Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/2jh4YT6Qcc3x0rnd1kH9VjQ4JHU.roa
File: 2jh4YT6Qcc3x0rnd1kH9VjQ4JHU.roa (raw, json)
Hash identifier: FQLfflyZ3wyQT+8CM8MkLt0jCkTfZAMcAFUMO/wJ7mw=
Subject key identifier: DA:38:78:61:3E:90:71:CD:F1:D2:B9:DD:D6:41:FD:56:34:38:24:75
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01835AFCA5BD7AA397847B26342F521BEC7B
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/2jh4YT6Qcc3x0rnd1kH9VjQ4JHU.roa
Signing time: Tue 20 Sep 2022 13:00:50 +0000
ROA not before: Tue 20 Sep 2022 13:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 157.97.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:fc:a5:bd:7a:a3:97:84:7b:26:34:2f:52:1b:ec:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Sep 20 13:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da3878613e9071cdf1d2b9ddd641fd5634382475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:98:24:4d:c8:10:7f:96:ae:5d:68:02:7c:
1d:00:eb:38:b9:0f:d7:9f:13:e2:cd:e4:c0:9b:da:
86:e6:94:ba:4a:ca:95:ab:89:a5:46:d5:0e:a6:9c:
d9:6c:b8:6e:61:e1:67:dc:e7:c7:99:65:df:ab:73:
0f:46:ec:8a:2b:b0:b8:25:12:07:25:42:18:1a:1a:
27:78:62:e3:0c:8c:64:ca:5e:ca:6e:97:cc:1e:19:
66:a2:23:4a:53:87:62:c7:da:4f:6d:78:17:a5:bb:
90:8d:d4:e1:6a:ff:15:f3:0e:1d:fe:39:4d:c9:d8:
4b:25:3e:a1:72:fd:c9:c5:6f:22:b1:ec:73:1e:2a:
22:b4:e2:69:6a:ac:cb:98:82:22:0c:ac:30:f3:ac:
f3:64:ee:93:3f:40:9a:bf:ac:6f:4b:79:8f:8e:6d:
46:0d:ba:d3:00:88:ff:0a:f9:57:5c:bf:35:89:9e:
5d:0e:61:88:b4:b6:0f:d8:86:92:9c:aa:81:2c:c3:
5d:c6:67:dd:4f:82:eb:8e:a9:f9:f8:40:80:9b:ed:
be:0b:9d:d2:df:23:d2:ba:ae:b5:80:1e:d5:e2:6f:
7c:42:f9:93:9e:c4:25:a0:cf:b7:c5:bc:b3:84:2a:
3c:3c:2e:65:1c:0e:cd:3c:bd:c9:74:2a:0c:dc:c1:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:38:78:61:3E:90:71:CD:F1:D2:B9:DD:D6:41:FD:56:34:38:24:75
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/2jh4YT6Qcc3x0rnd1kH9VjQ4JHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.122.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1e:5e:74:6b:22:25:cf:7a:8b:24:b3:f6:87:ba:6f:1e:4c:
a0:57:f7:9f:b5:9e:26:29:8b:0b:03:b6:a7:b1:54:04:27:4c:
ed:00:33:28:65:76:5a:ca:e2:6c:b5:58:bb:ea:1c:66:bc:4b:
0d:cf:d9:84:c3:f1:79:a9:dd:65:81:a4:30:fb:12:35:8e:da:
a6:90:ac:d2:4c:d1:4e:01:bc:f0:9f:9e:19:f4:05:cf:a8:f8:
f6:f6:a7:69:c6:07:59:3f:75:aa:50:6e:29:ad:ef:e7:da:65:
c7:fa:84:91:5e:25:a8:d6:13:43:8c:17:09:dd:c7:33:d0:f1:
06:22:b5:05:57:bb:0a:a9:0e:66:76:59:d6:8e:7e:7d:18:4e:
f8:3a:e2:86:f6:38:b6:c0:2d:30:5b:3d:23:0a:09:ca:6f:ad:
dc:d6:79:c3:3a:33:b8:db:70:88:5e:a6:d9:50:30:ba:13:77:
ba:ac:03:8f:f7:4e:a6:bb:50:02:b0:c0:f5:2e:75:be:56:9c:
5e:5d:d7:bf:dc:26:e9:51:20:03:2a:1c:1c:22:02:e3:14:fe:
ec:d1:f1:12:f5:c7:58:ef:bd:ae:95:75:e2:a5:cd:ed:7c:15:
e9:65:63:e0:c7:95:58:2b:7f:6b:f6:77:7e:8d:5c:fb:85:d6:
99:cb:be:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNa/KW9eqOXhHsmNC9SG+x7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjIwOTIwMTMwMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTM4Nzg2MTNlOTA3MWNkZjFkMmI5ZGRkNjQxZmQ1NjM0MzgyNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5WYJE3IEH+Wrl1oAnwdAOs4uQ/X
nxPizeTAm9qG5pS6SsqVq4mlRtUOppzZbLhuYeFn3OfHmWXfq3MPRuyKK7C4JRIH
JUIYGhoneGLjDIxkyl7KbpfMHhlmoiNKU4dix9pPbXgXpbuQjdThav8V8w4d/jlN
ydhLJT6hcv3JxW8isexzHioitOJpaqzLmIIiDKww86zzZO6TP0Cav6xvS3mPjm1G
DbrTAIj/CvlXXL81iZ5dDmGItLYP2IaSnKqBLMNdxmfdT4Lrjqn5+ECAm+2+C53S
3yPSuq61gB7V4m98QvmTnsQloM+3xbyzhCo8PC5lHA7NPL3JdCoM3MF1iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNo4eGE+kHHN8dK53dZB/VY0OCR1MB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvMmpoNFlUNlFjYzN4MHJuZDFrSDlWalE0SkhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnWF6MA0G
CSqGSIb3DQEBCwUAA4IBAQB4Hl50ayIlz3qLJLP2h7pvHkygV/eftZ4mKYsLA7an
sVQEJ0ztADMoZXZayuJstVi76hxmvEsNz9mEw/F5qd1lgaQw+xI1jtqmkKzSTNFO
Abzwn54Z9AXPqPj29qdpxgdZP3WqUG4pre/n2mXH+oSRXiWo1hNDjBcJ3ccz0PEG
IrUFV7sKqQ5mdlnWjn59GE74OuKG9ji2wC0wWz0jCgnKb63c1nnDOjO423CIXqbZ
UDC6E3e6rAOP906mu1ACsMD1LnW+VpxeXde/3CbpUSADKhwcIgLjFP7s0fES9cdY
772ulXXipc3tfBXpZWPgx5VYK39r9nd+jVz7hdaZy77a
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:15 2023 by rpki-client on console-ams.rpki-client.org