Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/VxzrRdSmyAPuUSi6gq8PTPM-r0w.roa
File: VxzrRdSmyAPuUSi6gq8PTPM-r0w.roa (raw, json)
Hash identifier: taYqb9wQtb5al3DzzGUDO8KGOFpgi4UQvkbdj/IYQxg=
Subject key identifier: 57:1C:EB:45:D4:A6:C8:03:EE:51:28:BA:82:AF:0F:4C:F3:3E:AF:4C
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 0907923E
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/VxzrRdSmyAPuUSi6gq8PTPM-r0w.roa
Signing time: Thu 21 Apr 2022 23:18:50 +0000
ROA not before: Thu 21 Apr 2022 23:18:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47721
IP address blocks: 185.124.84.0/24 maxlen: 24
185.124.85.0/24 maxlen: 24
185.124.86.0/24 maxlen: 24
185.124.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151491134 (0x907923e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Apr 21 23:18:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=571ceb45d4a6c803ee5128ba82af0f4cf33eaf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:03:28:89:d4:e4:d5:15:9e:0c:80:87:32:
70:fc:46:96:4b:9c:6f:91:a7:f5:c8:78:dd:19:6a:
87:48:62:54:88:86:24:81:8c:b3:22:75:6d:09:b9:
9a:68:53:44:7a:c8:15:fd:9b:ed:b9:cf:cb:f9:89:
bb:a1:50:4c:a5:d3:a1:f2:18:2b:ec:ba:14:ff:08:
13:c2:07:30:28:32:ef:47:bf:a3:ef:19:95:cd:4e:
3e:59:71:9d:12:9c:4d:d9:c7:43:8f:7b:7a:03:1b:
28:6d:91:6b:53:21:59:cb:3a:5e:71:6a:c3:7c:6a:
e7:a0:82:54:48:a5:21:ed:ec:b1:e4:44:1d:e7:c4:
53:9f:e8:25:d3:81:56:07:e6:29:58:da:f5:0c:55:
3e:eb:eb:a1:8a:a6:96:53:1f:c4:b6:10:e3:1a:6c:
52:4e:78:b0:89:22:f8:d0:99:f8:5b:55:90:d9:28:
dd:36:80:78:96:03:00:68:5d:ca:81:6e:76:6d:5b:
e0:f9:63:cb:9c:88:20:21:15:d1:67:2c:d9:20:50:
b3:7b:63:ec:1f:e8:3f:1c:0e:a8:5b:93:52:e3:16:
e3:1d:cb:f4:1b:c7:7d:40:38:69:26:57:3a:95:34:
43:f2:08:c7:57:ec:be:f6:db:99:2e:d1:cc:3d:72:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1C:EB:45:D4:A6:C8:03:EE:51:28:BA:82:AF:0F:4C:F3:3E:AF:4C
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/VxzrRdSmyAPuUSi6gq8PTPM-r0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.84.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:43:3d:30:7e:14:98:f4:43:f8:c9:d2:1b:d3:e3:9c:d4:19:
de:70:99:68:63:f5:e6:eb:1f:e4:87:d5:4d:d1:89:82:db:db:
d6:d7:e2:72:22:22:23:c9:19:5b:3c:ee:d2:3a:11:6c:a4:9d:
29:4e:f8:d3:e8:ce:ce:a2:54:9a:13:f8:e0:b3:d8:6a:58:52:
bd:81:45:c5:f5:45:e0:f5:20:28:ab:15:8d:44:ca:10:31:6a:
c6:09:28:b5:dd:16:c3:50:c5:20:78:83:f6:03:bd:bd:ce:45:
de:b0:58:5a:31:7d:a8:27:de:3b:45:45:a1:97:e1:c2:62:bc:
ae:c0:07:03:74:bc:cf:3f:dc:de:e6:68:f3:43:89:7a:8b:2e:
22:6d:12:c5:6b:90:61:1c:6a:77:96:db:b2:87:bb:79:27:72:
85:11:27:5c:33:fb:1a:f4:ae:a1:44:b6:1b:97:fd:e7:81:d4:
11:4e:dd:fc:dd:d6:e7:fc:cb:3f:78:d4:03:6c:78:e7:73:b6:
55:5e:3e:ab:3c:f9:69:1c:52:99:a7:14:85:ec:1c:00:36:3c:
2f:ca:d7:d4:e2:9d:c4:d4:2e:41:5f:71:fe:93:2a:1b:fc:ab:
cf:91:7d:a5:39:52:50:a4:38:14:00:82:24:cd:b5:64:7c:14:
59:20:a6:da
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECQeSPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZTM2YWFkNzMzNWYzNGU0Y2Q4Mjk0MjNiZWIwODljNGUwYTRlODc0MB4XDTIyMDQy
MTIzMTg1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTcxY2ViNDVkNGE2
YzgwM2VlNTEyOGJhODJhZjBmNGNmMzNlYWY0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNpAyiJ1OTVFZ4MgIcycPxGlkucb5Gn9ch43Rlqh0hiVIiG
JIGMsyJ1bQm5mmhTRHrIFf2b7bnPy/mJu6FQTKXTofIYK+y6FP8IE8IHMCgy70e/
o+8Zlc1OPllxnRKcTdnHQ497egMbKG2Ra1MhWcs6XnFqw3xq56CCVEilIe3sseRE
HefEU5/oJdOBVgfmKVja9QxVPuvroYqmllMfxLYQ4xpsUk54sIki+NCZ+FtVkNko
3TaAeJYDAGhdyoFudm1b4Pljy5yIICEV0Wcs2SBQs3tj7B/oPxwOqFuTUuMW4x3L
9BvHfUA4aSZXOpU0Q/IIx1fsvvbbmS7RzD1y1fsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRXHOtF1KbIA+5RKLqCrw9M8z6vTDAfBgNVHSMEGDAWgBQONqrXM1805M2C
lCO+sInE4KTodDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RqYXExek5mTk9UTmdwUWp2ckNKeE9DazZIUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvOWJhNTA0LTAyYWYtNDk3Mi1iMGI5LTgyMmRlOTMwOGUwMS8x
L1Z4enJSZFNteUFQdVVTaTZncThQVFBNLXIwdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
OWJhNTA0LTAyYWYtNDk3Mi1iMGI5LTgyMmRlOTMwOGUwMS8xL0RqYXExek5mTk9U
TmdwUWp2ckNKeE9DazZIUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArl8VDANBgkqhkiG9w0BAQsFAAOC
AQEAL0M9MH4UmPRD+MnSG9PjnNQZ3nCZaGP15usf5IfVTdGJgtvb1tficiIiI8kZ
Wzzu0joRbKSdKU740+jOzqJUmhP44LPYalhSvYFFxfVF4PUgKKsVjUTKEDFqxgko
td0Ww1DFIHiD9gO9vc5F3rBYWjF9qCfeO0VFoZfhwmK8rsAHA3S8zz/c3uZo80OJ
eosuIm0SxWuQYRxqd5bbsoe7eSdyhREnXDP7GvSuoUS2G5f954HUEU7d/N3W5/zL
P3jUA2x453O2VV4+qzz5aRxSmacUhewcADY8L8rX1OKdxNQuQV9x/pMqG/yrz5F9
pTlSUKQ4FACCJM21ZHwUWSCm2g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:57 2024 by rpki-client on console-ams.rpki-client.org