Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/tEPpsNoarwjt3GqP6GmQ81jID0o.roa
File: tEPpsNoarwjt3GqP6GmQ81jID0o.roa (raw, json)
Hash identifier: /2T0j95HH+Wj1Vh0iCu/WIabT9Eaqi+0CtnepG++Ciw=
Subject key identifier: B4:43:E9:B0:DA:1A:AF:08:ED:DC:6A:8F:E8:69:90:F3:58:C8:0F:4A
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 014F7516
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/tEPpsNoarwjt3GqP6GmQ81jID0o.roa
Signing time: Wed 09 Mar 2022 13:52:41 +0000
ROA not before: Wed 09 Mar 2022 13:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 109.107.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21984534 (0x14f7516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Mar 9 13:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b443e9b0da1aaf08eddc6a8fe86990f358c80f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:57:55:7f:6f:13:09:a5:fc:9b:d1:3d:bc:
50:14:ed:e4:7c:64:30:03:22:4d:6e:6b:a4:2c:ad:
fe:e6:7c:31:63:af:a3:cf:ce:eb:de:c1:d2:52:95:
34:4b:64:6c:e3:a8:cc:d9:85:8e:fc:4a:56:79:39:
7b:db:cd:72:04:ec:e8:33:77:53:1e:40:e2:ae:f9:
3a:39:cc:9b:9f:99:40:1e:9e:4e:2c:42:70:ac:7d:
e3:a0:6e:9c:74:e9:cf:85:00:7f:c8:be:ba:69:95:
20:56:b9:41:fa:39:1c:da:ee:4b:86:80:73:69:7a:
75:21:fe:1d:41:e8:6d:68:fb:c7:07:d9:bf:41:6c:
a5:2e:66:54:5b:a5:db:f7:23:df:44:f2:ca:f0:83:
97:35:be:e0:45:48:1a:54:83:73:36:85:8d:56:e1:
d5:e4:5e:c0:50:64:aa:b4:90:52:d4:6a:6f:50:50:
f4:ed:c4:db:f5:50:4e:04:c1:9a:d8:ef:32:c1:d3:
5b:f7:44:c2:f0:24:2e:f5:e3:5d:37:47:2d:a7:ab:
0e:6f:fa:b4:20:21:17:3a:f9:4d:03:09:27:29:d5:
34:16:13:73:b0:63:51:aa:ee:6c:90:f6:50:9c:81:
c6:8f:6b:1f:67:1b:ca:54:0c:f9:62:83:df:cc:8a:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:43:E9:B0:DA:1A:AF:08:ED:DC:6A:8F:E8:69:90:F3:58:C8:0F:4A
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/tEPpsNoarwjt3GqP6GmQ81jID0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.132.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5c:95:fb:6f:59:d5:c3:5a:dc:bf:91:6f:58:85:eb:3d:1c:
9e:aa:08:7d:55:53:b8:e6:a9:b0:e4:22:4a:f9:4b:c6:d6:7c:
02:b9:22:8c:de:bb:79:d0:05:6f:28:f9:d5:a9:85:ef:69:1a:
7b:97:13:ef:19:9c:d9:ed:48:5d:51:05:0f:58:09:86:b4:4c:
bd:4b:75:0b:22:b5:4e:24:7b:03:18:c1:ec:db:12:63:b5:fe:
c8:53:7f:0f:8d:77:ed:15:8d:99:c3:8c:1d:f7:a2:46:37:9f:
c9:7e:34:24:86:e1:33:0a:8e:ea:19:7d:32:03:c1:ff:3e:e8:
bb:94:88:86:b2:bb:3f:17:c3:b5:70:42:6f:99:1e:7d:02:8b:
ab:3f:d4:9b:5b:40:2a:01:ad:c6:68:7d:a2:a9:cc:c7:5b:76:
18:2a:c7:44:ec:66:31:97:fd:7f:66:c9:e4:e6:23:a8:50:fa:
7d:ce:41:93:a0:7c:a5:54:4f:b0:3e:e8:c0:0f:a2:0f:6a:67:
79:96:88:ea:97:3a:0f:f8:cb:c8:ae:0e:1b:e7:26:60:03:6a:
1e:e3:2e:06:5f:2e:45:70:45:e8:c4:bd:2d:ec:35:13:f2:0d:
a0:8b:9c:6f:61:55:f2:e8:cb:84:40:cb:4f:3e:01:29:6f:72:
8e:5a:f3:3c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAU91FjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MzYzYmI2NTg5NWYzYTU0YTRiMzI0YTEwYzc5YWM5OGVmZTJhMWNhMB4XDTIyMDMw
OTEzNTI0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjQ0M2U5YjBkYTFh
YWYwOGVkZGM2YThmZTg2OTkwZjM1OGM4MGY0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKk5V1V/bxMJpfyb0T28UBTt5HxkMAMiTW5rpCyt/uZ8MWOv
o8/O697B0lKVNEtkbOOozNmFjvxKVnk5e9vNcgTs6DN3Ux5A4q75OjnMm5+ZQB6e
TixCcKx946BunHTpz4UAf8i+ummVIFa5Qfo5HNruS4aAc2l6dSH+HUHobWj7xwfZ
v0FspS5mVFul2/cj30TyyvCDlzW+4EVIGlSDczaFjVbh1eRewFBkqrSQUtRqb1BQ
9O3E2/VQTgTBmtjvMsHTW/dEwvAkLvXjXTdHLaerDm/6tCAhFzr5TQMJJynVNBYT
c7BjUarubJD2UJyBxo9rH2cbylQM+WKD38yKAVMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS0Q+mw2hqvCO3cao/oaZDzWMgPSjAfBgNVHSMEGDAWgBRjY7tliV86VKSz
JKEMeayY7+KhyjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kyTzdaWWxmT2xTa3N5U2hESG1zbU9faW9jby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZGI5YmYxLWUwMTktNDVhNC04NjYzLWE2Y2E0NTRkYjJkNy8x
L3RFUHBzTm9hcndqdDNHcVA2R21RODFqSUQwby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZGI5YmYxLWUwMTktNDVhNC04NjYzLWE2Y2E0NTRkYjJkNy8xL1kyTzdaWWxmT2xT
a3N5U2hESG1zbU9faW9jby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1rhDANBgkqhkiG9w0BAQsFAAOC
AQEAg1yV+29Z1cNa3L+Rb1iF6z0cnqoIfVVTuOapsOQiSvlLxtZ8ArkijN67edAF
byj51amF72kae5cT7xmc2e1IXVEFD1gJhrRMvUt1CyK1TiR7AxjB7NsSY7X+yFN/
D4137RWNmcOMHfeiRjefyX40JIbhMwqO6hl9MgPB/z7ou5SIhrK7PxfDtXBCb5ke
fQKLqz/Um1tAKgGtxmh9oqnMx1t2GCrHROxmMZf9f2bJ5OYjqFD6fc5Bk6B8pVRP
sD7owA+iD2pneZaI6pc6D/jLyK4OG+cmYANqHuMuBl8uRXBF6MS9Lew1E/INoIuc
b2FV8ujLhEDLTz4BKW9yjlrzPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:45 2024 by rpki-client on console-fra.rpki-client.org