Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/67qXdxsOsn1yFf3_ulVnft_QIKM.roa
File: 67qXdxsOsn1yFf3_ulVnft_QIKM.roa (raw, json)
Hash identifier: ckVn/O5e4fOGhl/QmlgGHW8BSDjTLlYsmXO8290A6dU=
Subject key identifier: EB:BA:97:77:1B:0E:B2:7D:72:15:FD:FF:BA:55:67:7E:DF:D0:20:A3
Certificate issuer: /CN=2ce3894512e48705a5db0609d4fac675a750fc4f
Certificate serial: 01002CF0
Authority key identifier: 2C:E3:89:45:12:E4:87:05:A5:DB:06:09:D4:FA:C6:75:A7:50:FC:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/67qXdxsOsn1yFf3_ulVnft_QIKM.roa
Signing time: Sat 01 Jan 2022 01:58:33 +0000
ROA not before: Sat 01 Jan 2022 01:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.234.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16788720 (0x1002cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce3894512e48705a5db0609d4fac675a750fc4f
Validity
Not Before: Jan 1 01:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebba97771b0eb27d7215fdffba55677edfd020a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:96:e2:40:90:aa:b6:28:79:98:e8:8e:1f:
63:56:0e:fd:41:f3:d0:4e:d8:30:16:37:f4:04:0c:
a7:2e:c4:ef:3e:16:81:b4:d0:da:36:33:44:50:0a:
c5:c2:d1:69:88:d2:c9:c3:b0:25:b7:0f:6a:c8:49:
d4:58:86:a9:08:d1:1a:bd:d1:d0:92:e5:31:69:c0:
ca:79:78:cf:25:65:4c:f2:d2:57:a5:d5:a1:58:a1:
cd:33:21:38:a7:fb:eb:6e:e4:6b:6f:68:63:c2:48:
8f:45:b4:9f:e8:75:db:97:b1:07:5d:32:fc:93:79:
3f:9e:14:07:e4:39:89:23:27:e4:b9:06:3a:4f:17:
29:b3:c7:c6:61:95:a7:61:5c:70:e2:4b:6b:43:8d:
4b:52:bf:3a:53:50:b4:7f:db:4f:a6:c7:e9:4d:5e:
c9:b4:54:e8:7a:37:56:5e:d5:48:8b:67:e0:e5:f0:
47:28:dd:7e:61:c3:66:b7:5e:9d:cb:23:3c:66:9d:
52:90:14:43:7d:bb:2e:77:fc:7a:62:ea:03:8b:60:
05:b4:af:61:d8:7e:db:04:79:a1:db:4f:e2:a7:11:
97:ab:76:a7:3d:de:fd:bc:d2:b3:f7:e4:9d:f0:6a:
39:3d:70:13:68:ad:85:e3:24:df:3f:c1:3b:15:45:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BA:97:77:1B:0E:B2:7D:72:15:FD:FF:BA:55:67:7E:DF:D0:20:A3
X509v3 Authority Key Identifier:
keyid:2C:E3:89:45:12:E4:87:05:A5:DB:06:09:D4:FA:C6:75:A7:50:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/67qXdxsOsn1yFf3_ulVnft_QIKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.76.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a7:24:f2:8e:bc:78:d6:80:0d:44:ca:97:97:0f:f3:c0:e9:
54:b1:94:35:1c:50:1f:a7:4d:68:73:30:ae:c7:54:9a:39:1c:
db:5c:2c:0d:b9:ab:11:39:26:c5:1e:b1:34:42:5f:0e:a4:15:
c5:50:52:fc:26:4d:d2:25:07:5e:0e:92:46:61:53:b5:8f:b0:
b4:76:6d:75:21:bc:bc:a4:c1:ff:a0:37:6c:13:2b:ba:58:b9:
29:2e:47:a3:a8:93:14:b6:19:6b:49:e1:f5:f8:ba:45:5a:e5:
69:e6:8f:88:07:0c:41:91:6c:de:5e:5b:40:fa:df:1a:8e:b3:
1e:36:67:d5:b9:34:5a:ed:47:2d:b6:fc:b4:87:82:55:4e:cb:
25:a9:73:4b:57:18:01:9c:23:06:b3:fc:ca:14:52:e8:86:df:
ff:a8:0e:f6:f7:0d:3c:b3:66:99:86:9d:96:3e:82:38:4f:e8:
68:a7:db:2c:c2:34:35:cc:db:d2:d1:63:7a:fe:0d:68:c1:9b:
f8:20:35:47:c0:e6:00:38:dd:85:e2:59:f5:aa:2c:8e:a9:5a:
2d:ea:ad:54:2b:0e:a2:50:a3:8b:e7:1f:5a:aa:b5:75:fd:4e:
1d:70:50:9a:64:d5:2e:1c:94:9c:48:fd:67:9c:0c:56:66:78:
e7:66:60:2e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQAs8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
Y2UzODk0NTEyZTQ4NzA1YTVkYjA2MDlkNGZhYzY3NWE3NTBmYzRmMB4XDTIyMDEw
MTAxNTgzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWJiYTk3NzcxYjBl
YjI3ZDcyMTVmZGZmYmE1NTY3N2VkZmQwMjBhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKw4luJAkKq2KHmY6I4fY1YO/UHz0E7YMBY39AQMpy7E7z4W
gbTQ2jYzRFAKxcLRaYjSycOwJbcPashJ1FiGqQjRGr3R0JLlMWnAynl4zyVlTPLS
V6XVoVihzTMhOKf7627ka29oY8JIj0W0n+h125exB10y/JN5P54UB+Q5iSMn5LkG
Ok8XKbPHxmGVp2FccOJLa0ONS1K/OlNQtH/bT6bH6U1eybRU6Ho3Vl7VSItn4OXw
RyjdfmHDZrdencsjPGadUpAUQ327Lnf8emLqA4tgBbSvYdh+2wR5odtP4qcRl6t2
pz3e/bzSs/fknfBqOT1wE2itheMk3z/BOxVF4g0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTrupd3Gw6yfXIV/f+6VWd+39AgozAfBgNVHSMEGDAWgBQs44lFEuSHBaXb
BgnU+sZ1p1D8TzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xPT0pSUkxraHdXbDJ3WUoxUHJHZGFkUV9FOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzYvZGM1MDRmLTQ3M2MtNGU5Zi1hODdhLTVhMDhjNWU5NzIwOS8x
LzY3cVhkeHNPc24xeUZmM191bFZuZnRfUUlLTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYv
ZGM1MDRmLTQ3M2MtNGU5Zi1hODdhLTVhMDhjNWU5NzIwOS8xL0xPT0pSUkxraHdX
bDJ3WUoxUHJHZGFkUV9FOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG3qTDANBgkqhkiG9w0BAQsFAAOC
AQEAJqck8o68eNaADUTKl5cP88DpVLGUNRxQH6dNaHMwrsdUmjkc21wsDbmrETkm
xR6xNEJfDqQVxVBS/CZN0iUHXg6SRmFTtY+wtHZtdSG8vKTB/6A3bBMruli5KS5H
o6iTFLYZa0nh9fi6RVrlaeaPiAcMQZFs3l5bQPrfGo6zHjZn1bk0Wu1HLbb8tIeC
VU7LJalzS1cYAZwjBrP8yhRS6Ibf/6gO9vcNPLNmmYadlj6COE/oaKfbLMI0Nczb
0tFjev4NaMGb+CA1R8DmADjdheJZ9aosjqlaLeqtVCsOolCji+cfWqq1df1OHXBQ
mmTVLhyUnEj9Z5wMVmZ452ZgLg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:05 2023 by rpki-client on console-fra.rpki-client.org