Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/23kGCJ8r0DD7IDa4RhO2WKtLWj0.roa
File: 23kGCJ8r0DD7IDa4RhO2WKtLWj0.roa (raw, json)
Hash identifier: K6kHNSK1jVWdCCcqptFuOZIB5XrLzBKUSmfyLsXle7o=
Subject key identifier: DB:79:06:08:9F:2B:D0:30:FB:20:36:B8:46:13:B6:58:AB:4B:5A:3D
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 04D871D7
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/23kGCJ8r0DD7IDa4RhO2WKtLWj0.roa
Signing time: Sun 15 May 2022 08:36:40 +0000
ROA not before: Sun 15 May 2022 08:36:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21317
IP address blocks: 109.205.92.0/24 maxlen: 24
109.205.94.0/24 maxlen: 24
109.205.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81293783 (0x4d871d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: May 15 08:36:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db7906089f2bd030fb2036b84613b658ab4b5a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:82:1b:c4:e9:ad:24:98:56:53:a6:85:df:
75:a9:28:c2:d6:03:f6:11:62:78:c1:87:c5:ee:28:
8b:69:7f:94:95:2c:be:4e:ac:d3:35:18:07:2b:a1:
4d:9f:fc:d3:c0:43:c8:4d:aa:b1:5a:8f:2b:00:fa:
45:39:f5:70:5f:4d:64:da:8d:73:df:08:62:a6:f4:
a7:d0:57:7a:e9:e4:b4:12:7d:ee:73:b2:f4:5c:51:
29:a4:07:77:81:a8:f0:4a:ff:45:79:31:81:b4:2f:
77:23:0a:3a:c1:55:02:bd:d2:fc:74:1b:95:c6:27:
00:e4:f3:20:da:4c:d8:e4:5e:7d:06:2e:30:d6:22:
33:43:79:cd:32:30:64:c0:16:7f:46:9c:b1:e3:ce:
e2:6d:e5:30:48:15:f4:fa:9e:bd:c3:f4:5f:1c:70:
2c:a7:9e:b8:c4:a8:10:12:3d:15:8c:f6:ae:8f:e8:
24:d9:94:14:d5:29:d3:7c:66:01:72:21:ad:72:c5:
71:74:be:d2:9c:88:fd:07:f7:0a:0b:ff:a5:d7:2a:
a0:05:11:20:39:9c:c3:63:11:f4:f5:0a:fa:81:d2:
51:84:d0:99:ad:02:25:82:68:a3:29:fe:c0:c3:4e:
2f:c0:e2:36:31:0c:8f:df:db:b6:35:6c:05:21:c3:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:79:06:08:9F:2B:D0:30:FB:20:36:B8:46:13:B6:58:AB:4B:5A:3D
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/23kGCJ8r0DD7IDa4RhO2WKtLWj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.92.0-109.205.94.255
Signature Algorithm: sha256WithRSAEncryption
51:ae:9c:bb:d9:30:26:a2:89:70:2b:c8:e0:58:0a:0a:69:38:
7c:68:a9:f9:80:2d:d8:cd:8e:4f:6c:67:c2:1d:86:81:98:8a:
42:f6:c8:07:fb:ff:0a:3d:ad:9d:f1:4f:3b:ca:8d:13:37:69:
df:ee:ea:4a:60:45:99:71:75:74:f9:3f:aa:18:6f:c4:b8:32:
48:c6:65:51:7d:04:23:00:8b:d4:a9:6d:a2:ab:9b:19:a1:7d:
cb:90:56:54:2f:cc:82:37:cc:04:dd:95:ab:5a:3c:d1:53:1f:
a1:7d:ed:1e:b6:d5:73:45:a8:99:e6:f8:25:d6:2c:f5:1f:c2:
1b:ae:99:d7:15:79:58:3a:5a:ce:c1:d8:bc:25:2d:a2:91:7c:
96:00:ee:52:d1:42:76:05:61:5a:31:12:79:0b:24:d4:42:47:
7c:dc:44:1c:53:12:68:44:2e:c6:f9:c0:5c:ac:11:a3:03:bb:
c2:ae:44:d5:54:ca:24:ed:24:82:e5:1f:2d:47:4d:af:96:ee:
31:c5:a6:16:37:45:30:38:8a:03:c3:9f:6f:60:20:a1:15:4d:
bd:bc:c8:43:13:8c:63:71:50:18:9c:8b:6b:de:09:b4:ec:fc:
ee:87:f2:02:a9:3e:c7:78:d0:3f:fc:22:fe:59:3f:40:e3:bf:
d7:6b:d6:eb
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBNhx1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YWY2MTc5OGRkMTg5NjVjMDI3YWZhN2Y5M2FlMDMwZmY1ZTFkNzZlMB4XDTIyMDUx
NTA4MzY0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGI3OTA2MDg5ZjJi
ZDAzMGZiMjAzNmI4NDYxM2I2NThhYjRiNWEzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMWtghvE6a0kmFZTpoXfdakowtYD9hFieMGHxe4oi2l/lJUs
vk6s0zUYByuhTZ/808BDyE2qsVqPKwD6RTn1cF9NZNqNc98IYqb0p9BXeunktBJ9
7nOy9FxRKaQHd4Go8Er/RXkxgbQvdyMKOsFVAr3S/HQblcYnAOTzINpM2ORefQYu
MNYiM0N5zTIwZMAWf0acsePO4m3lMEgV9PqevcP0XxxwLKeeuMSoEBI9FYz2ro/o
JNmUFNUp03xmAXIhrXLFcXS+0pyI/Qf3Cgv/pdcqoAURIDmcw2MR9PUK+oHSUYTQ
ma0CJYJooyn+wMNOL8DiNjEMj9/btjVsBSHDRk0CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTbeQYInyvQMPsgNrhGE7ZYq0taPTAfBgNVHSMEGDAWgBQK9heY3RiWXAJ6
+n+TrgMP9eHXbjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0N2WVhtTjBZbGx3Q2V2cF9rNjRERF9YaDEyNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGQvNjE1MTY0LTZkOTYtNDg4YS05NmJhLWQ2ZTFlMzQ3ZjljNy8x
LzIza0dDSjhyMEREN0lEYTRSaE8yV0t0TFdqMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQv
NjE1MTY0LTZkOTYtNDg4YS05NmJhLWQ2ZTFlMzQ3ZjljNy8xL0N2WVhtTjBZbGx3
Q2V2cF9rNjRERF9YaDEyNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQCbc1cAwQAbc1eMA0GCSqGSIb3
DQEBCwUAA4IBAQBRrpy72TAmoolwK8jgWAoKaTh8aKn5gC3YzY5PbGfCHYaBmIpC
9sgH+/8KPa2d8U87yo0TN2nf7upKYEWZcXV0+T+qGG/EuDJIxmVRfQQjAIvUqW2i
q5sZoX3LkFZUL8yCN8wE3ZWrWjzRUx+hfe0ettVzRaiZ5vgl1iz1H8IbrpnXFXlY
OlrOwdi8JS2ikXyWAO5S0UJ2BWFaMRJ5CyTUQkd83EQcUxJoRC7G+cBcrBGjA7vC
rkTVVMok7SSC5R8tR02vlu4xxaYWN0UwOIoDw59vYCChFU29vMhDE4xjcVAYnItr
3gm07Pzuh/ICqT7HeNA//CL+WT9A47/Xa9br
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:41 2023 by rpki-client on console-fra.rpki-client.org