Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/ZwFhHp_ifJxPMkNoyyhKwEWUGMQ.roa
File: ZwFhHp_ifJxPMkNoyyhKwEWUGMQ.roa (raw, json)
Hash identifier: FfofHgbog++C9uiQ9QikWtKiS91KiY3uMtElylmYRRk=
Subject key identifier: 67:01:61:1E:9F:E2:7C:9C:4F:32:43:68:CB:28:4A:C0:45:94:18:C4
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 0868BA2B
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/ZwFhHp_ifJxPMkNoyyhKwEWUGMQ.roa
Signing time: Sat 01 Jan 2022 03:53:15 +0000
ROA not before: Sat 01 Jan 2022 03:53:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208855
IP address blocks: 109.71.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141081131 (0x868ba2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Jan 1 03:53:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6701611e9fe27c9c4f324368cb284ac0459418c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:18:e0:29:94:04:c7:9e:60:21:af:59:d9:
6e:03:07:2e:02:8f:fc:57:7e:62:ee:42:95:3d:ef:
d6:c9:27:41:9f:b2:34:f9:7d:85:4a:b7:c5:49:30:
a1:02:3c:61:58:a3:21:7a:bc:6e:16:35:66:7a:dc:
5a:4a:4b:38:88:c3:ce:30:7d:fa:5d:d7:c3:18:66:
48:5d:b1:fd:24:70:fb:77:4b:54:83:81:b2:db:bf:
cc:a3:6d:38:d6:ea:2b:90:52:ff:7a:9b:9f:29:5e:
ad:a4:b0:7b:2e:77:d0:73:8b:9f:a3:a6:c9:e1:97:
0e:1d:53:d2:24:dd:9e:6e:b0:31:80:9d:43:0c:2b:
70:93:c1:9c:00:31:b5:be:39:1c:a9:7a:51:7b:52:
9b:aa:3b:e3:d0:1e:ab:2f:08:e5:66:41:80:48:be:
18:be:e9:3a:a1:b0:53:bf:c5:cd:a5:12:24:e8:48:
b5:60:ee:40:52:1f:f9:ad:42:34:5e:ff:fb:00:9e:
c6:16:73:6e:c6:45:3d:c8:74:b1:e8:2f:65:25:19:
a4:49:0f:1b:45:63:f5:c1:86:38:54:3d:be:34:6e:
66:e6:ab:d4:fb:df:b7:35:2a:b5:60:0f:39:55:36:
db:fc:c5:84:3e:b3:4e:b9:5f:40:38:c2:36:37:ca:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:01:61:1E:9F:E2:7C:9C:4F:32:43:68:CB:28:4A:C0:45:94:18:C4
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/ZwFhHp_ifJxPMkNoyyhKwEWUGMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.152.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:48:23:d7:7d:26:2a:96:58:97:5c:b5:47:41:2c:74:15:87:
dd:7b:ca:94:df:27:96:6b:cd:8e:70:0d:d7:80:76:ed:83:3b:
18:f5:ec:55:5b:54:ce:a1:8e:05:12:b6:54:ed:c1:de:74:83:
9b:f6:0e:44:e5:e4:95:0f:12:66:06:a6:a9:33:60:18:f0:22:
b4:d7:4d:82:ef:7e:aa:d6:29:3c:02:2d:7a:ef:3b:66:dc:1a:
fa:16:cc:f0:a2:df:62:7e:bf:b9:b0:6b:fb:86:40:3d:2b:49:
73:5b:eb:5e:6c:1d:42:42:4f:f4:2e:be:bd:32:2b:de:bd:a7:
f8:26:cc:be:bb:93:8d:15:65:0f:0b:56:3d:64:d9:ba:f5:72:
a2:3c:f0:30:70:c2:3b:84:fe:e1:cc:97:67:c9:66:f2:3e:00:
3c:b0:85:3e:99:bb:9a:95:ba:c0:32:b1:a4:04:46:21:1f:f9:
2f:2c:63:85:f3:db:22:87:d7:ec:d9:59:93:20:d8:bf:93:16:
0c:ca:fc:d3:e3:a3:aa:2e:09:84:94:41:b6:17:32:55:8c:64:
3b:c3:27:e6:d4:d2:9c:61:b9:c5:4e:f0:90:50:f3:96:78:bb:
63:6f:4f:23:9a:f0:51:ad:99:70:73:91:76:13:ea:1e:4a:27:
b5:94:b0:8e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECGi6KzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NGFiZjBjOTgxNzAxYWJhOTdlNGZjZDBiZWQ0ZTRjZGI4NjkyMDQ3MB4XDTIyMDEw
MTAzNTMxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjcwMTYxMWU5ZmUy
N2M5YzRmMzI0MzY4Y2IyODRhYzA0NTk0MThjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsjGOAplATHnmAhr1nZbgMHLgKP/Fd+Yu5ClT3v1sknQZ+y
NPl9hUq3xUkwoQI8YVijIXq8bhY1ZnrcWkpLOIjDzjB9+l3XwxhmSF2x/SRw+3dL
VIOBstu/zKNtONbqK5BS/3qbnyleraSwey530HOLn6OmyeGXDh1T0iTdnm6wMYCd
QwwrcJPBnAAxtb45HKl6UXtSm6o749Aeqy8I5WZBgEi+GL7pOqGwU7/FzaUSJOhI
tWDuQFIf+a1CNF7/+wCexhZzbsZFPch0segvZSUZpEkPG0Vj9cGGOFQ9vjRuZuar
1PvftzUqtWAPOVU22/zFhD6zTrlfQDjCNjfK4hUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRnAWEen+J8nE8yQ2jLKErARZQYxDAfBgNVHSMEGDAWgBSEq/DJgXAaupfk
/NC+1OTNuGkgRzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hLdnd5WUZ3R3JxWDVQelF2dFRremJocElFYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvOTk1MmM4LTJkNDAtNDFlMi1iYTcwLTYxYmM3ZWNjNDg1Yy8x
L1p3RmhIcF9pZkp4UE1rTm95eWhLd0VXVUdNUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
OTk1MmM4LTJkNDAtNDFlMi1iYTcwLTYxYmM3ZWNjNDg1Yy8xL2hLdnd5WUZ3R3Jx
WDVQelF2dFRremJocElFYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm1HmDANBgkqhkiG9w0BAQsFAAOC
AQEAxUgj130mKpZYl1y1R0EsdBWH3XvKlN8nlmvNjnAN14B27YM7GPXsVVtUzqGO
BRK2VO3B3nSDm/YOROXklQ8SZgamqTNgGPAitNdNgu9+qtYpPAIteu87Ztwa+hbM
8KLfYn6/ubBr+4ZAPStJc1vrXmwdQkJP9C6+vTIr3r2n+CbMvruTjRVlDwtWPWTZ
uvVyojzwMHDCO4T+4cyXZ8lm8j4APLCFPpm7mpW6wDKxpARGIR/5LyxjhfPbIofX
7NlZkyDYv5MWDMr80+Ojqi4JhJRBthcyVYxkO8Mn5tTSnGG5xU7wkFDzlni7Y29P
I5rwUa2ZcHORdhPqHkontZSwjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:07 2024 by rpki-client on console-ams.rpki-client.org