Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/9MOEBYCtir4glaNULYiddJVrtJg.roa
File: 9MOEBYCtir4glaNULYiddJVrtJg.roa (raw, json)
Hash identifier: yrJ19CUqs98eSNtJKt7oZ1DgKKX0JmL35F3gZSIMss8=
Subject key identifier: F4:C3:84:05:80:AD:8A:BE:20:95:A3:54:2D:88:9D:74:95:6B:B4:98
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 01FF9A8C
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/9MOEBYCtir4glaNULYiddJVrtJg.roa
Signing time: Sat 01 Jan 2022 06:01:18 +0000
ROA not before: Sat 01 Jan 2022 06:01:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43757
IP address blocks: 192.108.126.0/24 maxlen: 24
78.31.24.0/21 maxlen: 21
2001:67c:1578::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33528460 (0x1ff9a8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Jan 1 06:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4c3840580ad8abe2095a3542d889d74956bb498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:fa:db:e4:b6:e9:a6:73:eb:8d:67:6b:c6:
94:c7:95:88:71:0d:bb:fd:6c:32:e8:1c:71:13:b6:
ce:a1:ee:8a:8a:b2:60:fe:39:39:9e:01:29:28:ae:
70:8a:35:89:05:4b:02:19:aa:69:f1:b2:14:1b:38:
6e:35:ef:7f:fd:7f:84:4a:e0:33:d9:48:d2:f5:16:
00:07:82:5a:5f:d8:d9:16:e1:4e:8e:ea:f3:54:3f:
ac:8e:c7:76:c3:41:0a:3a:8b:df:64:63:89:fc:38:
16:92:d1:ed:ab:c3:6d:9c:49:66:29:f2:ca:46:04:
9e:0c:fa:86:27:c5:1d:a0:7a:95:3d:d0:95:12:74:
cb:30:28:66:c1:31:c9:56:35:85:20:47:bb:fc:47:
ef:77:0c:39:90:35:ba:3d:fa:33:30:1b:c9:f2:2c:
fa:14:60:ee:c5:b9:ed:de:98:bd:5c:b1:d0:04:fb:
4d:8c:e5:ad:3a:cd:04:ef:56:15:4e:af:3a:6f:f2:
89:cb:be:d8:70:48:70:13:73:99:d9:2b:bd:78:14:
1c:00:05:ea:e8:fc:af:d8:1b:8d:03:d6:2d:34:2b:
ae:2f:de:ac:26:33:7e:1d:44:06:3c:21:42:cd:74:
bc:dd:e5:03:b7:45:93:2c:bf:84:e4:43:7d:cc:b9:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C3:84:05:80:AD:8A:BE:20:95:A3:54:2D:88:9D:74:95:6B:B4:98
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/9MOEBYCtir4glaNULYiddJVrtJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.24.0/21
192.108.126.0/24
IPv6:
2001:67c:1578::/48
Signature Algorithm: sha256WithRSAEncryption
84:22:79:0e:c1:2f:cb:35:19:5d:14:79:dd:2b:2e:01:f0:68:
01:c1:ca:85:b3:4e:39:5c:b0:e1:0a:0d:eb:df:59:22:95:5d:
98:f5:b1:88:e0:f5:d3:11:8b:ea:54:bc:89:51:43:1b:3a:98:
25:7a:1d:8f:b0:55:a8:70:e2:a8:0b:d2:05:7c:dd:d6:8c:44:
28:de:2d:49:86:e9:d9:f3:55:d4:f0:59:3e:36:1a:59:f6:d1:
54:a5:be:fc:67:7f:d5:a9:d8:c9:00:d1:98:8e:3d:5d:b2:23:
06:79:1a:bf:fd:0b:67:14:dd:ea:40:7a:66:58:46:4d:82:ac:
dc:c2:4e:ee:a4:50:b6:aa:a0:27:b5:98:7d:67:03:28:05:2b:
09:02:26:28:36:71:43:64:9f:e4:5e:c4:29:7d:f2:cd:14:27:
b7:97:d1:09:03:56:18:de:86:93:e6:24:19:98:1e:46:44:2b:
fa:14:e6:47:de:a2:3b:81:f3:90:0f:97:ad:68:d3:c6:9b:57:
7e:49:7c:58:95:72:a8:d6:20:81:f9:7b:6b:ad:43:d3:c1:06:
53:40:37:33:a1:59:74:89:e3:a4:59:97:7f:c6:91:cf:a5:38:
d5:c4:35:fd:3c:9a:48:9c:8f:eb:e2:40:a2:0f:83:48:89:9f:
11:cd:23:e7
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEAf+ajDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Zjc0MzJmNjk5Y2JkMjQ5YjJlM2M5YzU1YmRlZmFmODM5ODZiNDQyMB4XDTIyMDEw
MTA2MDExOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjRjMzg0MDU4MGFk
OGFiZTIwOTVhMzU0MmQ4ODlkNzQ5NTZiYjQ5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtK+tvktummc+uNZ2vGlMeViHENu/1sMugccRO2zqHuioqy
YP45OZ4BKSiucIo1iQVLAhmqafGyFBs4bjXvf/1/hErgM9lI0vUWAAeCWl/Y2Rbh
To7q81Q/rI7HdsNBCjqL32Rjifw4FpLR7avDbZxJZinyykYEngz6hifFHaB6lT3Q
lRJ0yzAoZsExyVY1hSBHu/xH73cMOZA1uj36MzAbyfIs+hRg7sW57d6YvVyx0AT7
TYzlrTrNBO9WFU6vOm/yicu+2HBIcBNzmdkrvXgUHAAF6uj8r9gbjQPWLTQrri/e
rCYzfh1EBjwhQs10vN3lA7dFkyy/hORDfcy5bJ0CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBT0w4QFgK2KviCVo1QtiJ10lWu0mDAfBgNVHSMEGDAWgBSfdDL2mcvSSbLj
ycVb3vr4OYa0QjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L24zUXk5cG5MMGtteTQ4bkZXOTc2LURtR3RFSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvMGNmMTg3LWVjYjMtNGI0Mi05MWU0LTZhZGRmY2IxOGY5OS8x
LzlNT0VCWUN0aXI0Z2xhTlVMWWlkZEpWcnRKZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
MGNmMTg3LWVjYjMtNGI0Mi05MWU0LTZhZGRmY2IxOGY5OS8xL24zUXk5cG5MMGtt
eTQ4bkZXOTc2LURtR3RFSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEA04fGAMEAMBsfjAPBAIAAjAJAwcA
IAEGfBV4MA0GCSqGSIb3DQEBCwUAA4IBAQCEInkOwS/LNRldFHndKy4B8GgBwcqF
s045XLDhCg3r31kilV2Y9bGI4PXTEYvqVLyJUUMbOpgleh2PsFWocOKoC9IFfN3W
jEQo3i1JhunZ81XU8Fk+NhpZ9tFUpb78Z3/VqdjJANGYjj1dsiMGeRq//QtnFN3q
QHpmWEZNgqzcwk7upFC2qqAntZh9ZwMoBSsJAiYoNnFDZJ/kXsQpffLNFCe3l9EJ
A1YY3oaT5iQZmB5GRCv6FOZH3qI7gfOQD5etaNPGm1d+SXxYlXKo1iCB+XtrrUPT
wQZTQDczoVl0ieOkWZd/xpHPpTjVxDX9PJpInI/r4kCiD4NIiZ8RzSPn
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:08 2025 by rpki-client