Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/z4PDE52UpZBTO8sbgtP8rtCZ6ec.roa
File: z4PDE52UpZBTO8sbgtP8rtCZ6ec.roa (raw, json)
Hash identifier: JZvAmi0M2v///imyg7bUFqenPwyeAoSvna6Ql28+Xik=
Subject key identifier: CF:83:C3:13:9D:94:A5:90:53:3B:CB:1B:82:D3:FC:AE:D0:99:E9:E7
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0183DB28EF265B809728A2AC5F43476C4A8D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/z4PDE52UpZBTO8sbgtP8rtCZ6ec.roa
Signing time: Sat 15 Oct 2022 10:20:36 +0000
ROA not before: Sat 15 Oct 2022 10:20:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:db:28:ef:26:5b:80:97:28:a2:ac:5f:43:47:6c:4a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 15 10:20:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf83c3139d94a590533bcb1b82d3fcaed099e9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:39:22:cf:78:b6:2b:5e:b7:03:60:5a:14:
98:10:6b:83:12:e1:f7:1c:ca:34:b7:ff:07:70:10:
13:ce:ac:8d:0a:38:1a:b3:7b:d9:d9:70:91:47:8d:
15:a2:0c:75:3a:bf:a4:7d:78:54:cb:49:60:31:91:
aa:b4:4a:c3:f4:cb:22:11:bd:f4:c1:6b:07:4e:77:
ff:f4:e5:cd:ac:60:11:87:bb:f1:b6:4a:8c:94:a9:
55:a9:73:84:75:9e:41:a3:08:e6:12:10:85:4d:66:
ab:73:f6:07:f6:0a:e1:71:dc:7e:35:6a:bc:53:5e:
a3:ca:81:c7:25:3b:1f:b1:e2:40:b3:a4:e3:3d:2f:
06:43:cb:66:1b:70:f0:95:34:27:60:36:e5:20:0a:
47:bd:02:b8:a6:f1:98:15:6e:8c:2b:d5:72:3d:4a:
4b:c7:41:27:24:99:ae:c9:2a:9d:3d:33:b2:43:da:
03:9a:03:6e:52:4a:8a:70:af:a9:76:19:7a:06:43:
26:30:a9:ac:ee:45:b0:d9:bb:16:56:f7:0c:fd:63:
c5:71:5f:36:f0:bd:c9:82:fe:ee:90:92:dc:d2:b8:
0f:cb:7f:3f:83:e2:b3:b3:93:67:8b:34:40:47:67:
07:2b:c0:c4:f2:c9:76:c0:f7:5b:c8:87:13:70:d0:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:C3:13:9D:94:A5:90:53:3B:CB:1B:82:D3:FC:AE:D0:99:E9:E7
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/z4PDE52UpZBTO8sbgtP8rtCZ6ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:71:8d:67:d3:27:e0:a5:22:cb:84:65:f4:c0:8c:8e:a1:80:
07:61:f7:20:9d:37:2d:0e:77:47:af:e1:68:0d:20:f2:54:16:
80:b0:9d:6c:c7:27:54:c9:de:c2:73:3e:17:a1:1e:97:4b:af:
80:3d:6e:bb:ef:cc:e8:b4:a1:a5:65:6b:7e:3a:b0:8a:66:01:
5a:a5:cf:2f:f9:22:44:1e:37:26:4a:cb:e3:be:56:d4:01:b8:
37:06:9c:01:3b:8e:1d:f7:f0:10:ad:de:72:10:09:6f:08:e8:
2a:b2:60:f2:de:ad:8c:df:ee:fa:e5:0c:66:af:d7:4a:dd:06:
98:b6:ff:6e:9b:59:7e:4d:a4:ed:49:fe:d9:17:26:8e:43:aa:
83:56:a2:a1:c3:84:3f:b9:4e:80:37:f1:ca:1d:75:d5:5e:7f:
bc:3e:1e:c6:cc:dd:d6:f2:ae:61:8b:f9:d1:76:9c:74:e0:09:
84:c7:47:bf:d8:41:df:55:1c:1c:6b:15:48:23:51:57:4d:b7:
d5:dc:c6:36:30:d5:c1:87:f8:26:21:48:4e:e7:ab:45:d2:86:
61:1f:e8:87:5d:61:4c:3b:d3:bf:ef:4d:cc:13:ea:79:f9:0f:
3d:ce:24:c9:29:10:cb:68:88:c0:91:d3:f1:af:8a:35:26:95:
d2:4c:a5:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPbKO8mW4CXKKKsX0NHbEqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjIxMDE1MTAyMDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjgzYzMxMzlkOTRhNTkwNTMzYmNiMWI4MmQzZmNhZWQwOTllOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I45Is94titetwNgWhSYEGuDEuH3
HMo0t/8HcBATzqyNCjgas3vZ2XCRR40Vogx1Or+kfXhUy0lgMZGqtErD9MsiEb30
wWsHTnf/9OXNrGARh7vxtkqMlKlVqXOEdZ5BowjmEhCFTWarc/YH9grhcdx+NWq8
U16jyoHHJTsfseJAs6TjPS8GQ8tmG3DwlTQnYDblIApHvQK4pvGYFW6MK9VyPUpL
x0EnJJmuySqdPTOyQ9oDmgNuUkqKcK+pdhl6BkMmMKms7kWw2bsWVvcM/WPFcV82
8L3Jgv7ukJLc0rgPy38/g+Kzs5NnizRAR2cHK8DE8sl2wPdbyIcTcNAHxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM+DwxOdlKWQUzvLG4LT/K7QmennMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvejRQREU1MlVwWkJUTzhzYmd0UDhydENaNmVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXopMA0G
CSqGSIb3DQEBCwUAA4IBAQBOcY1n0yfgpSLLhGX0wIyOoYAHYfcgnTctDndHr+Fo
DSDyVBaAsJ1sxydUyd7Ccz4XoR6XS6+APW6778zotKGlZWt+OrCKZgFapc8v+SJE
HjcmSsvjvlbUAbg3BpwBO44d9/AQrd5yEAlvCOgqsmDy3q2M3+765Qxmr9dK3QaY
tv9um1l+TaTtSf7ZFyaOQ6qDVqKhw4Q/uU6AN/HKHXXVXn+8Ph7GzN3W8q5hi/nR
dpx04AmEx0e/2EHfVRwcaxVII1FXTbfV3MY2MNXBh/gmIUhO56tF0oZhH+iHXWFM
O9O/703ME+p5+Q89ziTJKRDLaIjAkdPxr4o1JpXSTKUL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org