Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/tAU_ZhT684S6xwKTbhp62hIygYk.roa
File: tAU_ZhT684S6xwKTbhp62hIygYk.roa (raw, json)
Hash identifier: ga0LEL2l+QExzXAJnU9nDG4bz5YFUtO7KGXmQuVzxMU=
Subject key identifier: B4:05:3F:66:14:FA:F3:84:BA:C7:02:93:6E:1A:7A:DA:12:32:81:89
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 1C1A5091
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/tAU_ZhT684S6xwKTbhp62hIygYk.roa
Signing time: Sat 01 Jan 2022 14:04:31 +0000
ROA not before: Sat 01 Jan 2022 14:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 185.211.155.0/24 maxlen: 24
185.211.154.0/24 maxlen: 24
178.18.21.0/24 maxlen: 24
178.18.20.0/22 maxlen: 22
178.18.24.0/23 maxlen: 23
178.18.24.0/24 maxlen: 24
178.18.23.0/24 maxlen: 24
178.18.22.0/24 maxlen: 24
178.18.27.0/24 maxlen: 24
178.18.31.0/24 maxlen: 24
178.18.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471486609 (0x1c1a5091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Jan 1 14:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4053f6614faf384bac702936e1a7ada12328189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:eb:d8:71:9f:de:d7:74:6e:6e:b0:4f:61:c7:
07:a1:85:9c:dc:73:91:9f:1b:98:55:82:96:fc:6e:
49:59:0d:e5:a4:37:eb:e9:80:22:89:57:af:cd:c8:
24:88:0a:2e:4e:0c:df:d2:8a:a4:fd:b7:7a:af:c8:
61:a0:e3:ff:33:9f:9b:4c:21:69:95:46:b7:ad:2a:
9f:6f:35:29:94:40:b4:1c:4a:b6:e0:02:f3:c3:90:
f9:be:f5:ee:06:59:7e:ea:ae:53:bf:47:16:88:5e:
01:ad:d7:b9:42:7c:2d:51:e7:89:9e:92:45:89:95:
bb:43:22:3f:7e:a2:e8:a2:87:f3:1c:43:13:57:b7:
f8:de:04:4f:da:f1:47:ab:2a:18:de:61:a0:d1:9b:
14:34:54:fe:5b:41:57:0e:fb:bb:2c:dc:9c:7c:40:
f1:44:fe:42:f0:ef:c7:d8:9a:ac:07:93:e9:2b:87:
eb:2d:ce:07:de:a3:27:79:b0:26:8b:bf:7d:58:45:
e6:2e:27:e3:45:47:51:ac:49:ea:68:79:24:d6:09:
09:3c:0f:72:65:91:dc:51:5b:29:28:6a:68:51:bf:
6c:05:30:c3:3a:d5:1a:50:34:9b:9b:af:c7:de:45:
e5:30:27:ef:f4:07:e2:2f:26:41:1c:45:22:e0:0f:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:05:3F:66:14:FA:F3:84:BA:C7:02:93:6E:1A:7A:DA:12:32:81:89
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/tAU_ZhT684S6xwKTbhp62hIygYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.20.0-178.18.25.255
178.18.27.0/24
178.18.30.0/23
185.211.154.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:fb:61:8d:03:cb:7a:b7:2e:7a:99:94:5e:f1:82:28:82:3d:
b5:fd:dd:b1:72:a3:71:a0:7a:6c:8b:c6:54:b3:74:df:e3:40:
4f:31:de:cc:90:ea:1b:38:30:ee:ec:29:4a:48:ed:50:2b:8b:
44:f5:4d:a5:25:a0:cb:fa:9e:78:42:3b:20:20:bf:7c:cf:97:
d8:f6:fb:da:f9:79:cb:74:5f:fa:e1:04:aa:b1:96:68:1c:66:
1e:24:9b:3e:01:96:b2:76:04:d7:e5:b2:a8:6c:b4:3d:cb:4a:
a3:6f:03:c7:ca:75:da:ed:c4:65:66:cb:57:d4:cd:94:78:78:
df:f2:c4:5b:f3:3d:11:92:ca:11:98:f3:ef:b2:c3:e5:f9:7d:
61:de:c4:2f:20:6e:98:fe:38:fd:dd:cb:aa:59:ae:be:06:a8:
fd:90:85:21:2b:e0:d7:72:dc:70:08:1b:87:28:d2:87:4e:a2:
0a:b6:cb:9a:4c:0e:c2:2c:4e:fd:bc:84:2d:0a:8e:76:33:24:
af:29:43:93:dd:2e:6e:b7:f8:db:08:f8:82:2a:3e:43:0b:00:
f1:a0:b6:e8:b4:21:5d:b8:03:93:7b:23:87:b6:2b:53:e4:54:
e5:08:a1:a1:24:44:c3:6f:e6:1b:9c:8d:31:eb:46:f7:42:e5:
ba:6d:98:84
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEHBpQkTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGY4OGUwNWM4OTg3OTZjODJmZjAxNDc1Njg4MTZlOTMzNDIwZTE4MB4XDTIyMDEw
MTE0MDQzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjQwNTNmNjYxNGZh
ZjM4NGJhYzcwMjkzNmUxYTdhZGExMjMyODE4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOHr2HGf3td0bm6wT2HHB6GFnNxzkZ8bmFWClvxuSVkN5aQ3
6+mAIolXr83IJIgKLk4M39KKpP23eq/IYaDj/zOfm0whaZVGt60qn281KZRAtBxK
tuAC88OQ+b717gZZfuquU79HFoheAa3XuUJ8LVHniZ6SRYmVu0MiP36i6KKH8xxD
E1e3+N4ET9rxR6sqGN5hoNGbFDRU/ltBVw77uyzcnHxA8UT+QvDvx9iarAeT6SuH
6y3OB96jJ3mwJou/fVhF5i4n40VHUaxJ6mh5JNYJCTwPcmWR3FFbKShqaFG/bAUw
wzrVGlA0m5uvx95F5TAn7/QH4i8mQRxFIuAPcA8CAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBS0BT9mFPrzhLrHApNuGnraEjKBiTAfBgNVHSMEGDAWgBRQ+I4FyJh5bIL/
AUdWiBbpM0IOGDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VQaU9CY2lZZVd5Q193RkhWb2dXNlROQ0RoZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2MvZjdjMTFmLTRlOWUtNDM2ZC1hM2RmLWZlZGJkNGM2NmEwZS8x
L3RBVV9aaFQ2ODRTNnh3S1RiaHA2MmhJeWdZay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Mv
ZjdjMTFmLTRlOWUtNDM2ZC1hM2RmLWZlZGJkNGM2NmEwZS8xL1VQaU9CY2lZZVd5
Q193RkhWb2dXNlROQ0RoZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIDAMAwQCshIUAwQBshIYAwQAshIbAwQB
shIeAwQBudOaMA0GCSqGSIb3DQEBCwUAA4IBAQAN+2GNA8t6ty56mZRe8YIogj21
/d2xcqNxoHpsi8ZUs3Tf40BPMd7MkOobODDu7ClKSO1QK4tE9U2lJaDL+p54Qjsg
IL98z5fY9vva+XnLdF/64QSqsZZoHGYeJJs+AZaydgTX5bKobLQ9y0qjbwPHynXa
7cRlZstX1M2UeHjf8sRb8z0RksoRmPPvssPl+X1h3sQvIG6Y/jj93cuqWa6+Bqj9
kIUhK+DXctxwCBuHKNKHTqIKtsuaTA7CLE79vIQtCo52MySvKUOT3S5ut/jbCPiC
Kj5DCwDxoLbotCFduAOTeyOHtitT5FTlCKGhJETDb+YbnI0x60b3QuW6bZiE
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:27 2023 by rpki-client on console.sobornost.net