Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Iahi9a8mZjG8sVwgYu3Lkp-_pd4.roa
File: Iahi9a8mZjG8sVwgYu3Lkp-_pd4.roa (raw, json)
Hash identifier: QV0IVejUjX3hMYM4v237R4IUHPRy/rzCJFnWWIQaznk=
Subject key identifier: 21:A8:62:F5:AF:26:66:31:BC:B1:5C:20:62:ED:CB:92:9F:BF:A5:DE
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0E3CEB4F
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Iahi9a8mZjG8sVwgYu3Lkp-_pd4.roa
Signing time: Wed 20 Apr 2022 06:37:55 +0000
ROA not before: Wed 20 Apr 2022 06:37:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51238
IP address blocks: 109.236.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238873423 (0xe3ceb4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Apr 20 06:37:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21a862f5af266631bcb15c2062edcb929fbfa5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:a7:58:af:95:bd:f3:66:b3:99:82:da:26:
2b:cb:47:c0:11:b5:3b:69:53:a4:65:af:3c:a5:90:
26:72:41:c2:ca:22:35:f4:b6:b3:0c:9c:ac:24:b1:
79:54:58:9e:85:d8:4b:65:5f:23:f7:d7:1b:b9:d8:
6f:e5:a8:14:90:fb:29:7d:4a:40:a5:b2:ef:70:c2:
d6:2a:02:00:d1:24:42:46:b6:42:fb:5c:ae:1b:8a:
f1:4e:97:31:f8:9f:20:22:e1:b3:46:3e:36:18:b0:
2c:c4:d3:d1:2e:54:89:00:37:07:78:0c:ba:03:d6:
36:25:12:e0:a4:c0:cd:36:37:25:41:a2:8a:15:00:
8d:27:ad:bd:f8:61:03:85:0b:cd:aa:a9:b6:7c:e9:
13:a3:da:56:9c:c4:05:50:4e:cf:b0:6e:d7:7b:71:
11:8e:8c:74:0c:dc:94:4a:b2:d5:04:9c:c7:30:1f:
13:ca:78:13:60:48:cc:64:4b:79:2f:26:39:3d:d1:
8e:41:56:46:68:7c:b1:f4:fa:01:ec:d6:ce:ed:40:
e9:5c:09:41:ec:a5:48:e3:e8:19:d5:7a:f6:77:22:
57:1f:db:c1:77:11:56:91:da:40:46:f9:ea:18:a0:
67:38:63:4f:a8:a2:71:72:01:57:cf:78:fb:00:09:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A8:62:F5:AF:26:66:31:BC:B1:5C:20:62:ED:CB:92:9F:BF:A5:DE
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Iahi9a8mZjG8sVwgYu3Lkp-_pd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e5:d3:50:94:7e:0b:b5:9a:ab:0d:50:ad:c4:4b:3a:01:16:
0b:77:bd:98:81:bb:70:83:7e:74:ef:ed:0f:aa:ea:1c:4a:23:
b9:34:35:fb:ca:c2:4d:70:e0:82:eb:2f:8d:2c:98:5f:00:44:
f9:80:ba:ba:53:65:4a:56:f8:5d:a2:43:cb:24:0d:3c:91:42:
3b:7c:af:7f:0a:5f:52:9a:ce:e5:e8:48:71:b4:a2:16:e1:22:
50:80:84:cd:53:c4:16:47:e6:98:e7:08:d0:d4:7d:71:84:e9:
da:b4:79:9d:d7:c7:23:d8:be:f9:9e:84:b2:aa:22:95:83:ff:
30:f5:bc:71:2c:70:0b:d2:b1:9d:96:14:f3:4c:25:8a:92:e4:
a8:9f:04:4d:ca:92:22:ed:31:96:f3:19:86:53:af:16:96:78:
fe:2a:0f:61:76:ef:99:ac:6b:88:41:02:93:ff:40:34:bc:7a:
61:7e:72:74:64:22:70:55:4f:67:84:a0:fd:68:ac:16:ee:cd:
c2:5b:29:e8:2e:cc:07:b7:63:b9:97:b3:2d:84:9b:48:30:db:
d6:d0:a7:92:3f:27:e1:d1:2f:b3:7e:be:5a:09:e6:42:0b:4d:
cf:a9:67:f1:10:33:e3:4a:72:73:76:18:1e:db:8c:62:8f:a3:
b1:bc:44:40
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDjzrTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
M2MzNDJjMDZhYWNjMzU5ZDM5NDM5ZmY1OGRlZmE4ZWExODc1NzQ4MB4XDTIyMDQy
MDA2Mzc1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjFhODYyZjVhZjI2
NjYzMWJjYjE1YzIwNjJlZGNiOTI5ZmJmYTVkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMGYp1ivlb3zZrOZgtomK8tHwBG1O2lTpGWvPKWQJnJBwsoi
NfS2swycrCSxeVRYnoXYS2VfI/fXG7nYb+WoFJD7KX1KQKWy73DC1ioCANEkQka2
QvtcrhuK8U6XMfifICLhs0Y+NhiwLMTT0S5UiQA3B3gMugPWNiUS4KTAzTY3JUGi
ihUAjSetvfhhA4ULzaqptnzpE6PaVpzEBVBOz7Bu13txEY6MdAzclEqy1QScxzAf
E8p4E2BIzGRLeS8mOT3RjkFWRmh8sfT6AezWzu1A6VwJQeylSOPoGdV69nciVx/b
wXcRVpHaQEb56higZzhjT6iicXIBV894+wAJVCcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQhqGL1ryZmMbyxXCBi7cuSn7+l3jAfBgNVHSMEGDAWgBQzw0LAaqzDWdOU
Of9Y3vqOoYdXSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L004TkN3R3FzdzFuVGxEbl9XTjc2anFHSFYwZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvYzU1ZmRmLWE2OGEtNGFhMC1iOGM1LTdmMjMzMzYwNDk5Ny8x
L0lhaGk5YThtWmpHOHNWd2dZdTNMa3AtX3BkNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
YzU1ZmRmLWE2OGEtNGFhMC1iOGM1LTdmMjMzMzYwNDk5Ny8xL004TkN3R3FzdzFu
VGxEbl9XTjc2anFHSFYwZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG3s+jANBgkqhkiG9w0BAQsFAAOC
AQEAj+XTUJR+C7Waqw1QrcRLOgEWC3e9mIG7cIN+dO/tD6rqHEojuTQ1+8rCTXDg
gusvjSyYXwBE+YC6ulNlSlb4XaJDyyQNPJFCO3yvfwpfUprO5ehIcbSiFuEiUICE
zVPEFkfmmOcI0NR9cYTp2rR5ndfHI9i++Z6EsqoilYP/MPW8cSxwC9KxnZYU80wl
ipLkqJ8ETcqSIu0xlvMZhlOvFpZ4/ioPYXbvmaxriEECk/9ANLx6YX5ydGQicFVP
Z4Sg/WisFu7Nwlsp6C7MB7djuZezLYSbSDDb1tCnkj8n4dEvs36+WgnmQgtNz6ln
8RAz40pyc3YYHtuMYo+jsbxEQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org