Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/__-Lq2oCBYOK1Pk5PJUev9dAf3k.roa
File: __-Lq2oCBYOK1Pk5PJUev9dAf3k.roa (raw, json)
Hash identifier: s6hjpcuJ3z9/q7JxBnCp4HqyH2CJY1cfDXFFEnA4ymg=
Subject key identifier: FF:FF:8B:AB:6A:02:05:83:8A:D4:F9:39:3C:95:1E:BF:D7:40:7F:79
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C8ACB01
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/__-Lq2oCBYOK1Pk5PJUev9dAf3k.roa
Signing time: Sat 01 Jan 2022 01:02:51 +0000
ROA not before: Sat 01 Jan 2022 01:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206776
IP address blocks: 87.120.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478857985 (0x1c8acb01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffff8bab6a0205838ad4f9393c951ebfd7407f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:14:95:eb:ba:f3:ac:03:61:ea:89:e4:06:
4a:01:bb:ea:ec:e5:46:b8:c7:eb:27:f2:e5:b7:df:
77:b2:97:8b:71:37:a7:6a:6c:ec:ca:a4:34:a4:4c:
26:b0:cf:93:ce:b1:53:0c:ee:d7:fa:dd:36:c0:47:
9d:18:61:3a:3f:fe:de:ec:59:b9:f0:ed:e6:c9:2d:
24:29:71:cb:10:62:c0:b0:07:5d:3f:81:04:e7:8a:
1c:8f:63:dd:69:e2:03:62:1a:f5:b9:74:06:5d:ec:
03:09:61:2a:3c:10:16:a5:7a:51:1d:46:e6:ee:45:
ae:77:16:c5:d4:0e:65:01:df:10:01:1f:17:89:8c:
60:37:84:fa:01:be:fc:a8:f9:82:ee:8f:a8:43:1a:
34:76:0c:f0:23:20:6f:33:78:99:dc:c6:71:3c:e1:
d5:10:e8:c3:e9:b0:c5:99:3f:54:32:7d:23:17:0e:
fc:e4:32:80:29:13:4b:87:8c:8f:67:21:22:cd:1f:
6f:49:7f:58:f2:b4:0e:2f:43:30:d1:58:61:c3:40:
04:db:51:65:ed:82:9e:1e:f4:bd:67:a2:e5:60:04:
b1:3c:8e:31:6c:f3:c5:ba:38:89:fb:3a:06:6d:77:
dc:75:90:9a:f1:4a:1f:99:52:f3:43:15:10:27:6c:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FF:8B:AB:6A:02:05:83:8A:D4:F9:39:3C:95:1E:BF:D7:40:7F:79
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/__-Lq2oCBYOK1Pk5PJUev9dAf3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.36.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f5:08:11:66:7a:ad:7d:4e:7f:11:65:4b:2d:6b:8c:a4:6b:
9a:08:97:2e:a6:13:6b:ee:d6:23:92:0a:29:65:5d:22:a1:5f:
4f:f8:7b:6e:d5:56:dc:a4:86:40:12:2d:92:aa:37:c0:1f:6f:
58:de:04:db:fa:91:b4:cd:75:47:c2:54:36:01:9e:5d:ce:81:
e9:34:52:d5:f8:09:4c:db:c1:36:b4:74:1b:41:0d:6a:de:7d:
01:6b:37:0d:70:33:61:3b:ab:bc:39:90:40:82:03:4b:56:ce:
8f:9e:9e:57:68:3f:97:01:5e:2e:5d:b2:01:40:7c:c6:63:a7:
cd:7c:60:2c:39:68:59:cf:a5:db:b9:cd:06:b5:d4:df:57:61:
41:f9:37:e2:07:e2:67:2a:7c:4b:7f:d6:a9:90:fb:3d:ab:a8:
36:ae:81:2a:5c:ea:a2:d8:7a:ac:d0:53:ff:d4:09:e7:5b:6c:
c0:cf:77:46:4d:3d:79:97:eb:9d:38:56:2a:15:5e:ed:64:08:
91:c7:b7:e5:8d:d7:09:8b:8d:74:92:6e:f0:43:a0:b8:2e:94:
48:59:57:ac:d2:43:d0:27:42:a9:cc:c8:f6:e2:bc:46:c5:02:
95:75:69:e5:7c:6c:43:e9:9a:40:f0:73:83:2e:23:9b:e3:29:
a6:bc:c5:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHIrLATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDEw
MTAxMDI1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmZmZjhiYWI2YTAy
MDU4MzhhZDRmOTM5M2M5NTFlYmZkNzQwN2Y3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALmDFJXruvOsA2HqieQGSgG76uzlRrjH6yfy5bffd7KXi3E3
p2ps7MqkNKRMJrDPk86xUwzu1/rdNsBHnRhhOj/+3uxZufDt5sktJClxyxBiwLAH
XT+BBOeKHI9j3WniA2Ia9bl0Bl3sAwlhKjwQFqV6UR1G5u5FrncWxdQOZQHfEAEf
F4mMYDeE+gG+/Kj5gu6PqEMaNHYM8CMgbzN4mdzGcTzh1RDow+mwxZk/VDJ9IxcO
/OQygCkTS4eMj2chIs0fb0l/WPK0Di9DMNFYYcNABNtRZe2Cnh70vWei5WAEsTyO
MWzzxbo4ifs6Bm133HWQmvFKH5lS80MVECds//MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT//4uragIFg4rU+Tk8lR6/10B/eTAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L19fLUxxMm9DQllPSzFQazVQSlVldjlkQWYzay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFd4JDANBgkqhkiG9w0BAQsFAAOC
AQEAefUIEWZ6rX1OfxFlSy1rjKRrmgiXLqYTa+7WI5IKKWVdIqFfT/h7btVW3KSG
QBItkqo3wB9vWN4E2/qRtM11R8JUNgGeXc6B6TRS1fgJTNvBNrR0G0ENat59AWs3
DXAzYTurvDmQQIIDS1bOj56eV2g/lwFeLl2yAUB8xmOnzXxgLDloWc+l27nNBrXU
31dhQfk34gfiZyp8S3/WqZD7PauoNq6BKlzqoth6rNBT/9QJ51tswM93Rk09eZfr
nThWKhVe7WQIkce35Y3XCYuNdJJu8EOguC6USFlXrNJD0CdCqczI9uK8RsUClXVp
5XxsQ+maQPBzgy4jm+MpprzFQw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org