Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/D_fln9uO7MFbhIStO3wXBqjJ5Hk.roa
File: D_fln9uO7MFbhIStO3wXBqjJ5Hk.roa (raw, json)
Hash identifier: GsCYrfP5sntKRQLFxtSDoVkVlLwaF+YwdWfCfAxVfPM=
Subject key identifier: 0F:F7:E5:9F:DB:8E:EC:C1:5B:84:84:AD:3B:7C:17:06:A8:C9:E4:79
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 06ED1AD8
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/D_fln9uO7MFbhIStO3wXBqjJ5Hk.roa
Signing time: Wed 18 May 2022 11:57:53 +0000
ROA not before: Wed 18 May 2022 11:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 78.159.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116202200 (0x6ed1ad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: May 18 11:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ff7e59fdb8eecc15b8484ad3b7c1706a8c9e479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:73:16:b7:2d:c6:53:eb:d2:22:57:04:71:
ca:19:51:ff:aa:9e:72:de:0a:59:be:91:73:d4:f7:
6d:d4:97:d1:cc:0b:89:43:03:e8:2d:80:3f:49:52:
42:3f:c0:2a:1f:22:25:8f:88:3c:5e:2a:d6:46:95:
ab:ad:f4:54:2f:2f:20:c8:39:98:29:7a:64:0d:93:
d4:ea:06:72:f5:11:7f:a2:aa:e2:72:68:13:b3:dd:
68:11:28:8f:7d:a3:9a:f1:e1:20:c9:4e:54:b4:0a:
5d:07:54:2d:54:58:20:53:1f:b9:ab:6c:fd:2e:ba:
52:2c:b5:32:6a:01:1a:29:27:5d:8d:b8:ad:c9:0e:
fa:83:c1:88:aa:b9:a0:d6:25:68:b8:1a:68:54:af:
90:25:39:8d:cb:c5:2e:9a:be:37:cd:8b:c9:89:89:
67:41:ad:ae:07:23:5f:5f:0d:bb:6d:3c:ab:a8:49:
51:93:63:45:d6:71:14:4a:d0:3c:57:b7:3a:b6:d5:
62:17:49:b7:e3:23:49:d3:15:04:76:c5:73:37:13:
1a:db:83:41:46:53:5e:d1:75:aa:2d:12:4f:41:3a:
f7:e7:cf:13:30:9a:03:87:cc:e0:f6:6b:16:90:03:
db:5a:aa:70:8a:e5:88:a7:fa:fb:09:82:e3:fd:d1:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:E5:9F:DB:8E:EC:C1:5B:84:84:AD:3B:7C:17:06:A8:C9:E4:79
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/D_fln9uO7MFbhIStO3wXBqjJ5Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.131.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b5:df:30:38:43:ff:37:f2:f0:5e:91:cb:78:15:c4:92:c0:
b3:4b:62:8b:48:3b:91:20:bb:2a:4e:ba:a7:f0:2e:5a:28:53:
70:cb:e6:62:aa:e1:09:e7:aa:b7:92:92:03:a1:0f:d3:31:3b:
18:4b:cd:10:a1:f3:95:e6:48:12:67:d5:fa:c4:2e:67:a5:0a:
34:a0:cd:aa:4e:c0:27:c0:96:87:72:bd:58:77:cb:e5:3b:46:
51:51:8e:9e:1e:a3:4b:40:18:ae:a3:46:10:34:cf:fa:7a:c1:
ba:cc:65:04:d6:1d:43:13:46:ac:f1:0d:8a:fb:05:fa:c5:af:
c2:a9:89:b7:eb:8d:c1:a2:56:ee:e3:97:44:cd:03:cd:32:b0:
cc:b7:0b:2d:53:79:af:c6:47:db:3b:3e:49:73:6f:0f:d9:c8:
a8:62:50:20:74:b7:5f:0f:23:8d:be:b5:17:49:e2:6f:b6:c4:
b2:0f:96:d9:a5:ca:93:df:c8:09:97:bd:37:e5:c3:98:1d:9b:
c0:be:72:1f:23:e3:14:3e:4e:bb:2c:55:65:8e:22:66:1c:ea:
99:17:c3:d8:7a:e0:5e:60:5a:57:27:2a:9a:f2:e4:36:15:96:
9f:f7:a5:eb:e4:9e:1d:2f:55:d2:e6:9b:cc:1f:c6:4c:a0:b2:
f0:60:fa:c3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBu0a2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZDFjYWE2OTM1OGY4Yzk4ZjdhNzE5ZjI1OTdkNWRhZGRiZDAwMThjMB4XDTIyMDUx
ODExNTc1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGZmN2U1OWZkYjhl
ZWNjMTViODQ4NGFkM2I3YzE3MDZhOGM5ZTQ3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANB6cxa3LcZT69IiVwRxyhlR/6qect4KWb6Rc9T3bdSX0cwL
iUMD6C2AP0lSQj/AKh8iJY+IPF4q1kaVq630VC8vIMg5mCl6ZA2T1OoGcvURf6Kq
4nJoE7PdaBEoj32jmvHhIMlOVLQKXQdULVRYIFMfuats/S66Uiy1MmoBGiknXY24
rckO+oPBiKq5oNYlaLgaaFSvkCU5jcvFLpq+N82LyYmJZ0GtrgcjX18Nu208q6hJ
UZNjRdZxFErQPFe3OrbVYhdJt+MjSdMVBHbFczcTGtuDQUZTXtF1qi0ST0E69+fP
EzCaA4fM4PZrFpAD21qqcIrliKf6+wmC4/3RCdECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQP9+Wf247swVuEhK07fBcGqMnkeTAfBgNVHSMEGDAWgBQtHKppNY+MmPen
GfJZfV2t29ABjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xSeXFhVFdQakpqM3B4bnlXWDFkcmR2UUFZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvYTkzNjk5LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8x
L0RfZmxuOXVPN01GYmhJU3RPM3dYQnFqSjVIay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
YTkzNjk5LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8xL0xSeXFhVFdQakpq
M3B4bnlXWDFkcmR2UUFZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE6fgzANBgkqhkiG9w0BAQsFAAOC
AQEAdrXfMDhD/zfy8F6Ry3gVxJLAs0tii0g7kSC7Kk66p/AuWihTcMvmYqrhCeeq
t5KSA6EP0zE7GEvNEKHzleZIEmfV+sQuZ6UKNKDNqk7AJ8CWh3K9WHfL5TtGUVGO
nh6jS0AYrqNGEDTP+nrBusxlBNYdQxNGrPENivsF+sWvwqmJt+uNwaJW7uOXRM0D
zTKwzLcLLVN5r8ZH2zs+SXNvD9nIqGJQIHS3Xw8jjb61F0nib7bEsg+W2aXKk9/I
CZe9N+XDmB2bwL5yHyPjFD5OuyxVZY4iZhzqmRfD2HrgXmBaVycqmvLkNhWWn/el
6+SeHS9V0uabzB/GTKCy8GD6ww==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org