Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/v21oUT_wDQYN5tSIC56okxOWpa8.roa
File: v21oUT_wDQYN5tSIC56okxOWpa8.roa (raw, json)
Hash identifier: 9nMB9BkYRXRDAsEEAEONFBONKC+kLoO5cgOx+xexCjU=
Subject key identifier: BF:6D:68:51:3F:F0:0D:06:0D:E6:D4:88:0B:9E:A8:93:13:96:A5:AF
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 0183175EAAB84F39D97FE979804BF4746D6F
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/v21oUT_wDQYN5tSIC56okxOWpa8.roa
Signing time: Wed 07 Sep 2022 09:53:43 +0000
ROA not before: Wed 07 Sep 2022 09:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198169
IP address blocks: 78.109.224.0/24 maxlen: 24
78.109.233.0/24 maxlen: 24
78.109.234.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
78.109.235.0/24 maxlen: 24
185.52.102.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:5e:aa:b8:4f:39:d9:7f:e9:79:80:4b:f4:74:6d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Sep 7 09:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf6d68513ff00d060de6d4880b9ea8931396a5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:99:4e:60:f8:ff:27:32:85:6d:49:f7:72:
8e:b1:f9:15:39:be:de:ec:54:b8:00:2f:47:1c:55:
94:7d:b0:67:de:5b:dd:d7:c0:30:0e:68:b4:6e:06:
c2:a9:95:32:3e:20:bc:f3:82:c0:95:17:08:ec:ce:
42:f2:73:b8:35:37:81:77:af:2f:c9:30:f2:03:80:
45:75:62:94:a2:1a:5f:91:b1:69:41:c4:69:b5:45:
6c:f5:e7:a8:c8:fa:3d:2c:4c:5e:b2:de:c8:8a:46:
aa:fd:1e:14:4e:22:bd:38:11:3c:b4:29:3e:03:42:
aa:39:d2:be:dd:22:8e:c4:89:6b:93:94:b2:33:d6:
c6:12:70:e5:50:9e:0c:c0:83:67:74:a1:22:7e:d1:
38:1c:50:47:89:3c:fb:d9:fc:fc:dc:35:f1:80:f3:
73:a4:b6:c4:b1:2e:47:c7:4d:c3:3c:c2:a7:56:27:
e6:91:85:af:a9:98:a3:68:b2:8e:38:93:00:1e:52:
70:c2:db:a8:b3:53:de:c5:af:27:39:2b:ff:3d:c4:
7a:df:10:92:bb:e0:db:dc:71:49:23:57:52:21:3c:
9e:e1:4b:a2:ce:ce:5e:65:00:bf:45:82:0f:36:dc:
b5:63:56:6e:c8:d6:87:e9:ee:b7:83:78:43:52:de:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6D:68:51:3F:F0:0D:06:0D:E6:D4:88:0B:9E:A8:93:13:96:A5:AF
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/v21oUT_wDQYN5tSIC56okxOWpa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.224.0/24
78.109.233.0-78.109.235.255
78.109.238.0/24
185.52.101.0-185.52.102.255
Signature Algorithm: sha256WithRSAEncryption
38:bf:96:a5:09:0d:ea:2c:3d:19:fb:c1:f6:eb:d1:e8:b1:d6:
b6:bc:38:ec:b2:f8:23:a2:9d:e4:bb:ce:2b:c0:5d:aa:0a:62:
53:13:36:ac:aa:9e:a9:ce:9f:a3:3a:20:b1:c7:36:eb:01:46:
30:f7:f8:8b:5f:5e:b5:b6:ed:63:b4:37:56:1c:64:33:c8:60:
e7:01:fc:55:d0:5d:e2:6e:f6:f5:53:54:af:b0:d8:ec:49:a9:
c9:40:39:32:d1:65:e2:47:1d:bd:8e:fa:7c:cb:24:b2:71:37:
c8:f1:44:87:3c:64:b7:e2:3e:e2:25:bb:ab:11:6e:e8:8d:a0:
27:27:f4:25:59:b1:ae:84:2c:77:0f:74:00:5c:46:61:e9:d5:
4f:37:ac:30:99:01:5b:06:77:7f:1d:86:3d:ad:0d:2a:8d:a8:
64:49:92:88:ed:0f:3c:2a:1e:34:a7:99:df:94:b8:14:33:8e:
d9:96:52:73:3f:c7:9c:cf:4a:3a:c8:5e:db:2d:d6:65:4c:31:
d1:5f:e6:2f:52:bf:fb:2c:28:41:4d:e5:28:c2:19:ed:c8:00:
88:80:5c:06:7f:4a:3d:dc:85:15:80:7a:20:47:b8:b1:ec:cc:
48:8b:a6:52:8c:f7:7c:8c:66:83:b7:50:42:a4:79:9d:2a:93:
e0:ab:22:28
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYMXXqq4TznZf+l5gEv0dG1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi
MmY0NjYwHhcNMjIwOTA3MDk1MzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjZkNjg1MTNmZjAwZDA2MGRlNmQ0ODgwYjllYTg5MzEzOTZhNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5SZTmD4/ycyhW1J93KOsfkVOb7e
7FS4AC9HHFWUfbBn3lvd18AwDmi0bgbCqZUyPiC884LAlRcI7M5C8nO4NTeBd68v
yTDyA4BFdWKUohpfkbFpQcRptUVs9eeoyPo9LExest7Iikaq/R4UTiK9OBE8tCk+
A0KqOdK+3SKOxIlrk5SyM9bGEnDlUJ4MwINndKEiftE4HFBHiTz72fz83DXxgPNz
pLbEsS5Hx03DPMKnVifmkYWvqZijaLKOOJMAHlJwwtuos1Pexa8nOSv/PcR63xCS
u+Db3HFJI1dSITye4Uuizs5eZQC/RYIPNty1Y1ZuyNaH6e63g3hDUt5YAwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFL9taFE/8A0GDebUiAueqJMTlqWvMB8GA1UdIwQY
MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1
LWZkMTY3YWQ5MmE5ZC8xL3YyMW9VVF93RFFZTjV0U0lDNTZva3hPV3BhOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1LWZkMTY3YWQ5MmE5
ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8EMjAwMC4EAgABMCgDBABObeAw
DAMEAE5t6QMEAk5t6AMEAE5t7jAMAwQAuTRlAwQAuTRmMA0GCSqGSIb3DQEBCwUA
A4IBAQA4v5alCQ3qLD0Z+8H269Hosda2vDjssvgjop3ku84rwF2qCmJTEzasqp6p
zp+jOiCxxzbrAUYw9/iLX161tu1jtDdWHGQzyGDnAfxV0F3ibvb1U1SvsNjsSanJ
QDky0WXiRx29jvp8yySycTfI8USHPGS34j7iJburEW7ojaAnJ/QlWbGuhCx3D3QA
XEZh6dVPN6wwmQFbBnd/HYY9rQ0qjahkSZKI7Q88Kh40p5nflLgUM47ZllJzP8ec
z0o6yF7bLdZlTDHRX+YvUr/7LChBTeUowhntyACIgFwGf0o93IUVgHogR7ix7MxI
i6ZSjPd8jGaDt1BCpHmdKpPgqyIo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:32 2024 by rpki-client on console-fra.rpki-client.org