Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/0SKIImdFzDjEPfz8kRf9lP1ktak.roa
File: 0SKIImdFzDjEPfz8kRf9lP1ktak.roa (raw, json)
Hash identifier: PP1sVwizePyW6Pun2XiD0gGQxB8kVheX6k7lagdn26s=
Subject key identifier: D1:22:88:22:67:45:CC:38:C4:3D:FC:FC:91:17:FD:94:FD:64:B5:A9
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 119D67
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/0SKIImdFzDjEPfz8kRf9lP1ktak.roa
Signing time: Sat 01 Jan 2022 01:59:35 +0000
ROA not before: Sat 01 Jan 2022 01:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 178.251.17.0/24 maxlen: 24
178.251.16.0/24 maxlen: 24
178.251.16.0/22 maxlen: 22
178.251.18.0/24 maxlen: 24
178.251.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154407 (0x119d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jan 1 01:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d12288226745cc38c43dfcfc9117fd94fd64b5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:ba:dc:72:ae:2c:64:62:aa:06:e2:07:be:
ef:ef:5f:c8:ed:3a:f5:18:07:91:74:65:63:42:75:
71:8b:6e:49:8a:43:2a:44:83:87:c9:b3:56:de:66:
71:2b:54:13:e5:f9:38:91:4c:60:56:49:04:7c:00:
77:41:80:77:c1:a9:38:f5:35:75:03:40:1a:36:c0:
e5:2f:fc:c4:ac:a8:54:a9:91:52:ad:dd:cd:bd:3f:
b3:5e:7f:77:3e:73:fe:59:82:c7:b1:e7:a7:29:42:
52:26:8d:cc:7d:67:7f:ff:11:72:6a:62:eb:dd:f7:
42:e3:04:50:9f:5e:70:16:61:0c:30:a3:74:cd:f8:
7f:44:b5:05:c2:34:b6:c0:0f:6e:74:8f:1e:b5:b7:
8a:72:88:f1:49:4e:c1:f9:38:20:80:95:7e:13:0b:
7e:02:37:5e:8c:2d:ee:85:90:40:a7:87:59:b3:c6:
a0:65:4e:3b:9c:27:ce:a7:88:c6:27:7b:8a:ea:a8:
e2:49:d4:77:fc:9f:84:99:7c:35:6a:0c:0e:8a:a1:
36:a5:c4:7c:a1:a8:9c:80:ba:93:42:6e:70:ad:9d:
d2:02:01:40:76:74:10:2e:d3:8d:7f:00:1b:62:bb:
c7:82:90:60:91:bd:5a:19:ec:3a:83:e3:b6:86:45:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:88:22:67:45:CC:38:C4:3D:FC:FC:91:17:FD:94:FD:64:B5:A9
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/0SKIImdFzDjEPfz8kRf9lP1ktak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.16.0/22
Signature Algorithm: sha256WithRSAEncryption
07:6b:7a:d6:55:e9:c0:a2:63:f6:17:33:82:39:0e:20:a8:13:
31:32:41:1b:0c:ec:98:58:74:28:90:59:c8:79:42:30:30:cf:
8a:92:34:7f:a5:e0:69:28:40:0a:44:da:1f:1a:51:d2:5c:11:
09:bb:ce:6f:51:e7:ec:f9:65:b3:5e:70:e1:46:b2:35:67:93:
2a:90:31:8d:d2:22:91:ba:fa:65:68:b6:a9:37:49:f3:4a:64:
ee:f2:67:04:62:8c:37:6f:e6:6f:c7:d7:c9:b7:fc:e1:e1:4c:
e6:c0:44:89:92:22:c8:90:07:1f:cf:ee:78:24:5a:44:2f:af:
6f:d4:67:6c:ed:33:29:e4:d4:67:0c:c8:5d:5d:6d:c2:ad:53:
cc:5a:d5:86:bf:d8:47:55:44:d3:04:9f:9d:52:19:84:65:d8:
79:5e:1f:d4:31:22:8b:e7:6d:a1:7e:ea:30:ff:7a:c5:33:7d:
a2:e6:7c:f3:df:3f:15:8d:ab:33:1e:27:39:9e:ed:41:9c:7c:
f3:f6:90:e2:d7:29:b4:0e:ad:ed:b9:f0:f6:92:af:0b:dc:b6:
7f:c9:58:ff:3f:c0:d4:69:c3:4d:a9:a4:a2:71:e6:7c:47:85:
79:ba:4c:aa:86:3a:dd:0b:b5:e6:6d:7d:9e:0e:d0:39:2f:ff:
37:33:b6:06
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDEZ1nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDky
OTMzZTAxMzY0NGRiOWM5ZWU5YjkxZGY3MmUxMzM4ZGI4ZTIwOTcwHhcNMjIwMTAx
MDE1OTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkMTIyODgyMjY3NDVj
YzM4YzQzZGZjZmM5MTE3ZmQ5NGZkNjRiNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAulm63HKuLGRiqgbiB77v71/I7Tr1GAeRdGVjQnVxi25JikMq
RIOHybNW3mZxK1QT5fk4kUxgVkkEfAB3QYB3wak49TV1A0AaNsDlL/zErKhUqZFS
rd3NvT+zXn93PnP+WYLHseenKUJSJo3MfWd//xFyamLr3fdC4wRQn15wFmEMMKN0
zfh/RLUFwjS2wA9udI8etbeKcojxSU7B+TgggJV+Ewt+AjdejC3uhZBAp4dZs8ag
ZU47nCfOp4jGJ3uK6qjiSdR3/J+EmXw1agwOiqE2pcR8oaicgLqTQm5wrZ3SAgFA
dnQQLtONfwAbYrvHgpBgkb1aGew6g+O2hkU64wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNEiiCJnRcw4xD38/JEX/ZT9ZLWpMB8GA1UdIwQYMBaAFJKTPgE2RNucnum5
HfcuEzjbjiCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
a3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTktNWNjMmVmMDk5YWVlLzEv
MFNLSUltZEZ6RGpFUGZ6OGtSZjlsUDFrdGFrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82
YmVmMjItZjM0NS00NjAzLWExZTktNWNjMmVmMDk5YWVlLzEva3BNLUFUWkUyNXll
NmJrZDl5NFRPTnVPSUpjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsvsQMA0GCSqGSIb3DQEBCwUAA4IB
AQAHa3rWVenAomP2FzOCOQ4gqBMxMkEbDOyYWHQokFnIeUIwMM+KkjR/peBpKEAK
RNofGlHSXBEJu85vUefs+WWzXnDhRrI1Z5MqkDGN0iKRuvplaLapN0nzSmTu8mcE
Yow3b+Zvx9fJt/zh4UzmwESJkiLIkAcfz+54JFpEL69v1Gds7TMp5NRnDMhdXW3C
rVPMWtWGv9hHVUTTBJ+dUhmEZdh5Xh/UMSKL522hfuow/3rFM32i5nzz3z8Vjasz
Hic5nu1BnHzz9pDi1ym0Dq3tufD2kq8L3LZ/yVj/P8DUacNNqaSiceZ8R4V5ukyq
hjrdC7XmbX2eDtA5L/83M7YG
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net