Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/aVdZdRht_e7m4GafLFq9CYxw_q0.roa
File: aVdZdRht_e7m4GafLFq9CYxw_q0.roa (raw, json)
Hash identifier: Wbe3+GtTJx8UYh8bPlK6WdJjP0lnmEttOoKnn/Pwy8k=
Subject key identifier: 69:57:59:75:18:6D:FD:EE:E6:E0:66:9F:2C:5A:BD:09:8C:70:FE:AD
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018225AF8BB3B4F2462C6016FE25AE862E5E
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/aVdZdRht_e7m4GafLFq9CYxw_q0.roa
Signing time: Fri 22 Jul 2022 11:33:57 +0000
ROA not before: Fri 22 Jul 2022 11:33:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 109.72.124.0/22 maxlen: 22
109.72.120.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:af:8b:b3:b4:f2:46:2c:60:16:fe:25:ae:86:2e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jul 22 11:33:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69575975186dfdeee6e0669f2c5abd098c70fead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:cd:d7:f8:c6:21:3a:8e:13:2d:06:e8:e9:
99:83:54:1e:07:ee:4b:7d:fa:84:77:6b:fc:d8:69:
35:76:68:16:10:27:e7:1a:a9:a2:6f:a9:f9:fd:cc:
7d:c8:6b:c2:71:99:ce:61:7e:f8:4b:5f:9e:22:82:
9f:97:e6:66:cc:fa:5d:ae:fb:a5:1c:f9:51:20:d8:
e3:0f:41:ca:48:55:58:8e:83:80:19:8c:c9:5c:8b:
aa:40:c8:74:f1:96:3c:91:b9:02:8e:21:bc:98:04:
14:73:35:d3:2d:db:c7:1f:a7:5b:fe:72:a7:28:13:
2e:b6:0f:bf:f9:d2:89:4d:cc:91:8d:e6:cb:f2:85:
e3:80:95:ea:3d:b2:87:0d:87:78:7d:09:fd:4c:7b:
b8:a7:59:99:2c:db:6e:6f:0a:23:d7:3d:b3:d9:4d:
cf:f4:82:53:8c:28:a6:36:97:58:e3:ce:56:51:d9:
c1:4b:d3:db:fb:4f:f8:5d:38:40:8d:2b:96:ee:1d:
84:ca:04:17:98:01:51:e3:b0:ed:99:d1:8b:6a:1a:
07:f3:6c:b5:fc:92:b0:30:d1:c3:c8:d7:1c:68:68:
ee:34:6e:4e:42:5f:9d:53:dd:0e:a9:c3:47:b6:7c:
15:5d:87:ef:48:3a:8d:13:43:95:bc:65:2b:4c:d5:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:59:75:18:6D:FD:EE:E6:E0:66:9F:2C:5A:BD:09:8C:70:FE:AD
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/aVdZdRht_e7m4GafLFq9CYxw_q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.120.0/23
109.72.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:20:06:ba:89:49:28:57:94:bc:30:48:8b:d6:22:15:c5:88:
8d:ca:f6:17:44:92:c8:b8:0e:99:dc:35:a1:0e:71:23:42:c7:
01:36:1f:2f:20:40:e9:1e:9c:c0:e8:cc:6b:16:20:df:18:a9:
d1:27:5c:4e:64:9b:6b:22:e8:19:a6:51:6f:7e:ff:94:d2:a8:
1d:7f:2e:f8:5c:d0:e0:be:a6:5a:e9:48:0e:92:d3:27:03:2d:
df:7d:2b:7a:eb:b0:ff:72:d7:f1:d6:5f:bb:d6:e6:fd:30:ee:
2a:81:d0:a0:63:cf:83:25:25:6f:da:97:53:df:86:33:02:30:
df:58:dc:26:ae:e6:a2:50:db:66:dc:78:b2:79:b1:59:8f:c4:
cf:e9:a9:dd:67:78:90:8f:27:30:f7:a3:7a:a6:dd:47:4a:9a:
7f:fe:b9:9e:94:1c:fa:4b:22:2f:c2:1f:83:c5:26:6b:9f:d1:
05:ab:88:93:0d:b2:4d:c5:5b:f8:19:34:9f:c0:fe:8d:88:55:
78:62:33:52:fd:e3:e9:8b:1e:a1:c8:78:2f:c8:6a:11:fa:6d:
3e:dc:4f:33:69:7f:bf:23:57:f3:3a:92:1b:9b:5f:4c:ad:7e:
e5:8e:c3:d1:e5:15:29:d3:b3:0c:be:a2:ba:84:b1:11:97:c6:
29:fd:6c:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYIlr4uztPJGLGAW/iWuhi5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjIwNzIyMTEzMzU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTU3NTk3NTE4NmRmZGVlZTZlMDY2OWYyYzVhYmQwOThjNzBmZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF3N1/jGITqOEy0G6OmZg1QeB+5L
ffqEd2v82Gk1dmgWECfnGqmib6n5/cx9yGvCcZnOYX74S1+eIoKfl+ZmzPpdrvul
HPlRINjjD0HKSFVYjoOAGYzJXIuqQMh08ZY8kbkCjiG8mAQUczXTLdvHH6db/nKn
KBMutg+/+dKJTcyRjebL8oXjgJXqPbKHDYd4fQn9THu4p1mZLNtubwoj1z2z2U3P
9IJTjCimNpdY485WUdnBS9Pb+0/4XThAjSuW7h2EygQXmAFR47DtmdGLahoH82y1
/JKwMNHDyNccaGjuNG5OQl+dU90OqcNHtnwVXYfvSDqNE0OVvGUrTNWH9QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGlXWXUYbf3u5uBmnyxavQmMcP6tMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvYVZkWmRSaHRfZTdtNEdhZkxGcTlDWXh3X3EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBbUh4AwQC
bUh8MA0GCSqGSIb3DQEBCwUAA4IBAQBaIAa6iUkoV5S8MEiL1iIVxYiNyvYXRJLI
uA6Z3DWhDnEjQscBNh8vIEDpHpzA6MxrFiDfGKnRJ1xOZJtrIugZplFvfv+U0qgd
fy74XNDgvqZa6UgOktMnAy3ffSt667D/ctfx1l+71ub9MO4qgdCgY8+DJSVv2pdT
34YzAjDfWNwmruaiUNtm3HiyebFZj8TP6andZ3iQjycw96N6pt1HSpp//rmelBz6
SyIvwh+DxSZrn9EFq4iTDbJNxVv4GTSfwP6NiFV4YjNS/ePpix6hyHgvyGoR+m0+
3E8zaX+/I1fzOpIbm19MrX7ljsPR5RUp07MMvqK6hLERl8Yp/WzT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org