Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CGkiOxAvtzYgkjso9VJ7hr9xOLM.roa
File: CGkiOxAvtzYgkjso9VJ7hr9xOLM.roa (raw, json)
Hash identifier: jFei4+IRIjVyqj2VvPz1CAzwF35VvocNyxGtHWzbgAQ=
Subject key identifier: 08:69:22:3B:10:2F:B7:36:20:92:3B:28:F5:52:7B:86:BF:71:38:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0181CEA6DC66EF8C0E4F2A79925A21F8AB9B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CGkiOxAvtzYgkjso9VJ7hr9xOLM.roa
Signing time: Tue 05 Jul 2022 13:57:30 +0000
ROA not before: Tue 05 Jul 2022 13:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
87.121.122.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:a6:dc:66:ef:8c:0e:4f:2a:79:92:5a:21:f8:ab:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 13:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0869223b102fb73620923b28f5527b86bf7138b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:70:7b:b5:0f:11:a4:56:98:70:e6:01:fd:
ed:fd:fc:23:ed:33:81:8b:c9:68:2a:55:51:a8:ba:
d5:33:bf:f4:a5:47:ea:81:34:6a:4e:85:52:b3:bd:
7a:23:77:f5:ce:13:37:7e:df:64:64:f2:dd:f8:e6:
f6:bb:9f:e0:d8:cd:f6:12:7a:4f:da:49:0e:14:65:
a2:93:eb:b3:dc:c6:6a:0e:b6:22:4e:6c:ce:29:29:
82:7a:eb:19:df:6e:5e:a8:36:75:38:9c:66:47:2a:
2e:e5:10:5c:58:3d:d5:96:94:a4:4f:4b:dc:e2:df:
11:bd:86:ed:47:87:75:2d:0c:20:44:26:2f:56:24:
71:52:a3:10:6e:f2:f5:75:44:14:f6:28:23:8e:5f:
9d:3f:d8:d0:d1:e0:73:b4:36:b9:52:9a:e1:6a:b6:
5b:ed:9d:59:ca:3a:03:49:fc:82:14:73:34:87:08:
8c:11:6a:cc:2d:cd:36:92:22:0a:fc:df:8c:2a:f9:
99:4f:ca:91:f4:ea:52:96:fe:4d:b0:c3:31:81:35:
c7:97:c5:fa:f1:89:85:c8:63:6e:8e:88:b2:e1:a8:
b4:3b:93:88:dc:0e:b8:4c:a7:d0:86:31:a3:34:cd:
84:10:8a:04:00:9d:73:f6:33:da:23:f8:f4:85:ed:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:69:22:3B:10:2F:B7:36:20:92:3B:28:F5:52:7B:86:BF:71:38:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CGkiOxAvtzYgkjso9VJ7hr9xOLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.122.0-87.121.125.255
Signature Algorithm: sha256WithRSAEncryption
85:72:4e:2d:22:a2:db:6f:22:5a:92:93:03:e6:e4:4e:1a:78:
dc:fb:8a:2c:6b:32:57:10:e8:a0:85:fc:44:27:ba:84:de:cb:
37:da:4c:98:8c:35:4f:b3:84:ad:35:cb:a0:53:27:b1:90:92:
ff:e9:ae:07:07:1b:bd:67:75:92:2c:09:48:a5:89:fe:d9:a0:
d0:5a:3d:da:31:7a:a4:2b:a0:8d:08:df:39:fc:c5:26:a9:f1:
a5:99:7b:8d:09:28:97:93:fb:3c:46:06:7c:77:53:f2:2d:27:
9b:1d:bb:6d:b2:d1:6a:c3:5f:0b:4f:b9:35:fb:b2:50:a1:91:
81:82:57:d9:ee:82:e4:2a:1f:c9:60:8b:b3:09:32:19:ba:ee:
2c:b8:1f:c0:09:62:df:44:e2:71:6f:cb:9f:ef:90:bf:52:99:
80:69:d4:9e:25:c7:02:c1:10:57:34:99:51:df:77:2f:bb:bb:
50:22:3a:5e:ec:a4:8a:d9:ab:b4:91:8f:ae:cf:f6:cd:0d:a8:
60:db:21:66:e5:c5:1a:1a:48:5a:44:07:2d:23:20:f1:d6:08:
57:35:87:37:cc:0d:f6:ef:0f:94:60:0c:c2:b3:14:50:09:8b:
ca:f6:52:6c:e2:b9:bc:63:bd:9c:5a:57:ed:67:40:b7:c5:dc:
b1:e1:f6:b7
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYHOptxm74wOTyp5kloh+KubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwNzA1MTM1NzMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODY5MjIzYjEwMmZiNzM2MjA5MjNiMjhmNTUyN2I4NmJmNzEzOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiVwe7UPEaRWmHDmAf3t/fwj7TOB
i8loKlVRqLrVM7/0pUfqgTRqToVSs716I3f1zhM3ft9kZPLd+Ob2u5/g2M32EnpP
2kkOFGWik+uz3MZqDrYiTmzOKSmCeusZ325eqDZ1OJxmRyou5RBcWD3VlpSkT0vc
4t8RvYbtR4d1LQwgRCYvViRxUqMQbvL1dUQU9igjjl+dP9jQ0eBztDa5UprharZb
7Z1ZyjoDSfyCFHM0hwiMEWrMLc02kiIK/N+MKvmZT8qR9OpSlv5NsMMxgTXHl8X6
8YmFyGNujoiy4ai0O5OI3A64TKfQhjGjNM2EEIoEAJ1z9jPaI/j0he3ifwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAhpIjsQL7c2IJI7KPVSe4a/cTizMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQ0draU94QXZ0ellna2pzbzlWSjdocjl4T0xNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFXeXoD
BAFXeXwwDQYJKoZIhvcNAQELBQADggEBAIVyTi0iottvIlqSkwPm5E4aeNz7iixr
MlcQ6KCF/EQnuoTeyzfaTJiMNU+zhK01y6BTJ7GQkv/prgcHG71ndZIsCUilif7Z
oNBaPdoxeqQroI0I3zn8xSap8aWZe40JKJeT+zxGBnx3U/ItJ5sdu22y0WrDXwtP
uTX7slChkYGCV9nuguQqH8lgi7MJMhm67iy4H8AJYt9E4nFvy5/vkL9SmYBp1J4l
xwLBEFc0mVHfdy+7u1AiOl7spIrZq7SRj67P9s0NqGDbIWblxRoaSFpEBy0jIPHW
CFc1hzfMDfbvD5RgDMKzFFAJi8r2UmziubxjvZxaV+1nQLfF3LHh9rc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org