ee:ab:d4:2e:bc:de:5e:b7:ad:cf:8c:c2:ce:0b:aa:
d0:5e:97:5c:57:25:c2:e5:4f:d5:95:b0:4d:ef:02:
9c:df:aa:af:7a:b2:b9:07:23:5e:50:87:43:9a:4d:
bf:07:1d:6f:ee:3b:c7:39:be:ef:9c:78:61:56:30:
8b:78:8f:96:41:4f:74:52:c0:91:31:dc:73:24:10:
37:b3:f4:2d:8c:a5:a1:b7:fe:ac:82:47:46:fb:03:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:26:73:0E:DB:8C:72:D5:78:7A:3F:CA:89:2E:8E:2B:2D:AE:33:CC
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/lSZzDtuMctV4ej_KiS6OKy2uM8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.166.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4a:d5:83:83:53:57:aa:38:0b:47:e1:c0:a2:6b:42:45:1b:
34:a1:53:13:21:c7:ff:02:40:dd:07:ee:06:11:ee:2a:65:ce:
db:76:b0:c9:c4:84:60:e2:a8:18:26:2e:51:90:6b:42:ce:d6:
cd:c9:5a:3a:03:11:d3:0a:4e:1f:71:b6:04:b6:83:97:18:d0:
7f:f5:8a:de:bf:8a:0e:10:34:d4:dc:da:bc:7a:82:5b:bc:eb:
6b:45:d6:cc:bd:8d:95:31:c7:42:06:28:63:1c:30:f8:28:06:
6f:47:0f:d8:64:bb:ba:c1:d4:15:1a:12:5f:a8:d0:01:da:67:
94:72:5e:49:e9:09:ba:66:21:2d:20:f0:93:b1:a3:24:62:74:
fe:ea:36:b4:27:13:19:ca:a7:16:e7:5a:10:d8:62:9f:f5:e8:
b2:fd:38:fa:01:79:74:d6:0e:e3:dc:e5:2f:ca:e3:ea:ff:5a:
bd:73:54:a3:83:06:29:8c:6e:1e:24:39:44:c3:65:58:31:8c:
90:71:6c:c3:a7:18:21:ca:66:25:20:e7:46:64:72:63:ef:14:
73:05:db:4c:d4:1e:73:c9:90:ca:1d:fd:b5:38:50:bf:be:03:
d0:01:19:31:c5:e7:0a:4c:50:96:1e:68:31:c3:c3:05:da:76:
d3:58:d8:d9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOhM3kzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YWNhNjNkZjI0OGI3YWRmM2RkZDA3ZThjMmQzZWVkZDAyY2VmOTMzMB4XDTIyMDEw
MTE0MDA0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTUyNjczMGVkYjhj
NzJkNTc4N2EzZmNhODkyZThlMmIyZGFlMzNjYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANBoLSuBX2bMtYhNThLWXDdzA0N1GfjjdxBqtyXEPKJm/l7G
yHnRTVe5uiltIDEtUUnvXmQrMj3etHMIW2LnLDXlC8gFTd9B11PF0DXfn9vkMZ8Z
1PoMyxH7egyih2dyK6lHv4Cl9Dx2oFlPVkEXjR2nuNa3M0K7W2GIv084bdveFjQ7
KiTjr1Wwbn12/12rYQBhK1iCqeUcBCvSO0lzMp8teU0M7qvULrzeXretz4zCzguq
0F6XXFclwuVP1ZWwTe8CnN+qr3qyuQcjXlCHQ5pNvwcdb+47xzm+75x4YVYwi3iP
lkFPdFLAkTHccyQQN7P0LYylobf+rIJHRvsDnZ8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSVJnMO24xy1Xh6P8qJLo4rLa4zzDAfBgNVHSMEGDAWgBQaymPfJIt63z3d
B+jC0+7dAs75MzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dzcGozeVNMZXQ4OTNRZm93dFB1M1FMTy1UTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvMWY2NDU4LWRjNzUtNGFkZC1hZTcyLTkxZTMxODRiYjBhYi8x
L2xTWnpEdHVNY3RWNGVqX0tpUzZPS3kydU04dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
MWY2NDU4LWRjNzUtNGFkZC1hZTcyLTkxZTMxODRiYjBhYi8xL0dzcGozeVNMZXQ4
OTNRZm93dFB1M1FMTy1UTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE6FpjANBgkqhkiG9w0BAQsFAAOC
AQEABErVg4NTV6o4C0fhwKJrQkUbNKFTEyHH/wJA3QfuBhHuKmXO23awycSEYOKo
GCYuUZBrQs7WzclaOgMR0wpOH3G2BLaDlxjQf/WK3r+KDhA01NzavHqCW7zra0XW
zL2NlTHHQgYoYxww+CgGb0cP2GS7usHUFRoSX6jQAdpnlHJeSekJumYhLSDwk7Gj
JGJ0/uo2tCcTGcqnFudaENhin/Xosv04+gF5dNYO49zlL8rj6v9avXNUo4MGKYxu
HiQ5RMNlWDGMkHFsw6cYIcpmJSDnRmRyY+8UcwXbTNQec8mQyh39tThQv74D0AEZ
McXnCkxQlh5oMcPDBdp201jY2Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:02 2023 by rpki-client on console-ams.rpki-client.org