Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/xrsYyrYVhsfHXxx0ECPcdnAajSg.roa
File: xrsYyrYVhsfHXxx0ECPcdnAajSg.roa (raw, json)
Hash identifier: OOLcrRKcJXP1fJO04qJwrA6BbemIqANlJ3cf9sTM7K4=
Subject key identifier: C6:BB:18:CA:B6:15:86:C7:C7:5F:1C:74:10:23:DC:76:70:1A:8D:28
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 0182682B96CD7AC12B377A6CD4BD69ECDEEB
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/xrsYyrYVhsfHXxx0ECPcdnAajSg.roa
Signing time: Thu 04 Aug 2022 09:24:23 +0000
ROA not before: Thu 04 Aug 2022 09:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20719
IP address blocks: 176.119.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:2b:96:cd:7a:c1:2b:37:7a:6c:d4:bd:69:ec:de:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Aug 4 09:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6bb18cab61586c7c75f1c741023dc76701a8d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:fc:35:9d:b0:fa:6e:bc:0e:9b:b8:ab:cb:
9b:0a:b5:f4:62:2d:53:ee:bc:7f:4d:d0:66:f4:5e:
da:7d:03:00:fb:a0:96:3f:69:5a:76:ff:4b:88:6a:
ed:1a:5b:7a:86:4d:f7:81:58:58:df:f8:dc:23:8b:
42:14:6f:ca:64:52:b1:d3:80:8a:fd:6f:cd:1b:28:
14:05:51:4d:75:2d:f4:e4:f3:a4:63:46:c0:b8:45:
9b:58:ba:2b:06:c3:c6:29:cc:43:7c:b2:53:ab:ad:
46:f3:e6:b8:4d:15:60:3e:4d:e1:d7:1e:a1:bd:38:
90:c9:a2:d4:5b:45:10:69:4c:b2:bc:79:b8:b5:5c:
89:1e:19:5f:55:52:45:06:43:4a:4e:ba:fa:f7:06:
70:a1:f1:05:1e:3d:34:7d:ae:0e:50:a7:e7:87:b3:
9f:86:22:21:45:d1:02:cc:42:f9:c9:74:70:92:8e:
a8:db:52:cc:b1:d6:e6:6b:a4:fa:7e:5d:49:5e:55:
2e:9e:e8:60:23:0f:29:50:df:86:85:e8:dc:dc:ab:
e6:8d:30:81:2c:04:52:d3:4d:dc:68:5b:54:a4:11:
b6:9a:9e:94:78:c7:8e:bd:1a:58:23:16:4a:67:db:
20:c6:3b:38:b7:61:23:d2:d0:c5:39:ed:c3:ab:84:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BB:18:CA:B6:15:86:C7:C7:5F:1C:74:10:23:DC:76:70:1A:8D:28
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/xrsYyrYVhsfHXxx0ECPcdnAajSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.253.0/24
Signature Algorithm: sha256WithRSAEncryption
93:52:17:27:af:dd:db:3e:d6:0a:83:60:39:0b:f3:db:89:8e:
ec:f1:ff:dd:0d:d7:a9:ae:1d:7d:67:37:2c:56:c4:a5:39:fc:
60:90:fc:6a:da:7d:8b:6e:6b:b9:36:f4:aa:65:44:6a:5a:7a:
c5:92:b5:5e:77:66:e4:1a:d9:b1:87:7f:d7:13:9c:4f:e7:46:
c6:f3:4d:bf:15:4b:92:9c:1b:fe:38:b1:6b:97:1d:40:3d:48:
43:ac:69:49:d7:54:0c:60:cd:c3:5d:a8:98:ab:42:d3:04:3a:
9c:4d:c7:97:0b:5a:e7:bb:15:16:58:19:17:19:db:21:e5:d6:
0c:16:b5:00:11:3b:5e:20:c2:e2:0f:25:86:d2:37:c3:9a:72:
9e:f6:04:a7:52:1b:0a:b3:b3:69:f8:c8:60:dd:ba:a1:8a:af:
71:7b:1a:93:96:bc:a8:ef:67:31:83:30:71:f0:f0:32:58:a6:
e9:5a:4a:ee:f2:8f:67:71:cf:78:7f:10:ea:04:11:37:47:a1:
b5:c1:c4:39:99:ef:0c:2e:b2:68:e4:cc:75:31:94:16:dc:aa:
0f:17:5a:7d:f4:25:8c:0f:52:d9:16:4c:02:d9:a7:54:78:02:
b7:13:cc:94:5c:17:dc:d1:6f:5f:5f:7f:93:fc:80:fa:05:02:
66:19:ea:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJoK5bNesErN3ps1L1p7N7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNGExN2MzNWRjMTdlNDNlNzc0ZjgyMzc1YWZkNTBmMzNj
NTM2YTQwHhcNMjIwODA0MDkyNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmJiMThjYWI2MTU4NmM3Yzc1ZjFjNzQxMDIzZGM3NjcwMWE4ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvz8NZ2w+m68Dpu4q8ubCrX0Yi1T
7rx/TdBm9F7afQMA+6CWP2ladv9LiGrtGlt6hk33gVhY3/jcI4tCFG/KZFKx04CK
/W/NGygUBVFNdS305POkY0bAuEWbWLorBsPGKcxDfLJTq61G8+a4TRVgPk3h1x6h
vTiQyaLUW0UQaUyyvHm4tVyJHhlfVVJFBkNKTrr69wZwofEFHj00fa4OUKfnh7Of
hiIhRdECzEL5yXRwko6o21LMsdbma6T6fl1JXlUunuhgIw8pUN+Ghejc3KvmjTCB
LARS003caFtUpBG2mp6UeMeOvRpYIxZKZ9sgxjs4t2Ej0tDFOe3Dq4Sm5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMa7GMq2FYbHx18cdBAj3HZwGo0oMB8GA1UdIwQY
MBaAFONKF8NdwX5D53T4I3Wv1Q8zxTakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQt
ZTBmMDc4ZTc2NDNkLzEveHJzWXlyWVZoc2ZIWHh4MEVDUGNkbkFhalNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQtZTBmMDc4ZTc2NDNk
LzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHf9MA0G
CSqGSIb3DQEBCwUAA4IBAQCTUhcnr93bPtYKg2A5C/PbiY7s8f/dDdeprh19Zzcs
VsSlOfxgkPxq2n2Lbmu5NvSqZURqWnrFkrVed2bkGtmxh3/XE5xP50bG802/FUuS
nBv+OLFrlx1APUhDrGlJ11QMYM3DXaiYq0LTBDqcTceXC1rnuxUWWBkXGdsh5dYM
FrUAETteIMLiDyWG0jfDmnKe9gSnUhsKs7Np+Mhg3bqhiq9xexqTlryo72cxgzBx
8PAyWKbpWkru8o9ncc94fxDqBBE3R6G1wcQ5me8MLrJo5Mx1MZQW3KoPF1p99CWM
D1LZFkwC2adUeAK3E8yUXBfc0W9fX3+T/ID6BQJmGepN
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:21 2023 by rpki-client on console-ams.rpki-client.org