Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/9FgKoJVE1lMo_vJhvYfwUfCkhdA.roa
File: 9FgKoJVE1lMo_vJhvYfwUfCkhdA.roa (raw, json)
Hash identifier: uOUwYJzvf+8XuxKw2ZOTm5GmJggEgDWf+Tc1vjg8htE=
Subject key identifier: F4:58:0A:A0:95:44:D6:53:28:FE:F2:61:BD:87:F0:51:F0:A4:85:D0
Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial: 0182A5C87A2D154279B58F953E9929BE19BB
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/9FgKoJVE1lMo_vJhvYfwUfCkhdA.roa
Signing time: Tue 16 Aug 2022 08:32:35 +0000
ROA not before: Tue 16 Aug 2022 08:32:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207945
IP address blocks: 78.156.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:c8:7a:2d:15:42:79:b5:8f:95:3e:99:29:be:19:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Validity
Not Before: Aug 16 08:32:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4580aa09544d65328fef261bd87f051f0a485d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:91:e9:dd:49:47:1f:f7:6b:7e:02:72:f6:55:
ac:5a:52:93:6e:70:d3:50:d3:0e:8a:71:ce:31:ba:
3b:4f:3a:45:f2:d4:c6:24:f5:4d:33:db:1b:43:89:
50:75:cb:77:63:01:44:0f:cf:da:8c:f7:ed:74:b2:
db:2e:6c:d8:e7:92:85:df:3e:3a:dd:16:61:9b:5e:
00:f1:5d:10:e2:00:ba:23:99:07:37:fc:65:1d:d3:
6b:0e:e5:8e:93:81:88:2b:71:15:f4:43:f3:63:2d:
f5:f8:09:04:ae:e1:c4:5e:58:2b:f6:40:01:03:11:
29:a8:2d:f8:14:56:00:7c:ca:13:0b:23:c5:bd:59:
79:75:7d:a7:35:50:be:bc:05:a6:d5:61:33:1a:3c:
1a:9c:a0:e4:6e:e9:f3:0d:a6:0d:8c:69:46:9f:1b:
a2:65:e2:05:cc:85:02:d3:69:f1:a0:6f:7d:c3:a0:
64:ff:bf:5c:33:f2:7d:30:e3:72:16:8e:a7:23:84:
8d:50:de:9c:a0:5c:2e:7a:c6:6f:a1:0d:bf:9f:3b:
a3:10:dd:d2:9e:04:d9:20:41:fb:b9:ae:68:13:0f:
f9:36:9f:df:14:c9:64:53:df:80:54:7e:90:3c:57:
9f:f5:3d:90:24:10:4d:1c:27:de:f8:6d:a9:e1:b8:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:58:0A:A0:95:44:D6:53:28:FE:F2:61:BD:87:F0:51:F0:A4:85:D0
X509v3 Authority Key Identifier:
keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/9FgKoJVE1lMo_vJhvYfwUfCkhdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.156.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:42:b5:f3:a2:90:ff:e4:1e:7b:2e:c8:05:24:f7:55:84:91:
68:f4:c6:7f:96:c1:33:73:d0:fc:ff:71:4f:11:84:c0:a1:68:
5a:2f:f7:33:80:1f:ec:34:df:e8:19:11:7c:0e:00:4a:b5:0c:
59:b9:a7:4f:6c:73:14:f3:75:9f:92:2b:02:e4:12:cb:cc:88:
97:d6:60:0c:04:fa:d1:99:8c:f8:96:58:f3:09:5b:65:b4:0d:
3b:b6:94:a3:87:57:56:c5:4b:67:f9:75:85:2c:80:60:45:df:
4f:9f:31:47:a2:ff:99:3f:96:f2:49:e7:65:22:9c:d6:8b:8d:
b7:46:1c:61:a2:45:ad:d1:e7:4a:4b:94:14:86:be:90:a1:39:
9e:0b:09:7e:47:99:e7:f6:af:db:fc:2b:cc:60:7f:97:be:1d:
d9:79:b5:13:78:3b:16:9d:10:23:63:02:d1:09:f4:0a:78:c0:
1c:8f:da:e6:cc:78:36:6c:e8:23:f4:e4:16:31:7c:b0:94:cb:
37:c9:a3:5b:5b:34:ea:92:f5:00:27:41:ba:0b:b6:4a:ed:cd:
1e:9e:60:af:9c:12:fe:bf:02:98:96:0a:63:18:12:ec:2d:35:
16:f2:86:d9:cc:d0:06:20:db:ec:fe:3a:0f:2a:30:f3:ba:19:
b5:31:64:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKlyHotFUJ5tY+VPpkpvhm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNTBjYTFiYWY5ZjlmNmZlMTNkODllMjY2NDQ3MDQ5M2Zl
NjVlNjUwHhcNMjIwODE2MDgzMjM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDU4MGFhMDk1NDRkNjUzMjhmZWYyNjFiZDg3ZjA1MWYwYTQ4NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Hp3UlHH/drfgJy9lWsWlKTbnDT
UNMOinHOMbo7TzpF8tTGJPVNM9sbQ4lQdct3YwFED8/ajPftdLLbLmzY55KF3z46
3RZhm14A8V0Q4gC6I5kHN/xlHdNrDuWOk4GIK3EV9EPzYy31+AkEruHEXlgr9kAB
AxEpqC34FFYAfMoTCyPFvVl5dX2nNVC+vAWm1WEzGjwanKDkbunzDaYNjGlGnxui
ZeIFzIUC02nxoG99w6Bk/79cM/J9MONyFo6nI4SNUN6coFwuesZvoQ2/nzujEN3S
ngTZIEH7ua5oEw/5Np/fFMlkU9+AVH6QPFef9T2QJBBNHCfe+G2p4bgwjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPRYCqCVRNZTKP7yYb2H8FHwpIXQMB8GA1UdIwQY
MBaAFGFQyhuvn59v4T2J4mZEcEk/5l5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUt
OTQ3ZWFkOWYxNGVkLzEvOUZnS29KVkUxbE1vX3ZKaHZZZndVZkNraGRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUtOTQ3ZWFkOWYxNGVk
LzEvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATpyMMA0G
CSqGSIb3DQEBCwUAA4IBAQBdQrXzopD/5B57LsgFJPdVhJFo9MZ/lsEzc9D8/3FP
EYTAoWhaL/czgB/sNN/oGRF8DgBKtQxZuadPbHMU83WfkisC5BLLzIiX1mAMBPrR
mYz4lljzCVtltA07tpSjh1dWxUtn+XWFLIBgRd9PnzFHov+ZP5bySedlIpzWi423
RhxhokWt0edKS5QUhr6QoTmeCwl+R5nn9q/b/CvMYH+Xvh3ZebUTeDsWnRAjYwLR
CfQKeMAcj9rmzHg2bOgj9OQWMXywlMs3yaNbWzTqkvUAJ0G6C7ZK7c0enmCvnBL+
vwKYlgpjGBLsLTUW8obZzNAGINvs/joPKjDzuhm1MWT+
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net