Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/loM__5xBtZ8MiTrmWlzCMo384wM.roa
File: loM__5xBtZ8MiTrmWlzCMo384wM.roa (raw, json)
Hash identifier: pP5/V2lP509yLrhIfZhn/E+npEjemHg/EDea4qHb8FM=
Subject key identifier: 96:83:3F:FF:9C:41:B5:9F:0C:89:3A:E6:5A:5C:C2:32:8D:FC:E3:03
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0184BED6375C17931C2516EF712B082CB78D
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/loM__5xBtZ8MiTrmWlzCMo384wM.roa
Signing time: Mon 28 Nov 2022 15:23:40 +0000
ROA not before: Mon 28 Nov 2022 15:23:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41782
IP address blocks: 151.237.16.0/24 maxlen: 24
151.237.17.0/24 maxlen: 24
151.237.18.0/24 maxlen: 24
151.237.19.0/24 maxlen: 24
151.237.25.0/24 maxlen: 24
151.237.29.0/24 maxlen: 24
151.237.30.0/24 maxlen: 24
151.237.31.0/24 maxlen: 24
151.237.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:d6:37:5c:17:93:1c:25:16:ef:71:2b:08:2c:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Nov 28 15:23:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96833fff9c41b59f0c893ae65a5cc2328dfce303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:a1:5a:6c:f8:c1:d2:88:06:0c:97:f1:e9:
b8:10:90:fc:07:e1:4b:57:3c:ad:b7:dc:9b:2b:49:
e5:d5:80:94:24:64:da:7d:e9:44:41:95:2e:db:71:
15:f1:7e:37:29:6d:64:c1:d9:fc:6a:3c:f6:4d:c3:
25:8a:ad:dd:e8:d4:44:a4:16:99:87:51:85:19:ac:
b6:cf:10:29:f9:3a:fd:18:17:cd:b8:85:c6:11:47:
2a:67:06:01:d0:99:28:48:e9:70:4a:be:7f:71:f7:
da:b8:99:62:f6:9f:94:65:40:7d:be:d9:db:ce:cd:
29:20:10:7c:94:94:b6:8e:7c:57:22:7d:15:62:cf:
af:8e:c6:22:8a:0c:12:5d:54:fe:62:40:62:47:6a:
da:0f:63:11:4e:ab:02:5d:64:f1:49:b1:f9:41:9c:
16:e6:69:54:8f:92:dd:99:65:b3:e1:40:4c:73:32:
c2:4c:1d:6d:d8:c7:6d:1a:7d:c8:f1:b6:34:c5:3b:
f4:77:51:0f:a7:07:a7:61:ea:15:b2:7b:f6:ff:6f:
b9:62:27:23:7c:b1:f6:98:e9:19:71:51:16:dc:4e:
97:ba:97:b2:3d:31:c0:56:91:86:b5:7e:db:5e:d5:
0f:50:0b:15:79:2f:ad:94:6f:41:bc:f7:ac:69:81:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:83:3F:FF:9C:41:B5:9F:0C:89:3A:E6:5A:5C:C2:32:8D:FC:E3:03
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/loM__5xBtZ8MiTrmWlzCMo384wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.16.0/22
151.237.25.0/24
151.237.29.0-151.237.32.255
Signature Algorithm: sha256WithRSAEncryption
d6:2b:e8:50:f3:82:ee:8f:4f:1b:8a:f2:8f:a6:9b:44:5c:25:
3d:eb:6b:1e:eb:81:55:6d:94:14:90:33:27:3c:85:fe:64:ea:
bf:9b:a1:3e:34:3b:2c:5a:dd:8d:d2:cc:2e:d6:c0:59:2f:12:
1a:45:dd:98:9d:44:ae:cd:4b:c7:4c:40:18:8b:56:db:85:77:
75:d9:9e:dd:d5:57:cc:47:a4:0e:43:b9:7b:f3:b1:34:29:90:
1f:5a:35:e1:16:6c:31:0c:a2:79:51:ee:ae:48:4f:53:ae:d9:
75:93:2d:ac:af:d4:9b:3f:4f:46:07:53:80:a9:e8:4d:17:c2:
df:5a:1a:a4:81:f1:38:b2:60:d9:2d:59:8b:ba:e9:e3:82:b7:
d2:2d:78:66:16:be:60:65:46:6e:f2:96:b6:8c:73:04:36:80:
70:93:8f:70:3d:66:bd:1b:c4:f3:46:ac:a1:14:74:3c:e6:68:
cc:95:87:f7:08:f5:b7:07:20:09:aa:72:30:83:df:68:53:68:
f1:ff:fc:93:fb:cb:e5:2f:14:33:9d:d4:f3:02:f5:ad:71:43:
0a:cd:dc:75:87:46:c5:2a:1b:cc:32:85:ef:e7:b1:48:30:71:
07:f1:22:d9:4a:50:81:12:bf:92:41:4f:48:10:f2:50:d2:33:
96:f3:37:cf
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYS+1jdcF5McJRbvcSsILLeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjIxMTI4MTUyMzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjgzM2ZmZjljNDFiNTlmMGM4OTNhZTY1YTVjYzIzMjhkZmNlMzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk6hWmz4wdKIBgyX8em4EJD8B+FL
Vzytt9ybK0nl1YCUJGTafelEQZUu23EV8X43KW1kwdn8ajz2TcMliq3d6NREpBaZ
h1GFGay2zxAp+Tr9GBfNuIXGEUcqZwYB0JkoSOlwSr5/cffauJli9p+UZUB9vtnb
zs0pIBB8lJS2jnxXIn0VYs+vjsYiigwSXVT+YkBiR2raD2MRTqsCXWTxSbH5QZwW
5mlUj5LdmWWz4UBMczLCTB1t2MdtGn3I8bY0xTv0d1EPpwenYeoVsnv2/2+5Yicj
fLH2mOkZcVEW3E6XupeyPTHAVpGGtX7bXtUPUAsVeS+tlG9BvPesaYE47wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJaDP/+cQbWfDIk65lpcwjKN/OMDMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvbG9NX181eEJ0WjhNaVRybVdsekNNbzM4NHdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCl+0QAwQA
l+0ZMAwDBACX7R0DBACX7SAwDQYJKoZIhvcNAQELBQADggEBANYr6FDzgu6PTxuK
8o+mm0RcJT3rax7rgVVtlBSQMyc8hf5k6r+boT40Oyxa3Y3SzC7WwFkvEhpF3Zid
RK7NS8dMQBiLVtuFd3XZnt3VV8xHpA5DuXvzsTQpkB9aNeEWbDEMonlR7q5IT1Ou
2XWTLayv1Js/T0YHU4Cp6E0Xwt9aGqSB8TiyYNktWYu66eOCt9IteGYWvmBlRm7y
lraMcwQ2gHCTj3A9Zr0bxPNGrKEUdDzmaMyVh/cI9bcHIAmqcjCD32hTaPH//JP7
y+UvFDOd1PMC9a1xQwrN3HWHRsUqG8wyhe/nsUgwcQfxItlKUIESv5JBT0gQ8lDS
M5bzN88=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org