Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/OoVpKR1-E42cbcmM1dmftzoO-Kg.roa
File: OoVpKR1-E42cbcmM1dmftzoO-Kg.roa (raw, json)
Hash identifier: QhbvQnqHDdAhsJJMPSIkb3+NQ3A80NWx4n3LPcCn35U=
Subject key identifier: 3A:85:69:29:1D:7E:13:8D:9C:6D:C9:8C:D5:D9:9F:B7:3A:0E:F8:A8
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 09454F97
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/OoVpKR1-E42cbcmM1dmftzoO-Kg.roa
Signing time: Sat 01 Jan 2022 15:59:05 +0000
ROA not before: Sat 01 Jan 2022 15:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43824
IP address blocks: 160.238.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155537303 (0x9454f97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jan 1 15:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a8569291d7e138d9c6dc98cd5d99fb73a0ef8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:c1:04:21:7f:33:d5:ae:86:a8:f8:23:7d:
49:86:13:29:ed:36:52:3a:96:ff:3e:d9:1f:1b:a5:
40:32:bf:9b:e5:ae:62:ee:2e:8a:f1:4f:8a:92:f6:
a9:93:28:da:72:58:7f:be:8e:79:fa:6e:dd:df:64:
67:23:8b:d2:a3:4d:d0:dc:cf:84:35:ab:c9:04:94:
0d:bf:bb:60:4b:70:45:70:ea:09:d2:ab:b3:27:61:
a5:72:e4:6f:96:d7:01:e1:b1:0c:d4:4c:d9:e3:aa:
f2:07:9f:b0:62:ff:13:36:87:61:fd:e9:b4:9d:4d:
c0:44:f2:be:9b:68:2a:fa:f7:7f:6b:29:cd:e4:e4:
02:ff:2e:69:20:be:34:e4:db:c4:14:42:7d:ff:97:
e6:96:c9:ea:82:ee:a8:82:80:f1:3e:5f:b9:24:6f:
a4:3a:10:89:23:73:e4:72:39:a1:d4:b6:76:3d:f4:
8b:f3:2f:8c:4f:76:dd:2d:cf:c8:fc:86:e4:f1:2f:
80:93:95:d6:65:50:98:e9:87:d5:fe:f9:f7:32:3b:
88:c7:06:68:75:41:16:35:d0:48:91:4d:9c:be:d9:
32:73:ee:8e:fa:0c:8f:ef:a0:26:ea:b2:d0:a5:71:
4d:fa:f3:5e:69:f2:16:42:43:7e:9c:96:58:a7:2c:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:69:29:1D:7E:13:8D:9C:6D:C9:8C:D5:D9:9F:B7:3A:0E:F8:A8
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/OoVpKR1-E42cbcmM1dmftzoO-Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.121.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d1:06:5d:6f:1e:23:17:36:b5:80:d3:c1:de:7a:94:ea:e3:
b6:c5:c4:cb:b9:16:58:92:16:5e:51:18:41:9b:d8:a2:63:42:
7b:60:a6:0d:06:62:f2:44:92:2f:b7:fb:20:34:9a:90:b2:e6:
55:d0:08:44:82:72:8d:aa:c4:86:4f:80:91:b2:d3:1b:13:da:
e3:df:5d:ff:e7:58:15:70:32:6b:49:fd:20:04:6a:c8:c5:d3:
2a:48:e3:47:89:1c:41:bc:5b:28:66:dd:91:f3:13:fa:4b:01:
e8:8e:71:c9:57:b1:9b:ab:26:40:41:2a:04:e8:cb:f0:7c:5f:
fb:55:3d:d9:1a:36:4e:5e:de:71:41:e3:70:86:fd:cd:10:22:
b4:7b:eb:0f:3e:01:de:d5:73:28:13:13:9b:ae:c6:73:a5:0e:
77:84:9f:c1:f0:7c:4e:f3:9b:fe:5c:78:46:27:8b:3c:ff:18:
a5:27:10:ca:4f:54:7c:1a:7f:18:4b:b8:72:78:5d:5a:ca:e2:
4a:ea:b5:6f:bf:e0:72:42:46:9e:f3:e7:64:07:ae:0e:20:54:
0f:1e:71:b1:7a:67:be:6e:a7:08:c9:ae:61:86:91:cb:74:ac:
ae:e5:d3:fd:8d:69:1c:99:97:33:b9:7f:17:0b:17:67:b0:e3:
c4:ed:dd:4e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECUVPlzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MTcyYzVhZWYzM2MwNmM0YWVmMmRhYzhmMDUwM2ZjYmRkOWE3Mjg3MB4XDTIyMDEw
MTE1NTkwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2E4NTY5MjkxZDdl
MTM4ZDljNmRjOThjZDVkOTlmYjczYTBlZjhhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOJ6wQQhfzPVroao+CN9SYYTKe02UjqW/z7ZHxulQDK/m+Wu
Yu4uivFPipL2qZMo2nJYf76Oefpu3d9kZyOL0qNN0NzPhDWryQSUDb+7YEtwRXDq
CdKrsydhpXLkb5bXAeGxDNRM2eOq8gefsGL/EzaHYf3ptJ1NwETyvptoKvr3f2sp
zeTkAv8uaSC+NOTbxBRCff+X5pbJ6oLuqIKA8T5fuSRvpDoQiSNz5HI5odS2dj30
i/MvjE923S3PyPyG5PEvgJOV1mVQmOmH1f759zI7iMcGaHVBFjXQSJFNnL7ZMnPu
jvoMj++gJuqy0KVxTfrzXmnyFkJDfpyWWKcsVn0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ6hWkpHX4TjZxtyYzV2Z+3Og74qDAfBgNVHSMEGDAWgBTBcsWu8zwGxK7y
2sjwUD/L3ZpyhzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dYTEZydk04QnNTdTh0ckk4RkFfeTkyYWNvYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzcvMzA2MzMwLTExZDItNDQzZi04MzQyLWVhNTg3MDY1MzA3Ni8x
L09vVnBLUjEtRTQyY2JjbU0xZG1mdHpvTy1LZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcv
MzA2MzMwLTExZDItNDQzZi04MzQyLWVhNTg3MDY1MzA3Ni8xL3dYTEZydk04QnNT
dTh0ckk4RkFfeTkyYWNvYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKDueTANBgkqhkiG9w0BAQsFAAOC
AQEAhdEGXW8eIxc2tYDTwd56lOrjtsXEy7kWWJIWXlEYQZvYomNCe2CmDQZi8kSS
L7f7IDSakLLmVdAIRIJyjarEhk+AkbLTGxPa499d/+dYFXAya0n9IARqyMXTKkjj
R4kcQbxbKGbdkfMT+ksB6I5xyVexm6smQEEqBOjL8Hxf+1U92Ro2Tl7ecUHjcIb9
zRAitHvrDz4B3tVzKBMTm67Gc6UOd4SfwfB8TvOb/lx4RieLPP8YpScQyk9UfBp/
GEu4cnhdWsriSuq1b7/gckJGnvPnZAeuDiBUDx5xsXpnvm6nCMmuYYaRy3SsruXT
/Y1pHJmXM7l/FwsXZ7DjxO3dTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:10 2024 by rpki-client on console-ams.rpki-client.org