Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/DUIRETvP1i7IKl5lge0q69f-yj8.roa
File: DUIRETvP1i7IKl5lge0q69f-yj8.roa (raw, json)
Hash identifier: HZlVb+FIrdpbHH4W7X8BunvhnanHWE6caulQ/oFrGOI=
Subject key identifier: 0D:42:11:11:3B:CF:D6:2E:C8:2A:5E:65:81:ED:2A:EB:D7:FE:CA:3F
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0181D7F57B977463569F3B843902AA42A5C6
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/DUIRETvP1i7IKl5lge0q69f-yj8.roa
Signing time: Thu 07 Jul 2022 09:19:58 +0000
ROA not before: Thu 07 Jul 2022 09:19:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 176.103.225.0/24 maxlen: 24
176.103.224.0/24 maxlen: 24
176.103.226.0/24 maxlen: 24
176.103.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:f5:7b:97:74:63:56:9f:3b:84:39:02:aa:42:a5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 7 09:19:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d4211113bcfd62ec82a5e6581ed2aebd7feca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:b2:1c:a4:07:88:45:09:15:6b:d1:0f:3c:
d9:3f:32:5e:f0:c3:63:50:e4:7a:71:42:5a:d6:c8:
71:70:5b:5a:d8:05:4b:c3:97:63:7f:c7:3e:f7:60:
c6:6f:07:ee:fd:46:dc:0d:f7:51:0e:29:b3:ef:c4:
b1:d2:2e:0b:d9:9a:2b:5a:f1:17:71:89:38:28:bc:
80:da:05:1d:b0:74:3e:c7:ea:bc:9c:35:8b:04:c2:
5f:f4:08:a4:08:77:ce:f7:49:7b:82:60:75:a4:94:
ba:67:31:85:4b:79:91:63:d6:6a:55:c9:ba:7a:9f:
3f:41:29:57:c2:3a:1d:26:85:8a:5a:a7:92:69:96:
06:79:be:bc:ff:92:d3:14:50:dd:c8:eb:ea:85:ad:
17:5d:a8:f5:76:7e:37:10:91:ef:d5:32:48:cb:82:
c4:b0:3d:c5:4c:ac:cb:69:3c:c7:3d:df:5d:d3:39:
3b:10:06:c4:87:b8:41:b7:40:36:63:1e:38:d4:12:
0a:40:79:6e:06:a9:47:ca:23:e8:94:53:aa:03:1c:
60:dd:3d:8c:cf:ed:89:63:25:d8:54:8a:b3:f7:d6:
25:95:ce:38:61:a4:d1:bf:44:70:a0:59:de:46:7a:
92:be:74:53:8a:8f:34:47:7a:30:6b:fc:aa:4e:d8:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:42:11:11:3B:CF:D6:2E:C8:2A:5E:65:81:ED:2A:EB:D7:FE:CA:3F
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/DUIRETvP1i7IKl5lge0q69f-yj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.224.0/22
Signature Algorithm: sha256WithRSAEncryption
65:ba:75:56:e7:a8:11:73:c7:ca:b4:28:b6:7d:9c:56:da:6a:
dc:a6:7d:04:b1:8c:c4:af:27:83:e2:37:70:30:32:81:b4:52:
81:14:f4:d0:0c:44:e3:e7:0d:39:11:6d:c7:39:51:e5:41:0d:
cb:9f:83:83:88:19:d0:99:ea:c6:70:2d:f4:e9:32:fc:68:01:
66:47:96:98:53:ad:d5:b6:44:6e:31:d0:92:71:1e:81:fd:8c:
3d:81:41:37:e1:e5:21:bd:ae:a7:1e:86:db:de:ce:22:07:5f:
34:29:43:fb:34:bb:0a:9d:57:be:89:6d:93:74:05:5b:52:b4:
dd:ef:78:1e:a1:28:e6:03:7c:0f:20:51:03:79:9a:91:f1:7a:
d8:f1:f5:31:c7:60:c1:14:8d:99:93:0f:3d:24:96:31:b0:f3:
eb:41:01:22:cb:7b:bf:1a:4f:bb:de:e5:10:a1:e9:ba:a9:04:
4f:ae:bb:bf:87:53:e7:d4:28:6d:c5:5d:9d:6a:4a:d9:3b:2d:
e0:f9:86:78:60:a3:76:33:6d:55:16:b9:36:32:df:12:85:ff:
5f:52:9d:97:66:e2:b3:fe:35:c9:f8:ce:24:c5:78:d0:9d:1f:
4e:15:6f:64:a9:96:8e:3b:2f:d1:f3:e0:85:ff:9f:a5:b6:d2:
2e:9d:03:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHX9XuXdGNWnzuEOQKqQqXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz
ODllZDQwHhcNMjIwNzA3MDkxOTU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDQyMTExMTNiY2ZkNjJlYzgyYTVlNjU4MWVkMmFlYmQ3ZmVjYTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj16yHKQHiEUJFWvRDzzZPzJe8MNj
UOR6cUJa1shxcFta2AVLw5djf8c+92DGbwfu/UbcDfdRDimz78Sx0i4L2ZorWvEX
cYk4KLyA2gUdsHQ+x+q8nDWLBMJf9AikCHfO90l7gmB1pJS6ZzGFS3mRY9ZqVcm6
ep8/QSlXwjodJoWKWqeSaZYGeb68/5LTFFDdyOvqha0XXaj1dn43EJHv1TJIy4LE
sD3FTKzLaTzHPd9d0zk7EAbEh7hBt0A2Yx441BIKQHluBqlHyiPolFOqAxxg3T2M
z+2JYyXYVIqz99Yllc44YaTRv0RwoFneRnqSvnRTio80R3owa/yqTthhdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA1CERE7z9YuyCpeZYHtKuvX/so/MB8GA1UdIwQY
MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt
MDgxY2IyYjE3YWI1LzEvRFVJUkVUdlAxaTdJS2w1bGdlMHE2OWYteWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1
LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsGfgMA0G
CSqGSIb3DQEBCwUAA4IBAQBlunVW56gRc8fKtCi2fZxW2mrcpn0EsYzEryeD4jdw
MDKBtFKBFPTQDETj5w05EW3HOVHlQQ3Ln4ODiBnQmerGcC306TL8aAFmR5aYU63V
tkRuMdCScR6B/Yw9gUE34eUhva6nHobb3s4iB180KUP7NLsKnVe+iW2TdAVbUrTd
73geoSjmA3wPIFEDeZqR8XrY8fUxx2DBFI2Zkw89JJYxsPPrQQEiy3u/Gk+73uUQ
oem6qQRPrru/h1Pn1ChtxV2dakrZOy3g+YZ4YKN2M21VFrk2Mt8Shf9fUp2XZuKz
/jXJ+M4kxXjQnR9OFW9kqZaOOy/R8+CF/5+lttIunQMf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:03 2023 by rpki-client on console-fra.rpki-client.org