Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/wUnLAMSdgbjNSuUSDbuffZW98Dw.roa
File: wUnLAMSdgbjNSuUSDbuffZW98Dw.roa (raw, json)
Hash identifier: LVX6aK1bCYDRlmDiej2uTyZBupExkDrmbTpvssI7M/0=
Subject key identifier: C1:49:CB:00:C4:9D:81:B8:CD:4A:E5:12:0D:BB:9F:7D:95:BD:F0:3C
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 018534BA1E5990268B55BFCFA7862F3A036E
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/wUnLAMSdgbjNSuUSDbuffZW98Dw.roa
Signing time: Wed 21 Dec 2022 12:48:10 +0000
ROA not before: Wed 21 Dec 2022 12:48:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 109.106.32.0/21 maxlen: 21
2a00:5480::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:ba:1e:59:90:26:8b:55:bf:cf:a7:86:2f:3a:03:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Dec 21 12:48:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c149cb00c49d81b8cd4ae5120dbb9f7d95bdf03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:a2:a9:cf:7c:8b:da:e9:46:d8:6a:e5:bc:
71:bb:4e:43:8f:0e:c1:f3:47:71:59:e8:4f:3b:dd:
64:56:a4:8c:a7:0f:50:11:ac:91:04:6e:a7:f2:71:
3c:36:9c:31:cf:af:3e:a8:4e:44:48:03:2a:fe:18:
c9:30:1b:c7:c4:f5:6b:89:c4:09:b8:d6:57:0d:85:
15:77:76:30:a9:6f:40:ad:f5:85:d2:6a:ca:fe:b9:
8e:06:1c:7a:70:35:da:7f:78:27:14:96:1f:47:1a:
4e:80:4f:31:23:1e:40:5c:db:d5:0e:72:13:73:b1:
9f:eb:32:93:df:c1:32:b3:90:ed:56:04:3b:ad:c2:
af:90:91:98:41:07:0c:cf:27:e7:6d:74:78:ce:45:
21:4e:17:40:c6:4d:3a:06:17:b2:70:d5:fe:ef:06:
ca:73:d6:8e:6d:96:d4:c2:3a:37:23:b7:c7:97:16:
0c:06:59:b7:77:a6:a6:74:f7:b8:50:0e:52:2c:0e:
3c:63:b4:65:a9:be:4b:a9:da:02:32:85:b8:84:9c:
62:6d:eb:76:af:3e:74:70:06:db:ea:72:6c:2a:e6:
c2:48:95:a2:4e:bf:f8:0e:90:33:60:67:9f:98:ce:
c3:81:26:0a:42:47:9f:99:7b:65:3f:eb:40:17:49:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:CB:00:C4:9D:81:B8:CD:4A:E5:12:0D:BB:9F:7D:95:BD:F0:3C
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/wUnLAMSdgbjNSuUSDbuffZW98Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.32.0/21
IPv6:
2a00:5480::/29
Signature Algorithm: sha256WithRSAEncryption
14:f1:52:f3:e9:73:68:91:e0:bd:31:3a:a4:74:c5:5e:ba:95:
d3:b4:bf:b2:9f:33:67:9a:07:17:67:4c:e3:f8:35:6a:31:26:
db:ed:20:a3:1f:db:c1:09:b5:d6:05:48:4e:f8:ea:87:27:77:
82:69:1c:f9:2a:8e:d9:cc:f1:ba:d4:58:f1:8f:18:66:05:77:
88:10:ad:b1:30:d2:ab:44:0c:e9:68:93:e9:b8:a6:e1:c9:f0:
fc:4b:1c:d2:f0:96:13:a0:89:b0:fc:23:8c:ff:c1:f0:fb:86:
9f:ec:c3:b3:e2:29:80:ef:b8:49:fc:26:a9:b9:ce:3a:bf:a4:
c6:fc:d8:9d:f9:c6:f7:ed:24:60:d7:99:e6:7e:5c:35:ae:18:
cc:3e:19:c2:7d:f7:76:78:5c:11:e9:55:9a:82:07:c0:90:9f:
87:1e:9b:ef:8c:c0:92:cc:b1:8e:1e:6f:96:f6:55:2b:20:78:
a1:d1:1f:10:c7:af:25:fa:3e:2b:ab:16:a7:67:c5:d6:b4:ce:
33:01:24:58:1a:bf:8e:76:32:5d:e0:4d:b2:c4:2f:08:99:9a:
dd:70:4f:81:03:a8:a3:8e:d4:43:7b:fc:16:a9:e5:4e:fc:7f:
a2:5c:df:b7:e1:0d:de:a6:ef:80:94:75:2b:6a:4f:eb:e0:6b:
40:91:c3:c2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYU0uh5ZkCaLVb/Pp4YvOgNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MThiZTA0NDE3YTZiY2I5ZjMzOTQyYTYzMTUxOGJlNTMz
ZmZhZjQwHhcNMjIxMjIxMTI0ODEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTQ5Y2IwMGM0OWQ4MWI4Y2Q0YWU1MTIwZGJiOWY3ZDk1YmRmMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyuiqc98i9rpRthq5bxxu05Djw7B
80dxWehPO91kVqSMpw9QEayRBG6n8nE8Npwxz68+qE5ESAMq/hjJMBvHxPVricQJ
uNZXDYUVd3YwqW9ArfWF0mrK/rmOBhx6cDXaf3gnFJYfRxpOgE8xIx5AXNvVDnIT
c7Gf6zKT38Eys5DtVgQ7rcKvkJGYQQcMzyfnbXR4zkUhThdAxk06BheycNX+7wbK
c9aObZbUwjo3I7fHlxYMBlm3d6amdPe4UA5SLA48Y7Rlqb5LqdoCMoW4hJxibet2
rz50cAbb6nJsKubCSJWiTr/4DpAzYGefmM7DgSYKQkefmXtlP+tAF0ktBwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMFJywDEnYG4zUrlEg27n32VvfA8MB8GA1UdIwQY
MBaAFDYYvgRBemvLnzOUKmMVGL5TP/r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMt
MjI2OGU5N2E4YmMxLzEvd1VuTEFNU2RnYmpOU3VVU0RidWZmWlc5OER3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMtMjI2OGU5N2E4YmMx
LzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDbWogMA0E
AgACMAcDBQMqAFSAMA0GCSqGSIb3DQEBCwUAA4IBAQAU8VLz6XNokeC9MTqkdMVe
upXTtL+ynzNnmgcXZ0zj+DVqMSbb7SCjH9vBCbXWBUhO+OqHJ3eCaRz5Ko7ZzPG6
1FjxjxhmBXeIEK2xMNKrRAzpaJPpuKbhyfD8SxzS8JYToImw/COM/8Hw+4af7MOz
4imA77hJ/Capuc46v6TG/Nid+cb37SRg15nmflw1rhjMPhnCffd2eFwR6VWaggfA
kJ+HHpvvjMCSzLGOHm+W9lUrIHih0R8Qx68l+j4rqxanZ8XWtM4zASRYGr+OdjJd
4E2yxC8ImZrdcE+BA6ijjtRDe/wWqeVO/H+iXN+34Q3epu+AlHUrak/r4GtAkcPC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org