Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/iYEz9cTWtxGcckEFW7faMHhS1UM.roa
File: iYEz9cTWtxGcckEFW7faMHhS1UM.roa (raw, json)
Hash identifier: qHdnllv7B9SdmnIwvpEa3CD1raUlrUZngQJROP2K4dI=
Subject key identifier: 89:81:33:F5:C4:D6:B7:11:9C:72:41:05:5B:B7:DA:30:78:52:D5:43
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 0A1ACAE2
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/iYEz9cTWtxGcckEFW7faMHhS1UM.roa
Signing time: Sat 01 Jan 2022 16:11:00 +0000
ROA not before: Sat 01 Jan 2022 16:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50419
IP address blocks: 109.95.184.0/24 maxlen: 24
2001:67c:118::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169528034 (0xa1acae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Jan 1 16:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=898133f5c4d6b7119c7241055bb7da307852d543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:05:d9:d7:83:f4:9e:1f:10:c3:69:19:0f:d9:
7f:16:12:0b:7c:7c:e5:a3:12:57:16:10:52:dc:23:
89:ce:c1:91:d8:3a:32:1e:70:62:87:99:04:0d:6d:
ab:f2:e0:19:6c:6c:a0:cf:27:27:b6:cc:f7:57:7a:
45:63:d1:23:cf:2c:ee:a3:3d:ee:b6:2a:b4:36:7e:
b3:b9:ba:b7:9b:76:10:57:2f:27:85:8d:a8:70:bc:
54:f0:76:1c:cd:b1:c0:78:a3:5c:53:88:72:c1:75:
7c:9c:59:e8:38:a5:e6:3a:9e:ec:1f:20:5d:12:60:
ee:e1:bb:4b:5a:c2:7a:df:d8:7a:a1:b0:70:5c:6d:
34:65:eb:5d:72:21:71:5a:78:2b:92:96:2e:d9:e0:
98:59:fc:49:7e:92:3c:ba:66:26:d5:73:d5:99:5d:
e1:9e:aa:b9:29:58:23:8f:73:72:1b:ab:81:99:a3:
d8:cd:fe:6b:38:47:1d:70:ef:90:2a:6a:80:77:5d:
c5:ff:38:ed:31:4a:73:c9:a7:ac:c5:a2:55:44:e4:
70:e7:bc:ee:5e:25:02:bc:e3:5c:ee:74:76:fb:fa:
66:1a:f1:ad:2b:3b:2c:3a:f9:76:b3:ee:5c:8c:39:
f3:d7:b6:cf:f4:5d:82:34:46:1c:16:92:71:55:05:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:81:33:F5:C4:D6:B7:11:9C:72:41:05:5B:B7:DA:30:78:52:D5:43
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/iYEz9cTWtxGcckEFW7faMHhS1UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.184.0/24
IPv6:
2001:67c:118::/48
Signature Algorithm: sha256WithRSAEncryption
48:0c:aa:fd:c0:cd:54:62:e0:ec:5a:3d:09:92:db:3d:1c:4b:
4d:4e:bb:fe:53:a5:2e:af:8a:34:76:89:82:14:22:7a:d8:74:
5e:6c:4b:8e:9f:24:57:15:33:32:91:eb:a0:e5:ad:a6:01:58:
4a:31:a4:9d:81:71:90:8f:d4:ec:f6:6c:89:ec:e6:c9:40:56:
8b:f7:6d:be:dd:74:29:43:4f:3c:80:58:a6:3c:95:36:7d:fb:
4d:44:ff:6e:31:56:0a:83:68:6e:a6:a1:4c:96:28:e5:fc:c2:
03:0e:11:e3:4f:de:23:0b:37:ce:9f:bd:c2:1d:8e:70:13:11:
18:83:f2:36:95:89:02:97:78:d3:5e:8a:2f:37:59:5a:3d:09:
e4:6f:00:5e:64:58:f2:23:dd:f5:4d:8d:98:57:c4:9c:fc:14:
f1:ef:54:88:df:c0:df:12:9f:a3:32:e9:1b:b4:8c:af:35:c0:
69:21:fa:0d:70:ec:20:a1:4a:35:0a:1c:44:4f:db:cc:a1:31:
e8:d2:a9:70:7a:9f:55:f5:44:84:f1:12:4e:d3:01:9e:bf:a7:
e3:45:a6:f3:85:c6:40:96:ab:15:8b:70:65:02:d9:3d:22:0d:
9b:19:d1:0d:4c:96:a5:a4:5a:a0:db:27:ca:69:0e:01:61:2e:
a0:72:8c:f7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEChrK4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NzgzYjYyYWI4YWVhNTIwNzcwYzU3NDA0YmU3NzcxZjY3OWVjMGI1MB4XDTIyMDEw
MTE2MTEwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODk4MTMzZjVjNGQ2
YjcxMTljNzI0MTA1NWJiN2RhMzA3ODUyZDU0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPEF2deD9J4fEMNpGQ/ZfxYSC3x85aMSVxYQUtwjic7Bkdg6
Mh5wYoeZBA1tq/LgGWxsoM8nJ7bM91d6RWPRI88s7qM97rYqtDZ+s7m6t5t2EFcv
J4WNqHC8VPB2HM2xwHijXFOIcsF1fJxZ6Dil5jqe7B8gXRJg7uG7S1rCet/YeqGw
cFxtNGXrXXIhcVp4K5KWLtngmFn8SX6SPLpmJtVz1Zld4Z6quSlYI49zchurgZmj
2M3+azhHHXDvkCpqgHddxf847TFKc8mnrMWiVUTkcOe87l4lArzjXO50dvv6Zhrx
rSs7LDr5drPuXIw589e2z/RdgjRGHBaScVUFhLECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSJgTP1xNa3EZxyQQVbt9oweFLVQzAfBgNVHSMEGDAWgBTng7YquK6lIHcM
V0BL53cfZ57AtTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzU0TzJLcml1cFNCM0RGZEFTLWQzSDJlZXdMVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGEvZmFkYjNmLWRjOTYtNDkwMi04NmViLTE5ZGY1YjRkMTAxNC8x
L2lZRXo5Y1RXdHhHY2NrRUZXN2ZhTUhoUzFVTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEv
ZmFkYjNmLWRjOTYtNDkwMi04NmViLTE5ZGY1YjRkMTAxNC8xLzU0TzJLcml1cFNC
M0RGZEFTLWQzSDJlZXdMVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAG1fuDAPBAIAAjAJAwcAIAEGfAEY
MA0GCSqGSIb3DQEBCwUAA4IBAQBIDKr9wM1UYuDsWj0Jkts9HEtNTrv+U6Uur4o0
domCFCJ62HRebEuOnyRXFTMykeug5a2mAVhKMaSdgXGQj9Ts9myJ7ObJQFaL922+
3XQpQ088gFimPJU2fftNRP9uMVYKg2hupqFMlijl/MIDDhHjT94jCzfOn73CHY5w
ExEYg/I2lYkCl3jTXoovN1laPQnkbwBeZFjyI931TY2YV8Sc/BTx71SI38DfEp+j
MukbtIyvNcBpIfoNcOwgoUo1ChxET9vMoTHo0qlwep9V9USE8RJO0wGev6fjRabz
hcZAlqsVi3BlAtk9Ig2bGdENTJalpFqg2yfKaQ4BYS6gcoz3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:24 2024 by rpki-client on console-fra.rpki-client.org