Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/sSJxsWBejfqI5F8TFwAajtGXjZI.roa
File: sSJxsWBejfqI5F8TFwAajtGXjZI.roa (raw, json)
Hash identifier: gYQdI4J9JSQ6olCbNShvH+cVtKdt0yoj8DcfB7gh9eg=
Subject key identifier: B1:22:71:B1:60:5E:8D:FA:88:E4:5F:13:17:00:1A:8E:D1:97:8D:92
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018291559D52E6B0A44FA9ED30FF7ED3FAA6
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/sSJxsWBejfqI5F8TFwAajtGXjZI.roa
Signing time: Fri 12 Aug 2022 09:14:43 +0000
ROA not before: Fri 12 Aug 2022 09:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203917
IP address blocks: 212.70.156.0/24 maxlen: 24
78.108.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:55:9d:52:e6:b0:a4:4f:a9:ed:30:ff:7e:d3:fa:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Aug 12 09:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b12271b1605e8dfa88e45f1317001a8ed1978d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:9a:1f:a6:97:cc:bf:55:f8:46:45:fe:1a:
ca:f0:eb:1a:80:8a:c8:cc:89:05:0d:be:9f:4a:ac:
2c:3f:aa:c2:a3:2a:cc:6e:ee:6d:17:76:ed:48:f5:
c2:05:da:0c:b4:ac:a5:fd:60:34:82:d2:92:0e:f6:
b5:f5:b9:e6:54:b4:fd:58:3f:90:34:89:e0:49:05:
e4:ea:c5:c7:2d:a1:aa:69:b9:8e:19:84:3c:26:75:
00:c9:35:28:fd:d1:68:03:16:57:40:ba:69:79:4f:
ab:78:ad:9f:07:4c:42:32:72:c6:c5:d3:e5:7d:8a:
a1:48:7b:41:3c:7e:f6:ce:6e:17:fe:6b:81:d8:cb:
0c:ee:14:17:df:5b:0b:a6:98:50:4b:9f:99:4b:be:
17:9d:5c:c2:14:b0:35:28:d9:b9:00:2c:ca:52:28:
a6:02:1f:e9:97:af:cf:d2:ad:9f:55:8f:0f:43:31:
2d:9e:56:12:1b:01:de:f9:d2:0c:fb:ff:cd:1b:98:
54:a9:e4:d9:cf:96:cf:27:4e:6f:5a:91:63:f4:37:
d2:2a:9d:12:37:ef:e1:62:85:8e:0d:17:4a:e8:62:
8d:1b:ff:ef:7d:35:dc:4c:0c:dc:71:a0:ac:4b:1c:
ca:6e:1c:d2:d5:50:9d:46:68:91:7e:f2:88:33:82:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:22:71:B1:60:5E:8D:FA:88:E4:5F:13:17:00:1A:8E:D1:97:8D:92
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/sSJxsWBejfqI5F8TFwAajtGXjZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.251.0/24
212.70.156.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b7:8c:55:87:57:87:53:7a:2e:4c:4b:c7:f8:36:6a:45:86:
14:9c:bb:b1:d1:19:99:c4:d1:df:86:ec:15:7a:31:81:63:04:
f2:96:56:e9:19:0d:d8:84:77:71:24:07:20:12:cf:24:73:21:
f8:a5:8d:a6:e9:4e:27:00:03:b5:dc:11:97:e9:82:d5:5c:d8:
1d:b8:4f:1d:f5:ad:b1:a8:7e:e2:59:3b:63:5d:36:21:71:1a:
9f:ba:17:5f:ca:1c:62:97:b5:c5:fa:ba:42:bd:29:06:07:5e:
6c:bd:c0:92:a4:43:22:7b:81:62:f9:59:07:3b:82:86:d9:7d:
25:f8:55:c9:4b:06:d9:c8:7a:ec:c2:7e:e1:ee:6c:c7:5d:b8:
d7:de:fe:66:d7:a0:74:4a:a6:8e:da:26:68:a0:26:af:5f:4f:
52:fa:14:99:64:8a:9d:bc:8c:50:3e:0e:5a:e0:9b:c4:95:3e:
30:b5:5f:e1:c6:6d:ae:d5:25:e6:ef:ca:d8:86:86:12:ff:8b:
c3:3a:20:6b:02:da:af:6c:ba:c5:71:2f:7c:e0:e8:f4:0f:38:
7a:88:5b:3d:f1:1c:a1:c3:d5:86:d5:70:44:25:93:f7:fe:4e:
b0:62:8a:1e:dd:16:86:16:77:d3:2f:51:f2:f3:b0:f1:a0:48:
b9:2c:03:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYKRVZ1S5rCkT6ntMP9+0/qmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjIwODEyMDkxNDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTIyNzFiMTYwNWU4ZGZhODhlNDVmMTMxNzAwMWE4ZWQxOTc4ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1+aH6aXzL9V+EZF/hrK8OsagIrI
zIkFDb6fSqwsP6rCoyrMbu5tF3btSPXCBdoMtKyl/WA0gtKSDva19bnmVLT9WD+Q
NIngSQXk6sXHLaGqabmOGYQ8JnUAyTUo/dFoAxZXQLppeU+reK2fB0xCMnLGxdPl
fYqhSHtBPH72zm4X/muB2MsM7hQX31sLpphQS5+ZS74XnVzCFLA1KNm5ACzKUiim
Ah/pl6/P0q2fVY8PQzEtnlYSGwHe+dIM+//NG5hUqeTZz5bPJ05vWpFj9DfSKp0S
N+/hYoWODRdK6GKNG//vfTXcTAzccaCsSxzKbhzS1VCdRmiRfvKIM4L5DQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLEicbFgXo36iORfExcAGo7Rl42SMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvc1NKeHNXQmVqZnFJNUY4VEZ3QWFqdEdYalpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATmz7AwQA
1EacMA0GCSqGSIb3DQEBCwUAA4IBAQA8t4xVh1eHU3ouTEvH+DZqRYYUnLux0RmZ
xNHfhuwVejGBYwTyllbpGQ3YhHdxJAcgEs8kcyH4pY2m6U4nAAO13BGX6YLVXNgd
uE8d9a2xqH7iWTtjXTYhcRqfuhdfyhxil7XF+rpCvSkGB15svcCSpEMie4Fi+VkH
O4KG2X0l+FXJSwbZyHrswn7h7mzHXbjX3v5m16B0SqaO2iZooCavX09S+hSZZIqd
vIxQPg5a4JvElT4wtV/hxm2u1SXm78rYhoYS/4vDOiBrAtqvbLrFcS984Oj0Dzh6
iFs98Ryhw9WG1XBEJZP3/k6wYooe3RaGFnfTL1Hy87DxoEi5LANi
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org