Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/9kJ75oEJYtMU-Pkm9ttx7KnLKo4.roa
File: 9kJ75oEJYtMU-Pkm9ttx7KnLKo4.roa (raw, json)
Hash identifier: Mkg/O5oL0RS35zoKiktL8lHRapuaZJlepn12Zbd5ocQ=
Subject key identifier: F6:42:7B:E6:81:09:62:D3:14:F8:F9:26:F6:DB:71:EC:A9:CB:2A:8E
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 08B40092
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/9kJ75oEJYtMU-Pkm9ttx7KnLKo4.roa
Signing time: Sat 01 Jan 2022 16:02:06 +0000
ROA not before: Sat 01 Jan 2022 16:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208507
IP address blocks: 178.218.240.0/23 maxlen: 23
178.218.240.0/24 maxlen: 24
178.218.242.0/24 maxlen: 24
178.218.242.0/23 maxlen: 23
178.218.243.0/24 maxlen: 24
178.218.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146014354 (0x8b40092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Jan 1 16:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6427be6810962d314f8f926f6db71eca9cb2a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:47:95:84:c6:ec:45:18:aa:0f:b7:f4:ee:
95:df:c1:19:26:45:df:c0:ae:bd:5f:4f:2e:d6:02:
ac:54:6a:50:84:0b:40:89:46:3d:09:a2:34:05:6c:
af:a5:79:fa:30:2f:eb:57:e6:50:74:d8:96:3e:4c:
30:4c:41:85:47:79:f1:e1:39:3c:82:3b:02:84:36:
8e:9b:4a:02:3b:c9:03:50:9f:29:15:8e:03:3a:0b:
73:64:8e:9a:43:8c:61:f0:e0:80:e7:4b:bb:51:b5:
13:d2:76:0a:1f:5a:11:4b:9c:c0:3a:a4:24:7b:f9:
8d:f9:46:c2:0a:a3:33:c1:4a:2f:e3:65:4d:7b:9d:
32:75:a0:3b:36:8b:fc:a2:40:7f:fa:97:5a:ea:3c:
13:70:4c:cb:31:c5:e7:5c:59:3e:11:c7:28:b9:d0:
0e:02:cb:3e:3d:4a:87:fc:cb:d9:e8:2c:66:d5:68:
cd:04:55:3e:59:7e:5b:71:e8:85:7b:e5:0c:5a:79:
c1:7e:12:33:26:b6:d0:d8:d3:38:ad:92:3b:af:c4:
49:a0:a9:e1:a6:65:6f:cf:4b:24:a9:34:7a:c4:2c:
c8:61:23:fa:7f:12:ef:1a:53:96:68:5c:2c:22:30:
90:96:9f:1f:9e:be:77:cb:84:72:cd:40:d5:22:ca:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:7B:E6:81:09:62:D3:14:F8:F9:26:F6:DB:71:EC:A9:CB:2A:8E
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/9kJ75oEJYtMU-Pkm9ttx7KnLKo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.240.0/22
Signature Algorithm: sha256WithRSAEncryption
18:99:a6:bf:0f:28:c1:b0:07:60:17:ff:2d:e4:b4:c6:71:07:
c8:06:21:8f:8a:7c:6e:e9:9b:6a:dd:44:cc:f2:c4:f2:1e:70:
27:7b:8b:a9:46:e0:d6:a2:f0:9f:de:32:c9:20:16:4d:06:f7:
0f:7d:d9:9e:58:23:84:dc:f5:63:28:26:b9:8d:22:ce:91:ca:
f1:86:9a:ab:ec:8b:17:2a:a8:3d:01:6b:dd:d6:7e:66:7b:d9:
4d:34:3c:10:b2:33:0d:af:7f:2b:61:47:7e:84:0c:80:48:f1:
9b:51:cd:6c:bd:ba:6e:80:88:11:ae:45:fd:32:7f:6c:05:7b:
95:36:b2:24:99:ff:c2:3c:95:c2:76:91:3f:20:ce:a0:09:ba:
13:5c:06:6a:be:74:ce:32:33:3e:ea:b6:60:54:7d:b7:2f:e7:
6d:6e:0b:4b:51:72:22:5b:e7:52:44:05:08:ec:f5:67:dd:86:
da:9f:b8:57:d8:29:df:55:c8:9f:a3:dd:7e:1f:39:bc:a7:a7:
14:3d:68:46:12:67:2e:44:19:62:76:bb:a5:43:c1:19:aa:9f:
63:53:b2:e7:12:8b:4c:81:3c:6f:21:91:ff:0c:16:e7:a0:30:
eb:5b:8e:10:be:22:fa:ad:c4:2b:10:42:2e:9a:56:7e:65:ee:
61:3a:25:7d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECLQAkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDIwMDBjNGY0ZWM0YTAzY2Q0ZDM2NTdlMDFiNzAwMzRlYzIzYjk3MB4XDTIyMDEw
MTE2MDIwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjY0MjdiZTY4MTA5
NjJkMzE0ZjhmOTI2ZjZkYjcxZWNhOWNiMmE4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMp8R5WExuxFGKoPt/Tuld/BGSZF38CuvV9PLtYCrFRqUIQL
QIlGPQmiNAVsr6V5+jAv61fmUHTYlj5MMExBhUd58eE5PII7AoQ2jptKAjvJA1Cf
KRWOAzoLc2SOmkOMYfDggOdLu1G1E9J2Ch9aEUucwDqkJHv5jflGwgqjM8FKL+Nl
TXudMnWgOzaL/KJAf/qXWuo8E3BMyzHF51xZPhHHKLnQDgLLPj1Kh/zL2egsZtVo
zQRVPll+W3HohXvlDFp5wX4SMya20NjTOK2SO6/ESaCp4aZlb89LJKk0esQsyGEj
+n8S7xpTlmhcLCIwkJafH56+d8uEcs1A1SLKgNECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT2QnvmgQli0xT4+Sb223HsqcsqjjAfBgNVHSMEGDAWgBSkIADE9OxKA81N
NlfgG3ADTsI7lzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BDQUF4UFRzU2dQTlRUWlg0QnR3QTA3Q081Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvMTYzZDc3LTRmZWEtNDEzMS1iZWNiLTBmMjJkODk2ODlhMC8x
LzlrSjc1b0VKWXRNVS1Qa205dHR4N0tuTEtvNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
MTYzZDc3LTRmZWEtNDEzMS1iZWNiLTBmMjJkODk2ODlhMC8xL3BDQUF4UFRzU2dQ
TlRUWlg0QnR3QTA3Q081Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArLa8DANBgkqhkiG9w0BAQsFAAOC
AQEAGJmmvw8owbAHYBf/LeS0xnEHyAYhj4p8bumbat1EzPLE8h5wJ3uLqUbg1qLw
n94yySAWTQb3D33ZnlgjhNz1YygmuY0izpHK8Yaaq+yLFyqoPQFr3dZ+ZnvZTTQ8
ELIzDa9/K2FHfoQMgEjxm1HNbL26boCIEa5F/TJ/bAV7lTayJJn/wjyVwnaRPyDO
oAm6E1wGar50zjIzPuq2YFR9ty/nbW4LS1FyIlvnUkQFCOz1Z92G2p+4V9gp31XI
n6Pdfh85vKenFD1oRhJnLkQZYna7pUPBGaqfY1Oy5xKLTIE8byGR/wwW56Aw61uO
EL4i+q3EKxBCLppWfmXuYTolfQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org