Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/SIQ5OK3OszEPHmkFy-eNiw-DqOc.roa
File: SIQ5OK3OszEPHmkFy-eNiw-DqOc.roa (raw, json)
Hash identifier: RnCCZE3ELJYC46rDuif2wOcgVGxhP64HInQfRNsGSZ8=
Subject key identifier: 48:84:39:38:AD:CE:B3:31:0F:1E:69:05:CB:E7:8D:8B:0F:83:A8:E7
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 02917CCA
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/SIQ5OK3OszEPHmkFy-eNiw-DqOc.roa
Signing time: Sat 16 Apr 2022 07:58:11 +0000
ROA not before: Sat 16 Apr 2022 07:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61185
IP address blocks: 109.238.160.0/21 maxlen: 24
109.238.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43089098 (0x2917cca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Apr 16 07:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48843938adceb3310f1e6905cbe78d8b0f83a8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:f4:1f:53:d4:a8:a4:b3:57:31:15:b6:cd:
7f:d5:6b:e8:ad:0c:e4:e5:2a:99:fd:d7:2f:ff:67:
04:ed:76:57:3b:34:ca:d2:21:99:cd:ac:cc:8c:c6:
50:df:3c:14:5d:ca:c6:23:39:6b:f9:28:6b:b7:ed:
be:52:f1:64:89:d0:5c:d4:2e:52:d3:41:4b:13:d2:
3e:ce:3c:8a:6b:6d:d2:46:64:ca:bc:14:93:83:3f:
7b:56:e3:5a:00:ce:f2:5e:91:bf:b5:2e:92:49:7d:
a5:77:8c:40:6b:db:bd:38:57:a2:f9:7a:54:b9:a6:
40:a2:81:d9:48:a7:c2:1d:8f:f7:62:c1:20:27:5f:
58:5f:21:b6:ba:18:aa:e1:d9:c5:aa:fd:3e:03:7d:
bf:14:26:25:40:b0:1e:7b:b3:c7:72:8c:a5:3f:78:
5d:61:5d:91:cb:8b:b8:4c:c3:59:f3:a3:35:c7:1c:
0d:7a:4b:88:e7:1d:d4:d9:94:d1:7f:30:2c:5c:21:
e4:64:fe:b5:45:29:2a:c2:68:35:58:b0:2b:89:22:
3b:a1:8b:b6:d3:13:9e:fa:e3:ab:94:71:eb:a1:39:
1a:93:d1:58:5c:7c:d2:55:fe:92:e0:03:4c:25:61:
26:3a:b1:fa:33:ad:07:6e:9c:70:0a:68:a7:45:54:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:84:39:38:AD:CE:B3:31:0F:1E:69:05:CB:E7:8D:8B:0F:83:A8:E7
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/SIQ5OK3OszEPHmkFy-eNiw-DqOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.160.0/20
Signature Algorithm: sha256WithRSAEncryption
90:36:8e:b8:b1:16:38:b4:c4:ac:12:bf:e9:fe:5a:05:e2:20:
f2:df:ac:f6:1c:41:5c:00:88:8d:73:7b:0f:e3:16:9e:15:e7:
af:eb:42:bf:93:90:d5:d7:b9:88:b4:ad:69:ff:4f:0d:42:54:
29:2a:c6:5b:75:44:97:cb:34:f2:9d:e4:a2:de:e2:5e:62:b6:
31:39:15:7f:bd:e9:59:29:95:b5:48:80:6a:ba:ea:52:18:05:
11:e5:ba:6d:84:d3:8a:2d:cc:cc:4b:7e:74:97:a5:5e:ad:39:
75:9c:5c:26:ad:60:27:92:a9:67:9e:73:f2:e3:7a:0a:b6:ef:
f2:f3:b3:97:07:31:d0:ef:55:77:4d:4b:1b:3e:43:bc:37:49:
18:af:1d:75:fc:24:86:fa:70:e3:08:8c:91:e4:04:5a:e7:cc:
e3:88:39:4d:38:26:ec:06:07:29:da:19:a3:b0:84:a0:e9:28:
6b:cc:76:0f:06:14:b7:a7:b4:25:32:9e:58:83:84:a6:0a:bd:
ed:78:ef:5d:f8:77:31:de:37:5d:62:cb:cc:a3:6e:01:b3:cc:
6f:07:09:e9:69:72:20:57:e3:b3:64:3c:77:44:9d:1b:cd:99:
e0:26:db:83:5f:25:00:1f:76:c1:82:13:c1:e3:94:d7:79:d9:
b6:fa:7a:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEApF8yjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzI1Mzc2MDFhMzE2OTc0MDQ5MjJkOTU3ZTc0NDUwZjVhOWNiZTczMB4XDTIyMDQx
NjA3NTgxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDg4NDM5MzhhZGNl
YjMzMTBmMWU2OTA1Y2JlNzhkOGIwZjgzYThlNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVy9B9T1Kiks1cxFbbNf9Vr6K0M5OUqmf3XL/9nBO12Vzs0
ytIhmc2szIzGUN88FF3KxiM5a/koa7ftvlLxZInQXNQuUtNBSxPSPs48imtt0kZk
yrwUk4M/e1bjWgDO8l6Rv7Uukkl9pXeMQGvbvThXovl6VLmmQKKB2Uinwh2P92LB
ICdfWF8htroYquHZxar9PgN9vxQmJUCwHnuzx3KMpT94XWFdkcuLuEzDWfOjNccc
DXpLiOcd1NmU0X8wLFwh5GT+tUUpKsJoNViwK4kiO6GLttMTnvrjq5Rx66E5GpPR
WFx80lX+kuADTCVhJjqx+jOtB26ccApop0VUJAMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRIhDk4rc6zMQ8eaQXL542LD4Oo5zAfBgNVHSMEGDAWgBQXJTdgGjFpdASS
LZV+dEUPWpy+czAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Z5VTNZQm94YVhRRWtpMlZmblJGRDFxY3ZuTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzcvMjE5Y2FlLTI2NGQtNDZhNy05ZTY0LWU2MDRiNjFiZTBlYS8x
L1NJUTVPSzNPc3pFUEhta0Z5LWVOaXctRHFPYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcv
MjE5Y2FlLTI2NGQtNDZhNy05ZTY0LWU2MDRiNjFiZTBlYS8xL0Z5VTNZQm94YVhR
RWtpMlZmblJGRDFxY3ZuTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBG3uoDANBgkqhkiG9w0BAQsFAAOC
AQEAkDaOuLEWOLTErBK/6f5aBeIg8t+s9hxBXACIjXN7D+MWnhXnr+tCv5OQ1de5
iLStaf9PDUJUKSrGW3VEl8s08p3kot7iXmK2MTkVf73pWSmVtUiAarrqUhgFEeW6
bYTTii3MzEt+dJelXq05dZxcJq1gJ5KpZ55z8uN6Crbv8vOzlwcx0O9Vd01LGz5D
vDdJGK8ddfwkhvpw4wiMkeQEWufM44g5TTgm7AYHKdoZo7CEoOkoa8x2DwYUt6e0
JTKeWIOEpgq97XjvXfh3Md43XWLLzKNuAbPMbwcJ6WlyIFfjs2Q8d0SdG82Z4Cbb
g18lAB92wYITweOU13nZtvp6ag==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:43 2023 by rpki-client on console-ams.rpki-client.org