Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qjIqKJeQuFQywMBtbHneQe-7G70.roa
File: qjIqKJeQuFQywMBtbHneQe-7G70.roa (raw, json)
Hash identifier: 9xMDC8gNPVRWKBmLR6snpwJl7UXY1RfGHvbzoMsLa6Y=
Subject key identifier: AA:32:2A:28:97:90:B8:54:32:C0:C0:6D:6C:79:DE:41:EF:BB:1B:BD
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0184F6C81EAA5CE71F6295A7231EFBE0B89F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qjIqKJeQuFQywMBtbHneQe-7G70.roa
Signing time: Fri 09 Dec 2022 12:07:00 +0000
ROA not before: Fri 09 Dec 2022 12:07:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 109.122.43.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
109.122.41.0/24 maxlen: 24
109.122.42.0/24 maxlen: 24
109.122.47.0/24 maxlen: 24
109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
87.237.167.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
193.93.54.0/23 maxlen: 24
193.93.52.0/24 maxlen: 24
193.93.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:c8:1e:aa:5c:e7:1f:62:95:a7:23:1e:fb:e0:b8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 9 12:07:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa322a289790b85432c0c06d6c79de41efbb1bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:07:19:72:9b:57:71:3e:16:ec:6f:98:e2:
a7:2a:71:78:6c:8a:c7:b6:e9:9d:31:73:36:07:8b:
a2:f1:e6:27:e7:52:ca:d9:20:7a:d3:b8:1a:1d:1b:
60:15:ec:56:38:a8:28:64:f1:98:7c:91:30:4a:f1:
36:5e:9b:33:1b:1b:21:28:13:b8:87:99:f0:f2:70:
ef:d6:80:cf:2c:c2:00:82:27:b8:89:88:42:19:bd:
ec:7e:ad:fc:32:2b:39:a6:8d:d2:ca:eb:91:a9:f7:
33:74:52:32:83:c3:f9:85:29:f4:be:69:37:c6:87:
d8:14:ac:d9:87:7a:87:cc:84:49:38:91:83:1e:72:
d2:bd:c0:1a:82:01:3b:9f:cd:12:6d:1f:3f:c4:6f:
9c:2d:bc:b8:ef:71:10:28:e4:4e:80:b4:96:4b:ea:
e7:44:e4:5d:71:61:08:51:c8:4c:c5:1e:12:82:bd:
1f:69:be:7b:46:b1:ab:83:89:4f:e5:90:c3:28:0e:
36:5d:c6:d9:5c:4f:a6:0f:c2:02:61:d9:52:c2:13:
d7:56:11:13:15:ba:59:e6:1a:e5:50:f5:b4:77:61:
0b:31:97:dd:f5:5e:1b:f9:05:26:55:e5:8b:20:be:
51:da:c0:cd:14:6a:1a:40:1c:18:0c:d7:73:23:09:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:32:2A:28:97:90:B8:54:32:C0:C0:6D:6C:79:DE:41:EF:BB:1B:BD
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qjIqKJeQuFQywMBtbHneQe-7G70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.167.0/24
91.226.57.0/24
109.122.40.0/21
193.93.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:5e:01:b0:7d:61:2c:e1:f5:70:62:a4:50:14:37:14:c3:9f:
64:22:40:e3:32:42:67:ff:01:ce:da:04:11:ab:0b:e1:50:b3:
ed:4f:d5:a7:17:fb:ac:d7:dc:f6:94:f7:27:d0:af:12:9c:06:
f8:5d:9d:31:e2:be:eb:2f:2c:fc:37:71:fa:db:e0:84:e8:bf:
f2:ad:c4:0f:98:84:c1:e6:9a:1e:b2:34:58:5d:cc:bf:b5:38:
89:3c:af:ff:05:b4:e7:02:5e:31:7a:02:ea:2e:88:dc:4c:48:
d3:26:77:85:fa:6f:7d:c7:83:bf:56:40:84:47:54:d3:b8:d9:
78:56:5a:ad:fb:59:60:bd:64:1b:ac:cc:26:96:20:aa:45:7a:
52:79:10:9f:64:2c:56:fe:0d:73:d3:62:37:1a:2b:0d:27:27:
7a:4c:2b:5a:03:bc:b2:b2:da:cd:88:05:c6:32:09:59:dd:63:
36:27:86:28:f6:50:70:ee:21:65:5b:9c:54:6e:27:3d:7c:bd:
1c:6b:2d:fe:37:cd:21:90:20:54:8d:f1:05:89:ec:21:8c:7a:
3e:1d:6a:97:ff:6a:d4:0b:cb:7e:ec:bc:ff:e8:3a:25:3e:a9:
9a:49:8c:75:c2:40:52:26:69:d6:fc:9e:92:8a:09:82:38:0e:
98:6c:40:b6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYT2yB6qXOcfYpWnIx774LifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjIxMjA5MTIwNzAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTMyMmEyODk3OTBiODU0MzJjMGMwNmQ2Yzc5ZGU0MWVmYmIxYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGgHGXKbV3E+FuxvmOKnKnF4bIrH
tumdMXM2B4ui8eYn51LK2SB607gaHRtgFexWOKgoZPGYfJEwSvE2XpszGxshKBO4
h5nw8nDv1oDPLMIAgie4iYhCGb3sfq38Mis5po3SyuuRqfczdFIyg8P5hSn0vmk3
xofYFKzZh3qHzIRJOJGDHnLSvcAaggE7n80SbR8/xG+cLby473EQKOROgLSWS+rn
RORdcWEIUchMxR4Sgr0fab57RrGrg4lP5ZDDKA42XcbZXE+mD8ICYdlSwhPXVhET
FbpZ5hrlUPW0d2ELMZfd9V4b+QUmVeWLIL5R2sDNFGoaQBwYDNdzIwlHgQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKoyKiiXkLhUMsDAbWx53kHvuxu9MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvcWpJcUtKZVF1RlF5d01CdGJIbmVRZS03RzcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV+2nAwQA
W+I5AwQDbXooAwQCwV00MA0GCSqGSIb3DQEBCwUAA4IBAQAtXgGwfWEs4fVwYqRQ
FDcUw59kIkDjMkJn/wHO2gQRqwvhULPtT9WnF/us19z2lPcn0K8SnAb4XZ0x4r7r
Lyz8N3H62+CE6L/yrcQPmITB5poesjRYXcy/tTiJPK//BbTnAl4xegLqLojcTEjT
JneF+m99x4O/VkCER1TTuNl4Vlqt+1lgvWQbrMwmliCqRXpSeRCfZCxW/g1z02I3
GisNJyd6TCtaA7yystrNiAXGMglZ3WM2J4Yo9lBw7iFlW5xUbic9fL0cay3+N80h
kCBUjfEFiewhjHo+HWqX/2rUC8t+7Lz/6DolPqmaSYx1wkBSJmnW/J6SigmCOA6Y
bEC2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org