Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ChiQZQ5m40ljbA7aQ0it6yxVaSs.roa
File: ChiQZQ5m40ljbA7aQ0it6yxVaSs.roa (raw, json)
Hash identifier: VGEdlkwrbDDnFLl+D8O5GcC7ftl4rIkqxEpEk6ybG5k=
Subject key identifier: 0A:18:90:65:0E:66:E3:49:63:6C:0E:DA:43:48:AD:EB:2C:55:69:2B
Certificate issuer: /CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Certificate serial: 0C62A8C6
Authority key identifier: 7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ChiQZQ5m40ljbA7aQ0it6yxVaSs.roa
Signing time: Sat 01 Jan 2022 08:57:59 +0000
ROA not before: Sat 01 Jan 2022 08:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50628
IP address blocks: 185.173.68.0/22 maxlen: 22
178.208.0.0/19 maxlen: 19
185.194.156.0/22 maxlen: 22
2a04:3d80::/29 maxlen: 29
2a0b:3b00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207792326 (0xc62a8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Validity
Not Before: Jan 1 08:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a1890650e66e349636c0eda4348adeb2c55692b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:9d:f1:42:ef:27:a2:cb:55:1f:cf:03:fc:
e0:f8:3b:95:79:22:cb:5d:ef:6e:4e:31:1b:cf:0c:
fe:9f:79:40:54:6d:62:44:49:16:74:e3:33:1c:ff:
a2:11:1d:e2:31:05:a1:e7:91:b0:c5:97:7d:29:f1:
01:07:80:01:ac:11:e2:7c:dc:c0:7e:97:71:6c:bf:
f8:ec:6e:d7:1f:75:0a:c9:94:a6:73:b3:10:ed:ea:
8d:c9:83:4d:51:ce:41:c6:43:d1:34:8f:6e:be:56:
9c:80:74:97:f6:44:93:a2:96:17:f3:8b:c3:95:32:
62:a2:e1:39:cd:5f:78:da:bd:ed:e8:72:fc:16:ac:
36:07:b9:ad:b1:fb:49:68:b5:17:b1:f7:b9:8b:be:
87:6d:54:df:df:ac:f7:23:5e:ca:06:c3:84:17:3e:
73:b2:62:a2:c6:04:33:b7:ea:d7:6b:bb:a0:4a:90:
c6:3d:19:bb:ed:6d:87:06:df:0e:f2:3a:fe:5e:d4:
c8:82:7c:82:a4:13:e8:d7:75:5d:ff:dd:d2:23:7a:
4b:90:9c:39:8d:7b:55:e7:92:b8:e2:34:91:cb:0f:
1f:a0:cf:3a:3b:ec:95:d5:20:7e:72:e3:23:57:2a:
41:d9:bc:70:91:e1:ce:ec:e2:17:6c:53:07:b8:2f:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:18:90:65:0E:66:E3:49:63:6C:0E:DA:43:48:AD:EB:2C:55:69:2B
X509v3 Authority Key Identifier:
keyid:7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ChiQZQ5m40ljbA7aQ0it6yxVaSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.0.0/19
185.173.68.0/22
185.194.156.0/22
IPv6:
2a04:3d80::/29
2a0b:3b00::/29
Signature Algorithm: sha256WithRSAEncryption
2d:05:5c:b9:4b:2e:92:bc:74:41:5c:c5:c4:4e:23:56:cb:bd:
e4:2e:b3:6b:18:34:dc:1c:ee:ed:5f:ba:05:cf:87:63:be:51:
c7:9c:c0:24:db:5a:8b:60:56:05:00:b5:b9:8a:dc:bd:25:78:
ad:5a:61:7f:7e:25:01:c1:58:c6:28:d0:7c:c6:8b:ec:7f:7a:
82:30:0c:cd:99:d3:ff:f6:72:cb:90:2e:55:8d:12:13:6c:fd:
9e:f9:b4:0b:00:23:e9:3b:74:b9:5e:8f:6e:32:a8:09:a9:17:
ae:0b:a2:57:a3:5c:b9:84:9a:90:44:3e:2a:7d:bd:85:37:7d:
b0:f3:7c:be:ff:68:33:0f:b6:b6:76:4f:0b:c3:e2:cb:c4:3d:
a1:8a:f7:02:f4:6e:36:5c:dd:bb:e7:62:df:bc:a0:c7:82:c8:
8e:39:dc:5a:fb:26:61:f2:c0:4e:6d:5e:f7:28:57:71:34:97:
52:ee:29:d5:d6:ca:ce:06:05:66:1e:79:2b:ff:88:7c:e9:b1:
b8:19:de:9f:36:8c:54:c1:d7:b3:e6:33:b8:78:ce:7e:19:4e:
68:05:f7:24:96:5c:bc:91:7e:f3:60:a6:c1:1c:0b:df:ca:fd:
e7:5d:51:5e:1b:d0:de:4f:da:af:88:a8:27:4c:1b:61:af:3e:
9f:66:11:fc
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIEDGKoxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZGYwYzIzMWI4MDJlYzU3NWFkYWY2NTE4YzFjMGFlMTNmM2YxYmMxMB4XDTIyMDEw
MTA4NTc1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGExODkwNjUwZTY2
ZTM0OTYzNmMwZWRhNDM0OGFkZWIyYzU1NjkyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWwnfFC7yeiy1UfzwP84Pg7lXkiy13vbk4xG88M/p95QFRt
YkRJFnTjMxz/ohEd4jEFoeeRsMWXfSnxAQeAAawR4nzcwH6XcWy/+Oxu1x91CsmU
pnOzEO3qjcmDTVHOQcZD0TSPbr5WnIB0l/ZEk6KWF/OLw5UyYqLhOc1feNq97ehy
/BasNge5rbH7SWi1F7H3uYu+h21U39+s9yNeygbDhBc+c7JiosYEM7fq12u7oEqQ
xj0Zu+1thwbfDvI6/l7UyIJ8gqQT6Nd1Xf/d0iN6S5CcOY17VeeSuOI0kcsPH6DP
OjvsldUgfnLjI1cqQdm8cJHhzuziF2xTB7gvWgkCAwEAAaOCAiswggInMB0GA1Ud
DgQWBBQKGJBlDmbjSWNsDtpDSK3rLFVpKzAfBgNVHSMEGDAWgBR98MIxuALsV1ra
9lGMHArhPz8bwTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZmRENNYmdDN0ZkYTJ2WlJqQndLNFQ4X0c4RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvZWMzMDkyLTExNDktNDhkOS1iMmZmLWQyN2FlY2MyYjc0NC8x
L0NoaVFaUTVtNDBsamJBN2FRMGl0Nnl4VmFTcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
ZWMzMDkyLTExNDktNDhkOS1iMmZmLWQyN2FlY2MyYjc0NC8xL2ZmRENNYmdDN0Zk
YTJ2WlJqQndLNFQ4X0c4RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBB
BggrBgEFBQcBBwEB/wQyMDAwGAQCAAEwEgMEBbLQAAMEArmtRAMEArnCnDAUBAIA
AjAOAwUDKgQ9gAMFAyoLOwAwDQYJKoZIhvcNAQELBQADggEBAC0FXLlLLpK8dEFc
xcROI1bLveQus2sYNNwc7u1fugXPh2O+UcecwCTbWotgVgUAtbmK3L0leK1aYX9+
JQHBWMYo0HzGi+x/eoIwDM2Z0//2csuQLlWNEhNs/Z75tAsAI+k7dLlej24yqAmp
F64LolejXLmEmpBEPip9vYU3fbDzfL7/aDMPtrZ2TwvD4svEPaGK9wL0bjZc3bvn
Yt+8oMeCyI453Fr7JmHywE5tXvcoV3E0l1LuKdXWys4GBWYeeSv/iHzpsbgZ3p82
jFTB17PmM7h4zn4ZTmgF9ySWXLyRfvNgpsEcC9/K/eddUV4b0N5P2q+IqCdMG2Gv
Pp9mEfw=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:40 2023 by rpki-client on console.sobornost.net