Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/hChU2kLWNLDSlrEhqfFyEmSIbM8.roa
File: hChU2kLWNLDSlrEhqfFyEmSIbM8.roa (raw, json)
Hash identifier: 1TN76pzowP9QZFy1vI6fjZs+e/1tAsdExd3BXmUgU9s=
Subject key identifier: 84:28:54:DA:42:D6:34:B0:D2:96:B1:21:A9:F1:72:12:64:88:6C:CF
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 05FB7676
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/hChU2kLWNLDSlrEhqfFyEmSIbM8.roa
Signing time: Sat 01 Jan 2022 02:56:43 +0000
ROA not before: Sat 01 Jan 2022 02:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2263
IP address blocks: 192.108.119.0/24 maxlen: 24
192.44.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100365942 (0x5fb7676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Jan 1 02:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=842854da42d634b0d296b121a9f1721264886ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:76:6f:89:ed:ca:4e:0c:3b:4e:bb:a4:c0:28:
27:e1:ef:74:3f:07:a3:eb:0e:2a:cf:65:38:41:0d:
67:c5:0b:c8:f3:17:e0:d5:36:f9:78:13:0b:33:43:
d5:e6:d4:51:da:af:be:66:2f:b4:12:08:ab:6b:fb:
28:64:75:94:d1:b6:a0:b7:62:13:36:85:a1:58:97:
56:f4:33:53:4f:64:dc:19:09:66:14:d2:c6:bb:e1:
ee:02:d9:7f:59:65:a3:8f:84:d5:bf:b4:e7:13:a2:
4a:5f:89:24:c3:70:0a:48:01:9b:33:17:a7:f2:8f:
56:38:f5:e3:b1:b1:e9:f8:89:37:6b:a3:96:6a:10:
d5:bc:96:91:21:cd:f9:35:f9:e3:6b:28:94:1f:11:
18:b7:36:82:1a:f7:9f:80:14:d1:dc:ff:ed:0a:9b:
91:91:34:77:e7:bc:47:53:b9:50:a5:27:6f:35:8b:
d7:15:a5:01:99:a6:d7:23:19:50:6d:94:d2:00:eb:
8d:3e:db:e1:49:de:9d:91:6b:1a:8f:c5:43:35:44:
9f:5b:52:18:e4:9b:59:97:53:61:6f:f1:18:15:0f:
56:ac:a2:de:05:aa:04:8a:ae:b4:af:9b:f3:fd:af:
44:7b:97:b9:50:a5:5d:8e:d2:3b:86:a1:56:98:00:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:28:54:DA:42:D6:34:B0:D2:96:B1:21:A9:F1:72:12:64:88:6C:CF
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/hChU2kLWNLDSlrEhqfFyEmSIbM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.77.0/24
192.108.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:83:e8:d7:43:26:8c:4c:cd:b3:f9:e4:22:e4:53:6f:80:98:
0b:d1:d6:94:30:8c:c3:7d:59:c5:80:d2:24:5d:3e:f2:d4:be:
11:cf:02:64:a2:4b:8c:87:b5:e0:bd:6f:95:a0:3a:bf:80:31:
c7:17:89:5d:78:69:47:27:38:e3:65:ba:97:7d:b1:be:1e:39:
9a:e6:f4:82:f9:b9:fe:d0:2c:90:53:d0:cb:7f:04:bf:46:64:
45:50:d1:af:e5:58:08:2e:52:07:ec:61:f5:fb:5b:7a:51:77:
f5:06:3e:aa:14:ce:7e:3b:1a:08:0a:01:37:13:5e:74:a5:a0:
f9:30:f6:6a:77:72:05:32:50:4f:f0:fe:48:b8:32:6e:8f:07:
6a:81:bc:c8:d0:ff:8e:1d:51:de:94:1e:b6:49:fc:ed:53:cc:
d4:4c:d8:be:d6:56:36:3c:af:71:e7:0b:0e:8d:f7:e4:9f:a1:
c8:5e:1d:3f:1e:01:6f:e8:69:f5:91:45:2f:31:eb:b0:04:f1:
be:9c:46:9b:89:d9:07:a5:9d:8e:4b:cb:7f:85:72:50:f6:a8:
ff:8d:81:26:a8:36:20:bd:e7:19:b9:ef:8d:b8:de:15:e4:cc:
39:ee:e7:c8:47:08:e0:e4:68:40:31:16:5c:f5:52:f2:80:cb:
13:59:5e:07
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBft2djANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDI2N2YzZWNmY2M2MTY2OGUwNTAxYmNhNjBjZWQ2ZGQ3NWQzNDdjMB4XDTIyMDEw
MTAyNTY0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQyODU0ZGE0MmQ2
MzRiMGQyOTZiMTIxYTlmMTcyMTI2NDg4NmNjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPZ2b4ntyk4MO067pMAoJ+HvdD8Ho+sOKs9lOEENZ8ULyPMX
4NU2+XgTCzND1ebUUdqvvmYvtBIIq2v7KGR1lNG2oLdiEzaFoViXVvQzU09k3BkJ
ZhTSxrvh7gLZf1llo4+E1b+05xOiSl+JJMNwCkgBmzMXp/KPVjj147Gx6fiJN2uj
lmoQ1byWkSHN+TX542solB8RGLc2ghr3n4AU0dz/7QqbkZE0d+e8R1O5UKUnbzWL
1xWlAZmm1yMZUG2U0gDrjT7b4UnenZFrGo/FQzVEn1tSGOSbWZdTYW/xGBUPVqyi
3gWqBIqutK+b8/2vRHuXuVClXY7SO4ahVpgArmkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSEKFTaQtY0sNKWsSGp8XISZIhszzAfBgNVHSMEGDAWgBR0Jn8+z8xhZo4F
AbymDO1t1100fDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RDWl9Qc19NWVdhT0JRRzhwZ3p0YmRkZE5Idy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjcvNzBjYjgwLTRlNmQtNDZhNS1iMWI0LTRlM2Y0ZDY4ZjY4Mi8x
L2hDaFUya0xXTkxEU2xyRWhxZkZ5RW1TSWJNOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcv
NzBjYjgwLTRlNmQtNDZhNS1iMWI0LTRlM2Y0ZDY4ZjY4Mi8xL2RDWl9Qc19NWVdh
T0JRRzhwZ3p0YmRkZE5Idy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMAsTQMEAMBsdzANBgkqhkiG9w0B
AQsFAAOCAQEAS4Po10MmjEzNs/nkIuRTb4CYC9HWlDCMw31ZxYDSJF0+8tS+Ec8C
ZKJLjIe14L1vlaA6v4AxxxeJXXhpRyc442W6l32xvh45mub0gvm5/tAskFPQy38E
v0ZkRVDRr+VYCC5SB+xh9ftbelF39QY+qhTOfjsaCAoBNxNedKWg+TD2andyBTJQ
T/D+SLgybo8HaoG8yND/jh1R3pQetkn87VPM1EzYvtZWNjyvcecLDo335J+hyF4d
Px4Bb+hp9ZFFLzHrsATxvpxGm4nZB6WdjkvLf4VyUPao/42BJqg2IL3nGbnvjbje
FeTMOe7nyEcI4ORoQDEWXPVS8oDLE1leBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:27 2024 by rpki-client on console-ams.rpki-client.org