Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/1M9QYOqxhLiBShO1NvLD2ga7yww.roa
File: 1M9QYOqxhLiBShO1NvLD2ga7yww.roa (raw, json)
Hash identifier: 0NFizmQAQy8AnYhoS0xt/ano90aerKldcF9ZOCowA+s=
Subject key identifier: D4:CF:50:60:EA:B1:84:B8:81:4A:13:B5:36:F2:C3:DA:06:BB:CB:0C
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 5D5951
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/1M9QYOqxhLiBShO1NvLD2ga7yww.roa
Signing time: Fri 24 Jun 2022 08:32:47 +0000
ROA not before: Fri 24 Jun 2022 08:32:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8211
IP address blocks: 145.72.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6117713 (0x5d5951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Jun 24 08:32:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4cf5060eab184b8814a13b536f2c3da06bbcb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:4f:17:dd:9d:d9:25:9b:c4:b2:3a:01:df:
82:80:76:ee:c3:04:10:d0:f2:fb:e4:30:ca:8a:52:
b4:75:dd:de:f0:32:66:33:1e:13:bc:77:d9:d4:f5:
f8:39:65:4b:cf:b0:76:e4:e1:cb:ae:80:b8:95:ba:
dc:35:e1:12:91:ba:b4:62:bb:d3:e1:9b:46:4a:20:
fd:15:06:b6:09:8c:3c:ac:ec:7f:3d:3e:96:86:57:
34:46:12:f5:0c:4d:43:96:19:d1:70:af:0d:00:1a:
0a:89:f3:c4:49:f2:4c:06:2a:ae:fc:41:37:67:cd:
8e:7a:94:34:35:77:b4:d3:a2:1e:ab:e6:b3:4f:40:
d5:17:4b:b9:9a:59:2d:05:73:13:40:a2:ab:32:99:
4b:00:df:e7:5a:52:0c:3e:81:f3:0c:e0:eb:6e:44:
7f:96:22:7a:77:7f:e8:fd:2d:b3:21:70:6a:81:20:
08:05:70:d6:59:8e:64:f1:ec:ef:23:f8:fb:11:6d:
06:ab:97:d7:ac:50:60:87:86:aa:ce:f0:af:ef:60:
05:8c:c5:6a:b7:ee:3a:f9:17:82:c7:98:54:55:72:
e7:29:08:51:70:87:80:e9:a9:c9:e2:d6:9e:94:87:
88:fe:cc:a4:c3:2a:d3:cb:53:b4:83:30:0e:db:7a:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:50:60:EA:B1:84:B8:81:4A:13:B5:36:F2:C3:DA:06:BB:CB:0C
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/1M9QYOqxhLiBShO1NvLD2ga7yww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.72.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b1:97:40:5f:2d:02:f9:70:fa:a8:15:c1:6c:e8:0d:d9:50:
77:b7:a8:71:00:2c:6b:47:b1:2d:77:80:da:2e:b8:09:0f:26:
fb:92:82:0b:51:4a:de:f5:ca:2b:11:91:b8:91:45:d5:b4:4b:
45:14:2c:b4:4c:f2:c2:00:1e:61:0d:09:61:5a:cc:17:8b:6c:
72:14:c0:b6:04:3d:a0:7c:f5:ed:c2:e2:f8:1e:ed:43:3d:1e:
6d:72:a5:bc:ef:d7:b4:09:8c:9a:52:cf:8b:1c:98:01:30:ed:
09:c7:5a:ff:eb:cf:62:fd:39:5c:4c:b0:ca:3c:f6:83:42:0f:
3d:39:a7:4c:b7:34:d7:70:5c:2c:79:67:88:b0:4e:57:1f:fc:
e5:85:19:ca:1b:0a:5b:79:de:69:d5:9d:65:c2:7a:28:70:07:
5a:58:4d:ed:b0:31:a9:e0:54:bb:0f:af:eb:18:99:db:24:b4:
75:10:86:a1:f0:dc:da:a4:a3:c5:7c:7d:01:42:92:23:1a:f5:
c4:45:91:85:75:0b:ca:e9:12:8c:8b:1c:16:72:bf:fd:66:38:
b2:10:a0:00:53:ef:13:6b:b6:a8:2d:ef:87:95:50:71:ae:a5:
cb:f3:90:cc:ea:0c:de:d1:40:48:bc:9f:2d:d2:29:d7:f8:f3:
fb:01:2b:46
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDXVlRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
ODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBkNTNiNGQwHhcNMjIwNjI0
MDgzMjQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkNGNmNTA2MGVhYjE4
NGI4ODE0YTEzYjUzNmYyYzNkYTA2YmJjYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz95PF92d2SWbxLI6Ad+CgHbuwwQQ0PL75DDKilK0dd3e8DJm
Mx4TvHfZ1PX4OWVLz7B25OHLroC4lbrcNeESkbq0YrvT4ZtGSiD9FQa2CYw8rOx/
PT6Whlc0RhL1DE1DlhnRcK8NABoKifPESfJMBiqu/EE3Z82OepQ0NXe006Ieq+az
T0DVF0u5mlktBXMTQKKrMplLAN/nWlIMPoHzDODrbkR/liJ6d3/o/S2zIXBqgSAI
BXDWWY5k8ezvI/j7EW0Gq5fXrFBgh4aqzvCv72AFjMVqt+46+ReCx5hUVXLnKQhR
cIeA6anJ4taelIeI/sykwyrTy1O0gzAO23oDFQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNTPUGDqsYS4gUoTtTbyw9oGu8sMMB8GA1UdIwQYMBaAFHCGEuhwOmYIicoP
RXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Y0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTljLzEv
MU05UVlPcXhoTGlCU2hPMU52TEQyZ2E3eXd3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8y
MmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTljLzEvY0lZUzZIQTZaZ2lK
eWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkUhkMA0GCSqGSIb3DQEBCwUAA4IB
AQA6sZdAXy0C+XD6qBXBbOgN2VB3t6hxACxrR7Etd4DaLrgJDyb7koILUUre9cor
EZG4kUXVtEtFFCy0TPLCAB5hDQlhWswXi2xyFMC2BD2gfPXtwuL4Hu1DPR5tcqW8
79e0CYyaUs+LHJgBMO0Jx1r/689i/TlcTLDKPPaDQg89OadMtzTXcFwseWeIsE5X
H/zlhRnKGwpbed5p1Z1lwnoocAdaWE3tsDGp4FS7D6/rGJnbJLR1EIah8NzapKPF
fH0BQpIjGvXERZGFdQvK6RKMixwWcr/9ZjiyEKAAU+8Ta7aoLe+HlVBxrqXL85DM
6gze0UBIvJ8t0inX+PP7AStG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org