Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MYdlLCPF6kg0I10TK2s5m-1SuZA.roa
File: MYdlLCPF6kg0I10TK2s5m-1SuZA.roa (raw, json)
Hash identifier: GPPtEMRr7Rj8QNlARsplGdbxGJ7eRHFfu7tUp1fsmAw=
Subject key identifier: 31:87:65:2C:23:C5:EA:48:34:23:5D:13:2B:6B:39:9B:ED:52:B9:90
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0183425F2B286F16C0B9D95F563E91461DE2
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MYdlLCPF6kg0I10TK2s5m-1SuZA.roa
Signing time: Thu 15 Sep 2022 18:17:56 +0000
ROA not before: Thu 15 Sep 2022 18:17:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150303
IP address blocks: 109.122.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:42:5f:2b:28:6f:16:c0:b9:d9:5f:56:3e:91:46:1d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 15 18:17:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3187652c23c5ea4834235d132b6b399bed52b990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:1a:74:e3:0a:60:2d:5d:7f:46:dc:9c:13:
44:0b:a8:4e:91:da:5b:c7:f8:2b:a1:f8:a6:f4:d5:
0d:af:f7:b3:34:2e:6b:e6:8b:a0:3c:da:ea:52:ba:
46:0c:b2:7c:72:90:a7:10:45:53:f2:62:a0:65:7d:
5a:4c:0a:73:dd:7c:7c:4f:0f:15:c4:38:35:40:e9:
1e:81:1d:25:08:37:99:48:7c:2f:58:20:2b:cf:b8:
6d:1f:a3:55:94:82:59:8e:51:88:de:2d:e0:02:1e:
77:f0:98:a6:3b:1a:12:8b:b7:f3:6d:f2:ad:75:e3:
6c:13:64:47:be:23:f1:5a:ac:ca:56:aa:35:61:3b:
a0:17:aa:d9:73:e6:59:30:54:3f:cc:20:01:a7:1c:
49:ba:a9:38:0a:b8:8f:8d:13:d5:57:a6:d1:39:0d:
ca:d2:ec:89:1d:f0:fb:f2:53:fb:00:1d:99:1d:6c:
ae:75:bd:10:ad:97:49:97:29:a6:06:f1:7d:e6:57:
39:8b:9d:2b:39:2f:df:d5:67:97:66:c7:bd:98:e1:
3b:73:25:92:e0:5c:58:97:bd:a7:0b:1d:ff:65:0b:
f3:c4:4a:7c:1d:a1:36:53:9d:23:55:de:75:d1:c5:
15:27:ca:35:ac:a7:9d:18:9a:6b:45:cc:ce:6d:5a:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:65:2C:23:C5:EA:48:34:23:5D:13:2B:6B:39:9B:ED:52:B9:90
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MYdlLCPF6kg0I10TK2s5m-1SuZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5c:77:f5:1c:fb:02:ad:c4:34:f2:e8:f1:b4:db:96:58:35:
e5:98:08:9b:7d:47:15:03:ba:15:56:92:f6:27:ee:5a:46:43:
73:6b:bd:51:8c:4d:51:18:2d:10:47:b2:45:35:ca:68:e5:3a:
43:6a:23:81:aa:ac:15:1a:0a:c5:98:26:28:cf:59:fb:6e:0f:
1f:eb:a2:d8:38:c1:b9:d6:79:0f:c9:df:f1:c9:43:01:c4:78:
e6:a5:8b:3f:5e:81:ca:75:ec:54:95:cc:18:66:b1:b3:83:c2:
28:a2:4e:30:ba:48:7d:ad:b4:55:e8:10:15:d5:1f:87:52:81:
7c:fd:68:34:da:19:d6:74:24:2c:01:b6:eb:05:0c:3f:63:c9:
7b:f3:4b:7d:b0:0c:af:70:5d:d7:a9:c2:74:f1:67:e0:ad:a1:
5e:fd:07:38:71:6d:c4:3d:e4:43:50:cc:ff:b9:6a:1c:eb:51:
d3:e0:47:b0:f7:6b:2a:94:90:54:b8:15:43:12:83:b1:3a:1b:
96:67:cc:a8:af:8b:0b:08:0a:a0:f5:a3:49:73:eb:06:8c:b9:
5a:7b:0b:ba:d5:cb:ed:71:40:ac:8a:93:f6:5e:4c:27:98:30:
51:f7:16:4d:6f:d9:04:aa:5b:9a:99:25:f5:6c:ab:ee:d3:79:
5f:02:05:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNCXysobxbAudlfVj6RRh3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjIwOTE1MTgxNzU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTg3NjUyYzIzYzVlYTQ4MzQyMzVkMTMyYjZiMzk5YmVkNTJiOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTkadOMKYC1df0bcnBNEC6hOkdpb
x/grofim9NUNr/ezNC5r5ougPNrqUrpGDLJ8cpCnEEVT8mKgZX1aTApz3Xx8Tw8V
xDg1QOkegR0lCDeZSHwvWCArz7htH6NVlIJZjlGI3i3gAh538JimOxoSi7fzbfKt
deNsE2RHviPxWqzKVqo1YTugF6rZc+ZZMFQ/zCABpxxJuqk4CriPjRPVV6bROQ3K
0uyJHfD78lP7AB2ZHWyudb0QrZdJlymmBvF95lc5i50rOS/f1WeXZse9mOE7cyWS
4FxYl72nCx3/ZQvzxEp8HaE2U50jVd510cUVJ8o1rKedGJprRczObVo1XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDGHZSwjxepINCNdEytrOZvtUrmQMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvTVlkbExDUEY2a2cwSTEwVEsyczVtLTFTdVpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoqMA0G
CSqGSIb3DQEBCwUAA4IBAQBfXHf1HPsCrcQ08ujxtNuWWDXlmAibfUcVA7oVVpL2
J+5aRkNza71RjE1RGC0QR7JFNcpo5TpDaiOBqqwVGgrFmCYoz1n7bg8f66LYOMG5
1nkPyd/xyUMBxHjmpYs/XoHKdexUlcwYZrGzg8Iook4wukh9rbRV6BAV1R+HUoF8
/Wg02hnWdCQsAbbrBQw/Y8l780t9sAyvcF3XqcJ08WfgraFe/Qc4cW3EPeRDUMz/
uWoc61HT4Eew92sqlJBUuBVDEoOxOhuWZ8yor4sLCAqg9aNJc+sGjLlaewu61cvt
cUCsipP2XkwnmDBR9xZNb9kEqluamSX1bKvu03lfAgUu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org