Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/A370g4SFy2tojwxY9LqBXKvv3h0.roa
File: A370g4SFy2tojwxY9LqBXKvv3h0.roa (raw, json)
Hash identifier: Vpi/3JTMQYakMgRV664+zFRq29ZhswbImNuUpjZiCMA=
Subject key identifier: 03:7E:F4:83:84:85:CB:6B:68:8F:0C:58:F4:BA:81:5C:AB:EF:DE:1D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01848E7A080EA898BD886F547EE692EAD505
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/A370g4SFy2tojwxY9LqBXKvv3h0.roa
Signing time: Sat 19 Nov 2022 06:01:12 +0000
ROA not before: Sat 19 Nov 2022 06:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 109.122.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8e:7a:08:0e:a8:98:bd:88:6f:54:7e:e6:92:ea:d5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 19 06:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=037ef4838485cb6b688f0c58f4ba815cabefde1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:91:71:42:e9:59:ce:4d:98:c4:b6:d0:47:
9a:f6:34:8f:6e:05:6a:14:a6:b9:6b:ce:a6:bd:9c:
3a:7e:d9:72:1f:83:a3:ad:bb:d2:54:3e:6c:d5:da:
da:3d:b1:51:29:3b:3a:33:42:9e:9b:e7:f5:2c:07:
5b:e4:ce:c9:7b:bf:3a:a7:90:da:52:91:49:c5:f1:
ef:38:e2:92:e6:c3:e2:4b:89:43:30:3a:e5:c0:e1:
e6:f7:0e:05:24:d9:b6:2a:59:42:e4:41:dd:ca:ce:
fa:c1:7d:15:ea:c8:d1:97:a8:de:e6:8f:05:bd:0f:
97:20:6e:de:29:54:16:27:6d:c1:df:6c:6c:51:1e:
d5:0a:46:19:92:f7:7a:e2:46:ed:ca:d5:a6:c1:2f:
d7:47:9d:21:43:12:b6:cd:5f:c0:ff:d2:d5:e3:f3:
f7:2c:4c:61:17:8f:cb:ef:31:7b:78:16:e1:c9:26:
a3:5e:f8:46:e3:4a:2f:fa:7e:6b:63:dc:e6:4d:01:
77:a1:23:de:49:43:e4:80:a8:75:55:d3:30:82:0b:
0b:60:92:d3:0b:22:d4:9e:fa:f6:88:8d:78:3b:b1:
92:7e:36:67:b5:7e:04:4a:a9:98:40:09:1f:80:36:
af:46:22:87:fb:c7:c4:b1:0e:8e:a2:ac:0b:77:4f:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:F4:83:84:85:CB:6B:68:8F:0C:58:F4:BA:81:5C:AB:EF:DE:1D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/A370g4SFy2tojwxY9LqBXKvv3h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c9:40:cc:65:65:04:e0:5f:b1:94:56:5c:df:8f:6d:fe:a3:
97:38:7b:5f:6d:f1:13:c1:bc:fb:51:ca:dc:2e:5b:0e:31:f7:
01:c3:4c:4e:3a:50:23:54:92:e3:84:83:1f:24:a7:85:c7:22:
71:86:60:05:72:ee:14:66:e6:6d:bd:2b:7b:46:2c:79:a2:6d:
3c:c1:19:3c:c9:2e:d3:5e:0f:47:ad:69:7f:69:a0:d3:12:10:
6f:ea:11:9a:f0:f7:55:5e:e5:80:74:83:d8:1a:5c:81:ee:be:
57:c2:12:9c:c8:48:6e:9d:b8:cb:48:b0:dc:d5:74:1b:a7:ed:
db:13:e0:21:e8:3f:5a:2a:e3:1d:3f:a4:8e:2b:8d:ae:87:62:
5e:97:37:13:89:dd:1d:b2:fd:5f:c0:99:fc:ad:9c:04:87:73:
19:aa:46:d6:7a:5f:12:3d:24:bb:44:d2:c2:0f:75:f1:c4:b4:
f1:1c:a2:b3:f3:84:f7:87:93:38:32:73:c8:2b:aa:f5:56:fd:
9f:e5:b5:7f:96:e0:65:ec:cc:d7:bc:f5:63:e5:cf:0e:87:6e:
20:96:f3:1e:8d:f9:52:ab:ec:ed:c8:38:2d:60:4b:f9:87:b0:
d3:ed:25:59:02:f5:e0:b1:a4:b6:91:11:e4:96:e8:c5:0e:c5:
db:6f:74:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSOeggOqJi9iG9UfuaS6tUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjIxMTE5MDYwMTEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzdlZjQ4Mzg0ODVjYjZiNjg4ZjBjNThmNGJhODE1Y2FiZWZkZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ+RcULpWc5NmMS20Eea9jSPbgVq
FKa5a86mvZw6ftlyH4OjrbvSVD5s1draPbFRKTs6M0Kem+f1LAdb5M7Je786p5Da
UpFJxfHvOOKS5sPiS4lDMDrlwOHm9w4FJNm2KllC5EHdys76wX0V6sjRl6je5o8F
vQ+XIG7eKVQWJ23B32xsUR7VCkYZkvd64kbtytWmwS/XR50hQxK2zV/A/9LV4/P3
LExhF4/L7zF7eBbhySajXvhG40ov+n5rY9zmTQF3oSPeSUPkgKh1VdMwggsLYJLT
CyLUnvr2iI14O7GSfjZntX4ESqmYQAkfgDavRiKH+8fEsQ6OoqwLd0+ugwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAN+9IOEhctraI8MWPS6gVyr794dMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvQTM3MGc0U0Z5MnRvand4WTlMcUJYS3Z2M2gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXotMA0G
CSqGSIb3DQEBCwUAA4IBAQCNyUDMZWUE4F+xlFZc349t/qOXOHtfbfETwbz7Ucrc
LlsOMfcBw0xOOlAjVJLjhIMfJKeFxyJxhmAFcu4UZuZtvSt7Rix5om08wRk8yS7T
Xg9HrWl/aaDTEhBv6hGa8PdVXuWAdIPYGlyB7r5XwhKcyEhunbjLSLDc1XQbp+3b
E+Ah6D9aKuMdP6SOK42uh2JelzcTid0dsv1fwJn8rZwEh3MZqkbWel8SPSS7RNLC
D3XxxLTxHKKz84T3h5M4MnPIK6r1Vv2f5bV/luBl7MzXvPVj5c8Oh24glvMejflS
q+ztyDgtYEv5h7DT7SVZAvXgsaS2kRHklujFDsXbb3T4
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org