Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/0h0DrBjr_9J1dErvF5-SR-jgl1w.roa
File: 0h0DrBjr_9J1dErvF5-SR-jgl1w.roa (raw, json)
Hash identifier: uHd9c9wuDdpUiME3jgFQu6dqG46uWFcFz7b90vxJ6hs=
Subject key identifier: D2:1D:03:AC:18:EB:FF:D2:75:74:4A:EF:17:9F:92:47:E8:E0:97:5C
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 1706F045
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/0h0DrBjr_9J1dErvF5-SR-jgl1w.roa
Signing time: Sat 01 Jan 2022 02:01:48 +0000
ROA not before: Sat 01 Jan 2022 02:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33915
IP address blocks: 185.72.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386330693 (0x1706f045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Jan 1 02:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d21d03ac18ebffd275744aef179f9247e8e0975c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:b4:3b:77:55:fc:4f:44:d5:dd:77:ad:e4:
b5:83:a6:96:76:97:13:1d:f9:50:85:d5:b0:22:75:
33:be:57:0a:e2:b4:3f:12:9d:e2:22:e1:56:b1:1b:
63:b5:c7:f0:91:05:5a:85:6b:c6:0a:ec:35:1a:da:
9a:f2:f4:9b:8e:95:1f:a4:f8:d1:9b:3c:58:f9:39:
e6:e5:69:14:57:ad:0c:b1:04:ec:5d:9c:e5:b0:77:
ee:d8:49:78:fa:e3:1f:d7:1a:25:19:ef:ed:f8:f7:
1f:76:f3:9e:f5:fc:21:55:b6:bc:a8:dd:bd:fe:95:
5f:35:b3:b7:5d:b9:32:2a:50:60:f7:b4:29:a6:8f:
c2:b0:7b:98:ec:0a:6a:b3:b9:50:f5:14:00:58:f0:
60:21:05:5b:0f:70:5b:48:93:f4:95:56:e3:7d:83:
c1:ef:b9:3e:2d:7c:3d:93:0c:21:a0:bb:ca:7a:a2:
f8:74:6d:bf:b9:be:4a:98:34:37:f9:bf:51:6a:23:
f8:d2:a7:56:ae:1c:b4:18:98:8f:01:46:5c:d7:7c:
da:86:ef:37:e7:75:cd:92:5e:1c:63:fb:e9:1a:bf:
1f:55:67:7b:b5:4c:92:61:39:e2:47:ba:d0:15:fd:
4a:60:99:cf:59:09:5a:7a:81:d6:e5:02:72:2b:55:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1D:03:AC:18:EB:FF:D2:75:74:4A:EF:17:9F:92:47:E8:E0:97:5C
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/0h0DrBjr_9J1dErvF5-SR-jgl1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.124.0/22
Signature Algorithm: sha256WithRSAEncryption
34:8d:09:30:f2:36:4e:4a:23:6b:24:42:52:8a:e9:ba:7e:75:
7d:6a:d0:b7:54:6b:51:6c:f9:5a:4d:39:de:7d:0e:56:6b:af:
b4:4d:91:3e:b2:69:5f:c5:1e:8a:6d:70:12:80:39:0e:ef:71:
bc:f2:a7:9d:4c:e0:4e:82:20:ca:bb:26:52:df:9e:e2:83:b5:
f1:54:67:2c:2b:f5:f2:ce:ca:f7:38:50:40:c1:3f:d2:68:55:
6e:49:18:ac:6a:ec:03:ee:0f:19:54:25:3a:c2:36:a6:b1:e5:
21:61:f3:2f:86:1a:45:c2:8c:82:f8:4f:f5:92:57:d6:f7:f6:
98:86:69:5c:a1:2a:e9:6f:f8:9f:8e:73:cf:ff:a2:a4:6f:5c:
fe:58:ee:0f:29:d9:9c:fc:e6:f3:1b:f4:89:90:68:28:06:b9:
d0:be:bd:d5:32:61:5e:7a:70:6a:3f:d6:91:7c:c3:6c:fe:ae:
8c:26:5c:c8:07:5c:4e:bb:5d:3c:d5:a2:cb:da:e5:5e:81:ca:
05:ab:fb:ec:a6:ca:01:a1:07:ce:1f:97:26:0d:b7:c4:49:8a:
34:e1:2d:63:ef:0c:1b:d0:19:40:5f:52:51:07:95:b1:d1:95:
20:ed:15:4d:85:53:8b:d8:6e:33:bf:39:28:c1:6a:a6:9b:d9:
7e:76:de:a1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFwbwRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NGRiMDRmOWM5MjMxN2VjYzdhMmFhZmYyY2E0ZDcwOThkMWJkMjZhMB4XDTIyMDEw
MTAyMDE0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDIxZDAzYWMxOGVi
ZmZkMjc1NzQ0YWVmMTc5ZjkyNDdlOGUwOTc1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALrbtDt3VfxPRNXdd63ktYOmlnaXEx35UIXVsCJ1M75XCuK0
PxKd4iLhVrEbY7XH8JEFWoVrxgrsNRramvL0m46VH6T40Zs8WPk55uVpFFetDLEE
7F2c5bB37thJePrjH9caJRnv7fj3H3bznvX8IVW2vKjdvf6VXzWzt125MipQYPe0
KaaPwrB7mOwKarO5UPUUAFjwYCEFWw9wW0iT9JVW432Dwe+5Pi18PZMMIaC7ynqi
+HRtv7m+Spg0N/m/UWoj+NKnVq4ctBiYjwFGXNd82obvN+d1zZJeHGP76Rq/H1Vn
e7VMkmE54ke60BX9SmCZz1kJWnqB1uUCcitVwWUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTSHQOsGOv/0nV0Su8Xn5JH6OCXXDAfBgNVHSMEGDAWgBQU2wT5ySMX7Mei
qv8spNcJjRvSajAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZOc0UtY2tqRi16SG9xcl9MS1RYQ1kwYjBtby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTMvNTkxYTQ2LTFlMjEtNDU5MC04NzRjLTU4YzdiZmNkY2ZkZi8x
LzBoMERyQmpyXzlKMWRFcnZGNS1TUi1qZ2wxdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMv
NTkxYTQ2LTFlMjEtNDU5MC04NzRjLTU4YzdiZmNkY2ZkZi8xL0ZOc0UtY2tqRi16
SG9xcl9MS1RYQ1kwYjBtby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlIfDANBgkqhkiG9w0BAQsFAAOC
AQEANI0JMPI2TkojayRCUorpun51fWrQt1RrUWz5Wk053n0OVmuvtE2RPrJpX8Ue
im1wEoA5Du9xvPKnnUzgToIgyrsmUt+e4oO18VRnLCv18s7K9zhQQME/0mhVbkkY
rGrsA+4PGVQlOsI2prHlIWHzL4YaRcKMgvhP9ZJX1vf2mIZpXKEq6W/4n45zz/+i
pG9c/ljuDynZnPzm8xv0iZBoKAa50L691TJhXnpwaj/WkXzDbP6ujCZcyAdcTrtd
PNWiy9rlXoHKBav77KbKAaEHzh+XJg23xEmKNOEtY+8MG9AZQF9SUQeVsdGVIO0V
TYVTi9huM785KMFqppvZfnbeoQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:07 2023 by rpki-client on console-ams.rpki-client.org