Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ogjfWwHhUS-oABvYr0iTQmuRD9U.roa
File: ogjfWwHhUS-oABvYr0iTQmuRD9U.roa (raw, json)
Hash identifier: uaSfBNXsS6cvg5X+ricLwhdHY4UawPvjDgpLnonBoDA=
Subject key identifier: A2:08:DF:5B:01:E1:51:2F:A8:00:1B:D8:AF:48:93:42:6B:91:0F:D5
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018521B9606D5FAC408AC85D02DAB157677E
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ogjfWwHhUS-oABvYr0iTQmuRD9U.roa
Signing time: Sat 17 Dec 2022 20:14:35 +0000
ROA not before: Sat 17 Dec 2022 20:14:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 109.72.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:b9:60:6d:5f:ac:40:8a:c8:5d:02:da:b1:57:67:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 17 20:14:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a208df5b01e1512fa8001bd8af4893426b910fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:8e:a1:e7:2c:8e:88:7b:ae:24:7a:0c:2b:
cc:e4:07:6c:55:ce:12:b3:ba:41:83:78:5c:0d:c9:
0d:b3:63:02:b1:59:d2:47:50:7f:a0:83:55:16:60:
b1:84:06:d6:e5:68:b9:23:bf:77:a3:8e:5c:0e:9c:
34:63:40:b4:25:d1:19:3d:21:6b:50:65:fe:20:77:
ea:97:43:20:bb:7c:ed:69:5d:50:48:91:c8:39:ed:
44:ee:e8:4a:38:7b:03:b6:c3:27:97:b4:74:1b:07:
f3:b1:f7:8d:e8:aa:cd:32:fd:37:56:e9:c3:2e:b1:
10:9e:35:fe:cb:62:18:fb:49:da:0c:fa:c5:3f:62:
73:e6:cb:75:37:01:f8:42:ce:34:cf:51:5b:91:5c:
50:cc:cf:1c:f9:e1:a5:d6:69:b7:cd:a6:6e:bc:0a:
d2:ae:81:3b:da:8a:fe:2d:99:d8:98:92:80:95:a1:
08:84:a6:95:31:6b:70:8d:3e:d9:8a:83:d6:a8:65:
c7:1c:a1:af:4d:82:13:ef:60:37:f8:cf:b6:2e:3d:
c0:31:59:1a:01:74:8d:a5:05:5f:fd:ce:f5:39:40:
89:c4:4e:95:ae:4b:dc:06:b3:06:87:6b:fa:20:e9:
43:ef:3b:6a:34:76:97:86:8f:89:5a:7a:2f:59:05:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:08:DF:5B:01:E1:51:2F:A8:00:1B:D8:AF:48:93:42:6B:91:0F:D5
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ogjfWwHhUS-oABvYr0iTQmuRD9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.121.0/24
Signature Algorithm: sha256WithRSAEncryption
53:26:97:34:84:ae:e0:73:d0:14:41:fd:df:53:0d:e1:61:14:
dc:fd:3c:d6:8d:05:ae:d0:d8:39:cc:5e:81:53:1d:da:11:d4:
23:5e:b0:41:91:d6:4e:9e:11:1e:bc:1b:7b:72:90:2f:12:ad:
a7:89:22:25:13:5a:2c:89:80:95:3e:f6:06:93:b2:d6:62:b4:
26:0b:13:7f:6c:16:8f:24:47:31:6b:2a:68:b4:25:8b:a6:57:
38:03:27:4b:b8:8d:59:fe:b6:40:d8:32:e9:e1:04:8a:5e:c1:
07:a3:1c:2a:1b:ce:10:4f:fd:a6:87:01:37:06:d9:b8:db:73:
ee:51:d3:24:17:5e:53:6b:9a:e9:e9:01:f9:b2:e0:24:d3:55:
f8:a3:83:33:1d:bc:f1:1b:fa:98:7b:b9:7e:8b:82:ec:c1:57:
e4:4b:a4:6d:ce:a1:cf:a5:65:02:f6:23:0a:17:ce:0e:9f:cb:
89:9b:8b:9e:bb:99:e1:8a:60:e1:d3:89:c8:1f:db:e4:98:f1:
cb:15:1d:67:ab:60:aa:43:56:9e:91:c9:1d:63:44:d2:8a:50:
b0:bb:d0:13:b6:f7:bd:28:8a:a1:a4:5d:2d:c4:86:f9:b8:7f:
87:1f:16:74:51:ba:1f:f8:f0:26:e2:86:2f:2a:e4:c2:af:6d:
00:99:11:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUhuWBtX6xAishdAtqxV2d+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjIxMjE3MjAxNDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjA4ZGY1YjAxZTE1MTJmYTgwMDFiZDhhZjQ4OTM0MjZiOTEwZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLeOoecsjoh7riR6DCvM5AdsVc4S
s7pBg3hcDckNs2MCsVnSR1B/oINVFmCxhAbW5Wi5I793o45cDpw0Y0C0JdEZPSFr
UGX+IHfql0Mgu3ztaV1QSJHIOe1E7uhKOHsDtsMnl7R0GwfzsfeN6KrNMv03VunD
LrEQnjX+y2IY+0naDPrFP2Jz5st1NwH4Qs40z1FbkVxQzM8c+eGl1mm3zaZuvArS
roE72or+LZnYmJKAlaEIhKaVMWtwjT7ZioPWqGXHHKGvTYIT72A3+M+2Lj3AMVka
AXSNpQVf/c71OUCJxE6VrkvcBrMGh2v6IOlD7ztqNHaXho+JWnovWQX4bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKII31sB4VEvqAAb2K9Ik0JrkQ/VMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvb2dqZld3SGhVUy1vQUJ2WXIwaVRRbXVSRDlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh5MA0G
CSqGSIb3DQEBCwUAA4IBAQBTJpc0hK7gc9AUQf3fUw3hYRTc/TzWjQWu0Ng5zF6B
Ux3aEdQjXrBBkdZOnhEevBt7cpAvEq2niSIlE1osiYCVPvYGk7LWYrQmCxN/bBaP
JEcxaypotCWLplc4AydLuI1Z/rZA2DLp4QSKXsEHoxwqG84QT/2mhwE3Btm423Pu
UdMkF15Ta5rp6QH5suAk01X4o4MzHbzxG/qYe7l+i4LswVfkS6RtzqHPpWUC9iMK
F84On8uJm4ueu5nhimDh04nIH9vkmPHLFR1nq2CqQ1aekckdY0TSilCwu9ATtve9
KIqhpF0txIb5uH+HHxZ0Ubof+PAm4oYvKuTCr20AmRHS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org