Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/P72pzZ3fr8RVWwqadxND1RDHrVE.roa
File: P72pzZ3fr8RVWwqadxND1RDHrVE.roa (raw, json)
Hash identifier: ibOGY8NgYrFwIsibT9Fz/yfKyMJ87heLa/9lkmD7GY0=
Subject key identifier: 3F:BD:A9:CD:9D:DF:AF:C4:55:5B:0A:9A:77:13:43:D5:10:C7:AD:51
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 1AB71090
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/P72pzZ3fr8RVWwqadxND1RDHrVE.roa
Signing time: Sun 02 Jan 2022 14:28:45 +0000
ROA not before: Sun 02 Jan 2022 14:28:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 107.181.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448204944 (0x1ab71090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 2 14:28:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fbda9cd9ddfafc4555b0a9a771343d510c7ad51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:d1:a9:90:02:32:87:df:46:dd:17:ea:5f:
4e:4b:51:38:b8:0b:a9:7d:4c:44:af:6d:99:6f:2a:
c2:f5:d7:c9:e9:76:6b:e0:77:8f:d0:98:c3:cb:59:
e1:07:a9:d6:fc:c7:a4:89:88:a3:0c:7c:d3:24:85:
fe:f3:67:4d:ab:bb:06:00:40:00:c2:8f:25:c3:6c:
fc:87:a4:7d:8b:35:0c:a5:3c:3c:d4:04:5f:0a:bd:
e9:47:07:2f:28:8f:8e:65:09:29:ee:31:81:1f:ca:
9c:5d:75:66:7d:23:50:f3:3e:25:e6:7e:c5:5c:78:
5f:d0:9c:8a:22:d5:b4:0a:65:bb:5f:69:24:48:23:
30:90:e6:32:4e:3d:66:c7:d2:9f:04:43:15:58:0a:
aa:89:17:09:f5:e2:13:07:82:e4:b3:50:20:31:68:
76:25:c5:ed:2b:64:19:23:2e:b6:b7:0a:19:18:f5:
60:db:72:54:61:bc:1a:45:7a:86:bd:56:e8:94:4e:
25:fe:86:c9:b8:48:54:38:58:cc:2e:ed:1b:75:28:
ca:40:f3:cf:27:9c:32:06:f5:2e:3b:61:17:ee:20:
ea:ee:41:f2:6d:3d:6a:ce:a9:ff:7a:60:94:84:b0:
21:b6:c3:9b:45:a6:19:ae:81:a2:4d:b2:89:59:b1:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BD:A9:CD:9D:DF:AF:C4:55:5B:0A:9A:77:13:43:D5:10:C7:AD:51
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/P72pzZ3fr8RVWwqadxND1RDHrVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.128.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:b3:a3:8c:99:8c:d7:50:e9:c9:ab:07:08:f4:43:ae:12:41:
11:02:97:73:81:11:cb:35:a3:c9:45:76:7e:77:a2:bd:b2:4d:
db:4f:b3:49:14:05:47:ff:d9:d4:76:82:59:df:64:a6:4b:05:
93:cd:a4:59:1c:f9:69:d8:fe:8e:07:18:75:b8:20:0f:57:1b:
45:90:f2:e1:b1:0b:dd:05:82:2e:bb:b6:d3:dc:69:e7:bb:ad:
a0:dd:77:68:ec:d5:64:4b:01:ee:3a:6c:e8:bd:12:df:2f:a4:
46:52:c8:05:9e:1d:dc:89:54:e9:5e:78:70:a9:40:98:0f:c3:
f1:21:4a:a8:32:d9:24:50:8b:f9:18:f3:cc:c4:f2:ad:54:7e:
5c:1e:73:07:74:0b:f9:34:9f:e1:bd:d8:78:1c:7c:7d:07:21:
88:78:1d:19:71:ad:ff:67:cc:a5:24:86:bd:7d:b5:f7:ef:f9:
32:95:d4:24:8d:ac:d1:de:e2:42:38:ce:cf:91:ed:9e:01:df:
d1:d1:5d:5a:b3:ae:7e:3c:d9:a6:88:3e:e9:21:28:ad:ff:ed:
32:f2:dc:79:00:f2:11:b7:d5:10:76:cf:f5:2c:1e:31:24:4a:
35:3c:ca:6c:53:47:d9:6f:c3:c8:f5:99:4e:72:a1:45:7c:a2:
d9:6f:fd:2b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGrcQkDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NzU0YzM0N2Q2OGQxNTQ5M2RlNzFiYjk2MmYwYTU2N2UxMzRkNjAzMB4XDTIyMDEw
MjE0Mjg0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2ZiZGE5Y2Q5ZGRm
YWZjNDU1NWIwYTlhNzcxMzQzZDUxMGM3YWQ1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALd00amQAjKH30bdF+pfTktROLgLqX1MRK9tmW8qwvXXyel2
a+B3j9CYw8tZ4Qep1vzHpImIowx80ySF/vNnTau7BgBAAMKPJcNs/IekfYs1DKU8
PNQEXwq96UcHLyiPjmUJKe4xgR/KnF11Zn0jUPM+JeZ+xVx4X9CciiLVtAplu19p
JEgjMJDmMk49ZsfSnwRDFVgKqokXCfXiEweC5LNQIDFodiXF7StkGSMutrcKGRj1
YNtyVGG8GkV6hr1W6JROJf6GybhIVDhYzC7tG3UoykDzzyecMgb1LjthF+4g6u5B
8m09as6p/3pglISwIbbDm0WmGa6Bok2yiVmxp6MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ/vanNnd+vxFVbCpp3E0PVEMetUTAfBgNVHSMEGDAWgBTnVMNH1o0VST3n
G7li8KVn4TTWAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzUxVERSOWFORlVrOTV4dTVZdkNsWi1FMDFnTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNDZkYjNhLWE1NzMtNGYyOC1iNDNiLTM3YjYyZDIyMzkyNC8x
L1A3MnB6WjNmcjhSVld3cWFkeE5EMVJESHJWRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
NDZkYjNhLWE1NzMtNGYyOC1iNDNiLTM3YjYyZDIyMzkyNC8xLzUxVERSOWFORlVr
OTV4dTVZdkNsWi1FMDFnTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGu1gDANBgkqhkiG9w0BAQsFAAOC
AQEAtrOjjJmM11DpyasHCPRDrhJBEQKXc4ERyzWjyUV2fneivbJN20+zSRQFR//Z
1HaCWd9kpksFk82kWRz5adj+jgcYdbggD1cbRZDy4bEL3QWCLru209xp57utoN13
aOzVZEsB7jps6L0S3y+kRlLIBZ4d3IlU6V54cKlAmA/D8SFKqDLZJFCL+RjzzMTy
rVR+XB5zB3QL+TSf4b3YeBx8fQchiHgdGXGt/2fMpSSGvX219+/5MpXUJI2s0d7i
QjjOz5HtngHf0dFdWrOufjzZpog+6SEorf/tMvLceQDyEbfVEHbP9SweMSRKNTzK
bFNH2W/DyPWZTnKhRXyi2W/9Kw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org