Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/_uzKAIJCsoNupGYe9SFkvDdxm_I.roa
File: _uzKAIJCsoNupGYe9SFkvDdxm_I.roa (raw, json)
Hash identifier: CLZz0d3T2YnFrSdfnZ3rFW6uEixUCGvRsW79+MOozUo=
Subject key identifier: FE:EC:CA:00:82:42:B2:83:6E:A4:66:1E:F5:21:64:BC:37:71:9B:F2
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 018529A8057FC7934F0B95FF018D2242B714
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/_uzKAIJCsoNupGYe9SFkvDdxm_I.roa
Signing time: Mon 19 Dec 2022 09:12:35 +0000
ROA not before: Mon 19 Dec 2022 09:12:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133301
IP address blocks: 178.248.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:a8:05:7f:c7:93:4f:0b:95:ff:01:8d:22:42:b7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Dec 19 09:12:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=feecca008242b2836ea4661ef52164bc37719bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d2:d6:89:af:6b:7b:b2:84:6a:6c:d4:c3:6b:
ae:f2:da:6a:65:73:4d:61:91:04:f3:42:fc:66:84:
60:90:aa:60:15:4b:19:e3:dc:70:16:ee:9c:7b:32:
ba:9d:c9:bf:3c:72:ef:40:f6:80:ea:d5:64:64:e2:
4c:fd:b7:81:d4:4d:36:63:e9:bb:2d:6b:61:4e:0a:
14:dc:9a:d8:0d:72:31:69:c4:9e:01:06:ea:44:8a:
98:6b:85:9a:f2:ef:b4:da:bc:de:12:3f:a2:46:53:
99:cc:96:30:c9:3a:bf:5c:19:88:6c:3a:90:62:95:
3e:8d:13:78:59:f2:da:38:e0:be:b3:c3:42:a8:b4:
96:89:2b:b6:a9:2b:f8:bb:90:48:df:54:0c:3a:15:
bb:07:64:11:a5:34:6b:b4:8c:55:c0:6c:fd:c5:12:
31:da:8a:c0:d1:ed:ca:fe:8d:94:e9:ab:3f:66:1c:
42:1e:e8:e5:09:28:7f:03:6d:81:12:dd:82:31:66:
7b:ff:28:e2:a6:fa:08:85:7a:fc:41:ca:2f:ea:bd:
d9:6f:d6:17:9b:8c:60:af:15:dd:9e:94:04:ca:4a:
88:9f:dc:12:cb:c7:e0:87:79:db:f4:32:71:e4:5c:
0e:fe:a5:5f:2b:48:83:ac:69:58:75:d5:33:9d:37:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EC:CA:00:82:42:B2:83:6E:A4:66:1E:F5:21:64:BC:37:71:9B:F2
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/_uzKAIJCsoNupGYe9SFkvDdxm_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.116.0/23
Signature Algorithm: sha256WithRSAEncryption
84:39:cd:f5:3a:a6:e5:24:06:00:5c:3f:7e:f3:e9:ec:36:be:
0a:2e:1e:ab:9b:df:c1:2b:cb:09:b7:57:75:74:96:e6:ec:20:
23:1b:e2:9c:46:d7:ae:38:cc:81:35:90:6b:1b:ab:8e:5c:12:
ef:1c:3e:46:bd:35:9a:6a:50:ee:ad:8f:b7:bf:1a:2c:22:7f:
5b:c8:69:a5:e0:fd:88:ff:e9:51:11:f6:99:fb:6e:6b:ff:3d:
d0:05:b5:6c:5f:37:a6:bf:6a:a9:eb:44:12:49:46:74:38:5d:
ed:cb:58:64:b9:e5:86:b6:56:32:f3:79:36:24:65:0c:9a:b1:
0b:ef:1a:ca:fe:cd:60:8d:3a:a7:4b:98:1d:b0:17:d3:78:e6:
c2:2a:14:23:40:40:4d:2a:92:2c:58:f5:ab:1a:6a:66:2e:55:
ff:24:2c:13:1c:5e:47:e1:c0:71:03:56:b3:bd:23:7e:01:90:
a2:01:52:c9:93:ee:8b:4a:a8:58:54:3c:be:e0:71:00:45:7e:
e3:44:4a:01:14:f5:d5:bc:55:d1:0e:32:a7:d2:8f:cb:07:be:
3d:44:70:d8:30:ab:57:42:cb:cf:23:a9:70:57:3f:f4:a2:a6:
65:b4:dd:54:74:2e:55:77:97:d3:d0:50:5e:72:bd:f8:70:b8:
fc:00:e9:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUpqAV/x5NPC5X/AY0iQrcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5
YjA5MzYwHhcNMjIxMjE5MDkxMjM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWVjY2EwMDgyNDJiMjgzNmVhNDY2MWVmNTIxNjRiYzM3NzE5YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9LWia9re7KEamzUw2uu8tpqZXNN
YZEE80L8ZoRgkKpgFUsZ49xwFu6cezK6ncm/PHLvQPaA6tVkZOJM/beB1E02Y+m7
LWthTgoU3JrYDXIxacSeAQbqRIqYa4Wa8u+02rzeEj+iRlOZzJYwyTq/XBmIbDqQ
YpU+jRN4WfLaOOC+s8NCqLSWiSu2qSv4u5BI31QMOhW7B2QRpTRrtIxVwGz9xRIx
2orA0e3K/o2U6as/ZhxCHujlCSh/A22BEt2CMWZ7/yjipvoIhXr8Qcov6r3Zb9YX
m4xgrxXdnpQEykqIn9wSy8fgh3nb9DJx5FwO/qVfK0iDrGlYddUznTdPKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7sygCCQrKDbqRmHvUhZLw3cZvyMB8GA1UdIwQY
MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt
OTk2MTg5ZjljZTE0LzEvX3V6S0FJSkNzb051cEdZZTlTRmt2RGR4bV9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0
LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsvh0MA0G
CSqGSIb3DQEBCwUAA4IBAQCEOc31OqblJAYAXD9+8+nsNr4KLh6rm9/BK8sJt1d1
dJbm7CAjG+KcRteuOMyBNZBrG6uOXBLvHD5GvTWaalDurY+3vxosIn9byGml4P2I
/+lREfaZ+25r/z3QBbVsXzemv2qp60QSSUZ0OF3ty1hkueWGtlYy83k2JGUMmrEL
7xrK/s1gjTqnS5gdsBfTeObCKhQjQEBNKpIsWPWrGmpmLlX/JCwTHF5H4cBxA1az
vSN+AZCiAVLJk+6LSqhYVDy+4HEARX7jREoBFPXVvFXRDjKn0o/LB749RHDYMKtX
QsvPI6lwVz/0oqZltN1UdC5Vd5fT0FBecr34cLj8AOn/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:07 2023 by rpki-client on console-ams.rpki-client.org