Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/EFFqWLleKJzkmo1xLfkapiilaLo.roa
File: EFFqWLleKJzkmo1xLfkapiilaLo.roa (raw, json)
Hash identifier: UUyztjKodk1jB3Fiu+kEJrkfNFC8ZLAyZAWXX73mQMI=
Subject key identifier: 10:51:6A:58:B9:5E:28:9C:E4:9A:8D:71:2D:F9:1A:A6:28:A5:68:BA
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 0939E2
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/EFFqWLleKJzkmo1xLfkapiilaLo.roa
Signing time: Wed 22 Jun 2022 06:02:44 +0000
ROA not before: Wed 22 Jun 2022 06:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50594
IP address blocks: 176.120.109.0/24 maxlen: 24
176.120.110.0/24 maxlen: 24
176.120.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604642 (0x939e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jun 22 06:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10516a58b95e289ce49a8d712df91aa628a568ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:df:cb:a8:c8:d5:c3:c5:18:47:37:6c:7e:
98:69:47:bd:24:12:0e:a2:8b:a0:4c:2d:be:12:e1:
d9:7c:c5:59:95:ab:34:b8:80:21:98:fa:1d:42:dc:
32:a7:19:22:58:90:0b:14:57:35:e8:7e:4c:1e:d3:
d0:06:fc:77:47:79:82:d6:59:6b:71:36:88:17:ed:
e1:d0:bc:02:a2:70:3f:f6:36:cd:06:48:27:4f:9e:
18:2f:a9:d5:2b:29:71:8b:e4:0d:b2:df:ec:b9:b6:
b5:25:df:42:c0:b7:49:4e:d8:3e:58:31:41:dc:ce:
e4:7c:ed:ca:e8:9a:c1:05:c7:0d:ee:af:f8:b3:ff:
23:51:68:e1:5d:f5:2e:c4:c0:e3:2c:0c:c9:d5:6c:
ec:37:7b:ed:a9:31:2e:73:46:fb:5b:1e:75:6e:29:
69:e7:27:07:f2:35:7d:93:3f:1d:33:a0:6f:f3:63:
2b:37:58:8a:f1:95:4d:1c:d0:3f:9e:99:2f:02:bc:
bc:df:ff:7a:19:67:bd:b7:b8:8e:cb:7c:b6:d5:7e:
0e:c9:18:3e:21:e5:60:7f:96:db:f2:7c:93:96:4a:
57:f3:f4:5f:ac:1c:35:b6:76:40:a7:dd:8b:e6:f9:
1f:ee:2d:49:ed:32:2f:ea:75:e2:03:2c:ff:a5:68:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:51:6A:58:B9:5E:28:9C:E4:9A:8D:71:2D:F9:1A:A6:28:A5:68:BA
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/EFFqWLleKJzkmo1xLfkapiilaLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.109.0-176.120.111.255
Signature Algorithm: sha256WithRSAEncryption
b7:17:c0:39:8c:8d:64:55:ff:a4:12:d1:e2:64:49:56:be:72:
65:ef:15:5e:5f:8b:98:96:d1:c4:fd:03:ca:df:e0:2c:9d:37:
e8:1a:b8:78:26:ab:ac:6c:4b:dd:e7:37:c4:77:cd:81:64:df:
fc:6b:9b:37:5f:26:e1:67:65:58:8f:bf:78:a1:85:96:20:2f:
47:87:6d:bb:30:cc:ae:93:e1:48:cc:ef:d9:aa:13:4d:90:79:
1e:01:e2:e0:ed:cb:b6:c8:66:a1:63:6b:9a:1d:80:60:8c:0a:
36:74:ec:a9:d6:91:13:bb:33:a7:ac:6c:97:70:75:64:e2:b1:
b0:54:4e:ab:65:b7:f8:b5:91:a6:2d:85:25:af:b6:78:5c:d7:
79:c4:d0:38:ec:55:9c:99:fb:5f:e7:d6:ad:ea:94:9e:62:54:
c3:d1:8f:29:d2:63:f9:7e:52:e9:00:76:98:2d:bc:d4:91:a1:
5c:73:ad:33:5a:0c:3c:9a:45:d7:5a:3f:aa:e2:b0:bf:7b:83:
67:bc:1c:10:a2:2c:a5:4d:1f:48:84:a6:3c:6f:bb:7a:a2:d4:
6a:e9:65:c9:57:8c:44:eb:9d:85:4b:9e:0f:73:3a:a1:c8:8c:
11:ca:89:6c:0a:f5:0b:08:63:af:a7:cc:f6:88:be:92:21:4f:
87:88:b9:7b
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIDCTniMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE3
YmU4MjdhNTgwZGU2MTUzOGRkZWZhMjgyMzk0NjhjNGU5MDFiNDAwHhcNMjIwNjIy
MDYwMjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMDUxNmE1OGI5NWUy
ODljZTQ5YThkNzEyZGY5MWFhNjI4YTU2OGJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr1Lfy6jI1cPFGEc3bH6YaUe9JBIOoougTC2+EuHZfMVZlas0
uIAhmPodQtwypxkiWJALFFc16H5MHtPQBvx3R3mC1llrcTaIF+3h0LwConA/9jbN
BkgnT54YL6nVKylxi+QNst/suba1Jd9CwLdJTtg+WDFB3M7kfO3K6JrBBccN7q/4
s/8jUWjhXfUuxMDjLAzJ1WzsN3vtqTEuc0b7Wx51bilp5ycH8jV9kz8dM6Bv82Mr
N1iK8ZVNHNA/npkvAry83/96GWe9t7iOy3y21X4OyRg+IeVgf5bb8nyTlkpX8/Rf
rBw1tnZAp92L5vkf7i1J7TIv6nXiAyz/pWiFAQIDAQABo4ICETCCAg0wHQYDVR0O
BBYEFBBRali5Xiic5JqNcS35GqYopWi6MB8GA1UdIwQYMBaAFBe+gnpYDeYVON3v
ooI5RoxOkBtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Rjc2Q2VsZ041aFU0M2UtaWdqbEdqRTZRRzBBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84Ni80OTBlMDEtY2FmOS00ZDQ0LThmNTctYTFkOWQwZjg4NjI5LzEv
RUZGcVdMbGVLSnprbW8xeExma2FwaWlsYUxvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80
OTBlMDEtY2FmOS00ZDQ0LThmNTctYTFkOWQwZjg4NjI5LzEvRjc2Q2VsZ041aFU0
M2UtaWdqbEdqRTZRRzBBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcG
CCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACweG0DBASweGAwDQYJKoZIhvcN
AQELBQADggEBALcXwDmMjWRV/6QS0eJkSVa+cmXvFV5fi5iW0cT9A8rf4CydN+ga
uHgmq6xsS93nN8R3zYFk3/xrmzdfJuFnZViPv3ihhZYgL0eHbbswzK6T4UjM79mq
E02QeR4B4uDty7bIZqFja5odgGCMCjZ07KnWkRO7M6esbJdwdWTisbBUTqtlt/i1
kaYthSWvtnhc13nE0DjsVZyZ+1/n1q3qlJ5iVMPRjynSY/l+UukAdpgtvNSRoVxz
rTNaDDyaRddaP6risL97g2e8HBCiLKVNH0iEpjxvu3qi1GrpZclXjETrnYVLng9z
OqHIjBHKiWwK9QsIY6+nzPaIvpIhT4eIuXs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:54 2023 by rpki-client on console-fra.rpki-client.org