Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/siVJipIm5yEHwvXvfBWhx5oSsmw.roa
File: siVJipIm5yEHwvXvfBWhx5oSsmw.roa (raw, json)
Hash identifier: fr9ncPd+bjJSMVnLgr1PLxdLKQRkNrUb31FP+s5gYJU=
Subject key identifier: B2:25:49:8A:92:26:E7:21:07:C2:F5:EF:7C:15:A1:C7:9A:12:B2:6C
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 0184EB70FABE2913078C86545CEAB9CAF1C3
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/siVJipIm5yEHwvXvfBWhx5oSsmw.roa
Signing time: Wed 07 Dec 2022 07:16:00 +0000
ROA not before: Wed 07 Dec 2022 07:16:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 178.209.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:70:fa:be:29:13:07:8c:86:54:5c:ea:b9:ca:f1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Dec 7 07:16:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b225498a9226e72107c2f5ef7c15a1c79a12b26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:83:51:86:2f:b6:a1:27:fe:b0:79:2e:be:
1c:25:36:2e:78:f2:87:5b:39:0a:ab:b9:75:0a:97:
87:25:60:70:59:82:bb:7d:eb:c6:97:78:78:ae:14:
8c:f7:03:7a:78:2b:14:56:d3:4f:26:84:04:6e:a1:
35:12:d3:79:ef:d6:0d:35:c9:44:a1:8a:98:37:b5:
ae:6d:a0:0b:c2:4d:18:c9:29:8b:1b:16:7f:6d:d3:
6d:39:10:62:ef:89:57:a5:85:74:4b:c9:93:fa:bb:
12:bc:25:08:9f:fa:3b:9c:33:98:72:ed:16:e1:f1:
a3:c2:48:ac:f1:71:6d:dd:b7:77:fe:2a:41:21:3a:
a5:b1:47:6c:09:3b:82:65:5f:82:96:87:66:dc:01:
4e:da:e2:b5:aa:70:10:0f:4a:eb:21:c8:0e:3d:e6:
d7:a2:3c:4e:89:92:dc:4b:31:cc:b3:94:90:ee:14:
b5:be:fb:37:9a:8d:13:dd:28:0c:cc:46:69:85:2e:
d7:f4:8e:00:95:2f:f4:33:cf:3e:5b:0a:4e:83:d5:
59:bf:2a:84:40:25:c8:8a:4b:01:4d:c0:d9:ad:31:
08:4c:74:96:ba:13:45:d9:c8:7c:1d:b0:34:3f:0a:
08:be:54:3d:f0:13:76:e8:bb:91:fa:20:66:67:69:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:25:49:8A:92:26:E7:21:07:C2:F5:EF:7C:15:A1:C7:9A:12:B2:6C
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/siVJipIm5yEHwvXvfBWhx5oSsmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.209.64.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:0a:c8:82:54:ac:a2:29:71:23:85:6f:b1:07:6e:54:02:90:
7c:5d:09:16:a5:2d:d8:25:ff:d7:7d:98:ad:89:b7:a9:2b:f1:
f8:f3:29:ed:da:af:99:64:b0:b5:e4:d7:cf:41:95:69:6e:46:
9b:1d:ef:87:cd:bb:1a:43:7e:df:25:ff:25:fe:f4:96:9f:54:
89:56:0e:41:95:e7:91:b8:61:5d:48:ed:7b:7c:41:9f:fe:84:
7f:ce:9c:17:bd:67:ca:71:49:4b:fa:fb:97:7c:eb:ee:cc:17:
23:1b:86:10:61:3b:20:7d:ac:ab:48:5d:0c:91:1b:e9:96:8b:
09:c7:c9:1b:3b:b0:2d:ad:96:c9:e5:bf:f1:1a:de:bc:0b:3b:
c9:c9:44:25:99:57:68:05:cc:56:45:f1:29:0f:9c:7e:46:eb:
4f:57:69:d6:e4:b0:26:39:9c:4e:6e:ee:69:b0:57:51:f4:29:
98:55:38:ed:50:4a:a2:72:b9:31:e5:77:85:3e:aa:ed:dd:0e:
bc:8c:d1:33:bf:e1:50:66:f3:43:66:bb:f1:29:c2:de:be:98:
20:c9:a7:7c:ad:ec:d8:6d:2f:5b:78:76:12:e5:28:ce:9c:d4:
c8:20:e5:c7:e6:b4:ed:4a:11:2f:53:c7:d6:ea:5e:5b:17:19:
3e:fd:5f:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTrcPq+KRMHjIZUXOq5yvHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi
NWU5MTgwHhcNMjIxMjA3MDcxNjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjI1NDk4YTkyMjZlNzIxMDdjMmY1ZWY3YzE1YTFjNzlhMTJiMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE6DUYYvtqEn/rB5Lr4cJTYuePKH
WzkKq7l1CpeHJWBwWYK7fevGl3h4rhSM9wN6eCsUVtNPJoQEbqE1EtN579YNNclE
oYqYN7WubaALwk0YySmLGxZ/bdNtORBi74lXpYV0S8mT+rsSvCUIn/o7nDOYcu0W
4fGjwkis8XFt3bd3/ipBITqlsUdsCTuCZV+Clodm3AFO2uK1qnAQD0rrIcgOPebX
ojxOiZLcSzHMs5SQ7hS1vvs3mo0T3SgMzEZphS7X9I4AlS/0M88+WwpOg9VZvyqE
QCXIiksBTcDZrTEITHSWuhNF2ch8HbA0PwoIvlQ98BN26LuR+iBmZ2nx6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIlSYqSJuchB8L173wVoceaErJsMB8GA1UdIwQY
MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt
Mzg1M2QzNDBjOWE2LzEvc2lWSmlwSW01eUVId3ZYdmZCV2h4NW9Tc213LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2
LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEstFAMA0G
CSqGSIb3DQEBCwUAA4IBAQBuCsiCVKyiKXEjhW+xB25UApB8XQkWpS3YJf/XfZit
ibepK/H48ynt2q+ZZLC15NfPQZVpbkabHe+HzbsaQ37fJf8l/vSWn1SJVg5BleeR
uGFdSO17fEGf/oR/zpwXvWfKcUlL+vuXfOvuzBcjG4YQYTsgfayrSF0MkRvplosJ
x8kbO7AtrZbJ5b/xGt68CzvJyUQlmVdoBcxWRfEpD5x+RutPV2nW5LAmOZxObu5p
sFdR9CmYVTjtUEqicrkx5XeFPqrt3Q68jNEzv+FQZvNDZrvxKcLevpggyad8rezY
bS9beHYS5SjOnNTIIOXH5rTtShEvU8fW6l5bFxk+/V+q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:20 2024 by rpki-client on console-ams.rpki-client.org