Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/A9vUdiq3N-lTOav49s_wlt_-xRE.roa
File: A9vUdiq3N-lTOav49s_wlt_-xRE.roa (raw, json)
Hash identifier: r+WzOQ5+AFSvm1qBf6W5vmYnNe9b7+v8kjWH47l9rCo=
Subject key identifier: 03:DB:D4:76:2A:B7:37:E9:53:39:AB:F8:F6:CF:F0:96:DF:FE:C5:11
Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial: 082FBB31
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/A9vUdiq3N-lTOav49s_wlt_-xRE.roa
Signing time: Sat 01 Jan 2022 13:04:26 +0000
ROA not before: Sat 01 Jan 2022 13:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198819
IP address blocks: 109.235.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137345841 (0x82fbb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Validity
Not Before: Jan 1 13:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03dbd4762ab737e95339abf8f6cff096dffec511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:32:8b:e3:5e:62:49:12:38:d4:c2:a7:6c:
f6:5a:09:04:c5:63:6c:da:06:ee:12:39:40:bc:7d:
72:37:9f:46:2d:8d:5b:96:52:ea:33:ab:39:c6:33:
53:f9:f7:57:ad:4a:16:44:0d:9f:27:98:16:1e:a1:
08:8e:2d:22:93:60:e7:94:e5:75:c2:c7:03:eb:6a:
cb:5c:c4:fa:90:e5:62:16:ab:d9:61:cb:e5:ed:ce:
c5:5b:8b:28:b5:f7:f0:46:84:6a:e2:ea:2b:e1:57:
d3:12:fd:14:ac:6e:e8:3d:38:f2:0e:1b:10:e0:65:
36:00:4b:fe:d3:a1:dc:0f:70:3e:4a:49:3f:3e:f4:
2c:f5:f7:10:b3:59:f0:0d:e6:75:3e:a3:f2:71:d6:
84:2d:0c:df:93:11:d0:20:c0:23:b8:8a:10:13:d7:
3d:12:85:3a:26:fe:bf:a4:57:60:52:2a:b9:3d:f4:
ea:f9:eb:45:3d:0d:37:08:dd:41:e5:44:ae:47:6f:
25:ec:6f:e1:ee:b9:45:a7:98:9a:ea:fa:e9:8c:0e:
08:79:a4:17:e7:54:b6:84:eb:f3:18:18:04:f0:33:
c8:63:e4:fb:4b:d6:6f:b2:17:d1:ae:3a:73:d1:d6:
4a:84:4c:28:05:b9:42:cd:10:27:3e:b7:49:a2:25:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:D4:76:2A:B7:37:E9:53:39:AB:F8:F6:CF:F0:96:DF:FE:C5:11
X509v3 Authority Key Identifier:
keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/A9vUdiq3N-lTOav49s_wlt_-xRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.209.0/24
Signature Algorithm: sha256WithRSAEncryption
61:26:42:05:17:d0:0e:5e:4c:02:7c:74:9a:0d:63:09:1e:84:
64:19:a3:b7:19:91:4f:b7:19:17:be:84:79:ee:dc:15:05:03:
06:e2:6c:2d:99:0d:c8:d1:fa:99:b5:ff:fa:43:e7:e8:95:be:
15:35:7d:aa:58:3f:79:45:4f:40:5f:a0:61:c9:7d:bd:d5:65:
0a:29:77:9b:77:7e:e2:eb:e5:cd:49:60:53:b3:05:42:48:62:
52:b7:84:3f:4f:77:e3:2f:51:ab:ac:d2:a3:e0:c3:84:7e:1c:
8f:87:b0:09:f5:50:c7:d1:ce:6c:66:d7:f8:cb:35:3a:57:be:
95:96:d1:9d:34:d0:bc:8f:1d:2b:b2:d5:f5:49:0f:f9:d1:d4:
37:ff:a9:18:56:8e:85:db:0d:9c:06:c1:66:c6:f3:d3:56:50:
d9:05:ba:82:bd:5a:b8:91:f6:48:49:47:7f:fb:05:d2:d2:1b:
d5:49:ed:70:a9:d1:8a:83:6d:47:fb:bc:1c:f8:47:8c:b8:d0:
e1:4f:de:84:95:c6:ff:85:11:d9:13:d5:cc:61:9d:c8:c2:bf:
2c:fb:36:99:ee:ec:dc:90:ca:78:ea:57:fc:a0:48:d4:c5:2c:
cd:f1:32:78:08:e7:4a:40:97:14:cd:4f:05:63:0f:da:32:1f:
4d:61:50:82
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECC+7MTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZDg0MjY1NjE3N2I0MjY3YWI1NWU0YmExNjVhNWVjMDBmNTA4NGJjMB4XDTIyMDEw
MTEzMDQyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDNkYmQ0NzYyYWI3
MzdlOTUzMzlhYmY4ZjZjZmYwOTZkZmZlYzUxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMoEMovjXmJJEjjUwqds9loJBMVjbNoG7hI5QLx9cjefRi2N
W5ZS6jOrOcYzU/n3V61KFkQNnyeYFh6hCI4tIpNg55TldcLHA+tqy1zE+pDlYhar
2WHL5e3OxVuLKLX38EaEauLqK+FX0xL9FKxu6D048g4bEOBlNgBL/tOh3A9wPkpJ
Pz70LPX3ELNZ8A3mdT6j8nHWhC0M35MR0CDAI7iKEBPXPRKFOib+v6RXYFIquT30
6vnrRT0NNwjdQeVErkdvJexv4e65RaeYmur66YwOCHmkF+dUtoTr8xgYBPAzyGPk
+0vWb7IX0a46c9HWSoRMKAW5Qs0QJz63SaIlvhUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQD29R2Krc36VM5q/j2z/CW3/7FETAfBgNVHSMEGDAWgBSNhCZWF3tCZ6tV
5LoWWl7AD1CEvDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pZUW1WaGQ3UW1lclZlUzZGbHBld0E5UWhMdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2UvOTM2MGVjLTljZDEtNGMwMC04NjY4LTk0YzJmODI2OWU5Yy8x
L0E5dlVkaXEzTi1sVE9hdjQ5c193bHRfLXhSRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Uv
OTM2MGVjLTljZDEtNGMwMC04NjY4LTk0YzJmODI2OWU5Yy8xL2pZUW1WaGQ3UW1l
clZlUzZGbHBld0E5UWhMdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG3r0TANBgkqhkiG9w0BAQsFAAOC
AQEAYSZCBRfQDl5MAnx0mg1jCR6EZBmjtxmRT7cZF76Eee7cFQUDBuJsLZkNyNH6
mbX/+kPn6JW+FTV9qlg/eUVPQF+gYcl9vdVlCil3m3d+4uvlzUlgU7MFQkhiUreE
P0934y9Rq6zSo+DDhH4cj4ewCfVQx9HObGbX+Ms1Ole+lZbRnTTQvI8dK7LV9UkP
+dHUN/+pGFaOhdsNnAbBZsbz01ZQ2QW6gr1auJH2SElHf/sF0tIb1UntcKnRioNt
R/u8HPhHjLjQ4U/ehJXG/4UR2RPVzGGdyMK/LPs2me7s3JDKeOpX/KBI1MUszfEy
eAjnSkCXFM1PBWMP2jIfTWFQgg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:32 2024 by rpki-client on console-fra.rpki-client.org