Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/8Q9fL7e20O442oLgHYojyFMnsic.roa
File: 8Q9fL7e20O442oLgHYojyFMnsic.roa (raw, json)
Hash identifier: 9JWenqXXzM9e2dRyp6w+IIwBIxEnLbFyiN0nc3JGlfw=
Subject key identifier: F1:0F:5F:2F:B7:B6:D0:EE:38:DA:82:E0:1D:8A:23:C8:53:27:B2:27
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 68B034
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/8Q9fL7e20O442oLgHYojyFMnsic.roa
Signing time: Sat 01 Jan 2022 03:51:46 +0000
ROA not before: Sat 01 Jan 2022 03:51:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60664
IP address blocks: 153.92.124.0/24 maxlen: 24
153.92.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6860852 (0x68b034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Jan 1 03:51:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f10f5f2fb7b6d0ee38da82e01d8a23c85327b227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2c:59:bc:de:88:bd:a3:24:d0:89:12:08:53:
5f:b8:f1:22:ef:0d:76:24:ec:cf:f6:63:e8:ac:40:
16:b6:4e:07:80:a5:f9:e1:33:77:69:bc:03:7a:ba:
19:08:67:96:c6:ab:b9:71:43:ee:52:79:d0:5a:a8:
9a:3d:6b:68:90:a8:ca:ea:58:65:67:57:4f:cc:49:
85:6f:41:d0:52:d0:13:42:1a:f4:b4:a8:a5:35:ae:
c2:11:12:eb:5e:af:0e:cd:52:d7:27:3d:0c:1d:b1:
ef:e5:95:7d:a1:d2:9a:a3:e5:d4:74:eb:8a:0d:ff:
ef:8a:33:8e:a2:81:ab:6e:24:d3:28:b3:1b:76:49:
83:e3:22:e2:19:af:9a:c4:4c:7c:b7:6f:df:32:0e:
14:ae:8b:5a:3c:80:9e:31:1c:7a:ec:36:58:e4:4d:
60:f2:b7:f7:20:06:4f:03:f7:40:86:c7:21:4d:4e:
0a:2e:fa:d4:e7:ba:ca:c2:fc:20:22:1b:5f:a6:e0:
05:10:9e:dd:75:11:73:44:35:81:2d:71:68:fa:e4:
bd:80:e3:14:84:8c:ff:6a:17:e0:b6:9a:88:4d:81:
db:8f:af:24:e4:31:12:f2:10:ce:1b:cb:9e:78:a0:
38:3a:f5:f7:b5:af:25:64:c3:04:d5:db:62:5c:93:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0F:5F:2F:B7:B6:D0:EE:38:DA:82:E0:1D:8A:23:C8:53:27:B2:27
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/8Q9fL7e20O442oLgHYojyFMnsic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.64.0/24
153.92.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:41:31:b9:e6:9d:55:11:87:69:be:47:3b:60:c5:49:57:cc:
76:90:2f:34:68:f0:92:32:d2:a4:7b:86:b8:60:06:6f:fd:a3:
f6:ed:17:6e:9e:8a:76:d0:5f:4d:9f:59:db:ea:41:44:e0:9b:
f8:31:26:74:54:52:ce:95:56:bd:0c:46:18:f4:6e:aa:3b:48:
02:69:50:68:05:74:5c:c4:4b:51:4b:09:d8:27:3b:bf:91:16:
e5:0a:40:21:03:f4:0e:24:7b:98:8a:95:70:31:e4:fe:35:5c:
89:43:14:41:eb:79:5b:48:15:e6:d8:e0:e4:ae:c4:2a:94:dd:
19:19:53:47:90:28:9c:3c:26:5a:96:2a:ef:c9:e5:6c:95:36:
81:1e:a1:bd:4e:b1:19:3f:40:a2:e5:9b:69:35:76:61:e5:c0:
cf:83:cd:d8:1a:ef:26:54:01:1a:b1:cb:9e:7e:89:ad:7d:f2:
0e:a3:60:52:85:81:2b:15:ce:a6:ed:96:8a:d9:a7:4a:53:68:
01:09:11:b0:40:cb:2d:c4:50:6c:85:de:54:e8:11:ac:2a:57:
09:35:dc:ee:b9:4b:d1:59:bb:b1:e2:ce:30:5d:0d:3f:bb:e2:
27:96:13:55:f2:04:93:50:23:8e:51:bb:b3:77:69:dc:71:c1:
57:83:9a:cf
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDaLA0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE3
NzhjZmMwOWEzNjNhNzNjYzhkZGEzNjJhMmM5ZTgyMjNkN2RhZDYwHhcNMjIwMTAx
MDM1MTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmMTBmNWYyZmI3YjZk
MGVlMzhkYTgyZTAxZDhhMjNjODUzMjdiMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4SxZvN6IvaMk0IkSCFNfuPEi7w12JOzP9mPorEAWtk4HgKX5
4TN3abwDeroZCGeWxqu5cUPuUnnQWqiaPWtokKjK6lhlZ1dPzEmFb0HQUtATQhr0
tKilNa7CERLrXq8OzVLXJz0MHbHv5ZV9odKao+XUdOuKDf/vijOOooGrbiTTKLMb
dkmD4yLiGa+axEx8t2/fMg4UrotaPICeMRx67DZY5E1g8rf3IAZPA/dAhschTU4K
LvrU57rKwvwgIhtfpuAFEJ7ddRFzRDWBLXFo+uS9gOMUhIz/ahfgtpqITYHbj68k
5DES8hDOG8ueeKA4OvX3ta8lZMME1dtiXJMitwIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFPEPXy+3ttDuONqC4B2KI8hTJ7InMB8GA1UdIwQYMBaAFBd4z8CaNjpzzI3a
NiosnoIj19rWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjItMDEwY2YyZGQ0MGFmLzEv
OFE5Zkw3ZTIwTzQ0Mm9MZ0hZb2p5Rk1uc2ljLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8w
OTAxMmYtYjRmNi00ZGY3LWI1NjItMDEwY2YyZGQ0MGFmLzEvRjNqUHdKbzJPblBN
amRvMktpeWVnaVBYMnRZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmVxAAwQAmVx8MA0GCSqGSIb3DQEB
CwUAA4IBAQA/QTG55p1VEYdpvkc7YMVJV8x2kC80aPCSMtKke4a4YAZv/aP27Rdu
nop20F9Nn1nb6kFE4Jv4MSZ0VFLOlVa9DEYY9G6qO0gCaVBoBXRcxEtRSwnYJzu/
kRblCkAhA/QOJHuYipVwMeT+NVyJQxRB63lbSBXm2ODkrsQqlN0ZGVNHkCicPCZa
lirvyeVslTaBHqG9TrEZP0Ci5ZtpNXZh5cDPg83YGu8mVAEascuefomtffIOo2BS
hYErFc6m7ZaK2adKU2gBCRGwQMstxFBshd5U6BGsKlcJNdzuuUvRWbux4s4wXQ0/
u+InlhNV8gSTUCOOUbuzd2ncccFXg5rP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:34 2023 by rpki-client on console-fra.rpki-client.org