Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/sDCTHen6O1790ECyOWkVd8z9PAU.roa
File: sDCTHen6O1790ECyOWkVd8z9PAU.roa (raw, json)
Hash identifier: rRsPItvAbaYL3appwWD6h2dRTAHmQNnTPfHP7I8DNWQ=
Subject key identifier: B0:30:93:1D:E9:FA:3B:5E:FD:D0:40:B2:39:69:15:77:CC:FD:3C:05
Certificate issuer: /CN=9b070c07a292618186385cc204ec95fb64af5d19
Certificate serial: 921CB7
Authority key identifier: 9B:07:0C:07:A2:92:61:81:86:38:5C:C2:04:EC:95:FB:64:AF:5D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwcMB6KSYYGGOFzCBOyV-2SvXRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/sDCTHen6O1790ECyOWkVd8z9PAU.roa
Signing time: Sat 01 Jan 2022 01:59:52 +0000
ROA not before: Sat 01 Jan 2022 01:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 176.97.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9575607 (0x921cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b070c07a292618186385cc204ec95fb64af5d19
Validity
Not Before: Jan 1 01:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b030931de9fa3b5efdd040b239691577ccfd3c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:94:6a:27:12:fe:13:f4:46:00:f8:14:83:
e8:c2:66:a2:56:26:7d:b7:cc:73:17:ef:2e:5d:c7:
9b:47:25:f3:36:f7:5b:85:11:90:10:65:61:00:99:
b7:21:24:ea:ae:ee:80:ba:22:40:5d:6b:3c:19:cd:
a9:ce:8b:b4:67:70:3b:da:a1:ca:71:c0:7e:c8:e6:
52:ba:47:10:a9:2b:36:36:c0:c0:c9:95:cb:a8:6f:
15:ae:f5:af:55:44:bf:5e:a3:e9:06:2d:77:29:12:
65:1f:83:f6:2f:a8:0d:a4:50:bf:63:a6:1b:33:fb:
97:8f:7d:0a:b6:0b:10:15:f4:fb:db:a9:8a:70:ec:
ce:eb:88:5d:1b:3c:cb:b5:cd:f8:41:04:a8:49:7f:
23:18:32:8f:87:50:e5:41:8a:76:0f:ae:9d:e9:3a:
eb:ba:64:27:e4:2c:72:1c:c0:69:9b:a6:36:de:49:
12:2f:03:3d:a3:9b:80:0c:cd:63:77:58:a7:11:63:
f7:cd:44:e0:1d:d6:8a:8c:c0:c6:7b:1e:03:02:80:
da:df:84:76:09:9e:f8:c9:66:32:aa:84:94:87:e5:
56:70:12:43:71:7e:41:6a:73:8d:dd:c6:50:29:40:
c6:a2:1f:88:1a:ef:85:b6:55:f9:f3:7a:52:f1:c7:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:30:93:1D:E9:FA:3B:5E:FD:D0:40:B2:39:69:15:77:CC:FD:3C:05
X509v3 Authority Key Identifier:
keyid:9B:07:0C:07:A2:92:61:81:86:38:5C:C2:04:EC:95:FB:64:AF:5D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwcMB6KSYYGGOFzCBOyV-2SvXRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/sDCTHen6O1790ECyOWkVd8z9PAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/mwcMB6KSYYGGOFzCBOyV-2SvXRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.195.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e3:10:1c:c6:03:f2:d0:62:40:a9:54:e8:71:a4:ce:8d:8e:
0f:7b:93:aa:df:1d:1b:d6:c6:13:99:62:17:dd:a0:7f:90:80:
49:54:85:26:8d:d8:ce:b8:00:8e:c3:0c:c1:c6:0c:89:cd:f5:
cc:53:a0:f7:a1:f2:da:28:6a:49:6e:98:68:cd:3f:9b:54:2d:
f5:e9:a5:df:d9:b2:9d:cd:c5:11:72:f4:2d:7e:3a:8b:a5:a0:
d2:3d:22:42:bc:72:70:8e:30:21:a7:ff:a3:65:62:f8:3f:3a:
f3:b6:a7:a2:a7:b5:c4:4b:4c:23:8a:89:e4:b4:c7:1f:50:1b:
d9:92:33:10:20:00:f7:95:e2:9b:ca:ab:84:95:fa:ba:59:78:
3f:a0:68:e7:03:3b:1f:f6:3b:b1:58:4d:f8:9a:17:7e:43:fb:
c9:3f:a3:e7:ac:59:38:db:70:29:d6:40:41:1d:ff:cc:4a:4e:
08:f0:3b:a9:21:c4:41:b4:a2:ef:d7:ee:1e:72:db:34:34:12:
30:57:db:37:0f:95:67:f1:8e:fd:47:a9:73:89:c2:5a:74:28:
88:ec:bf:e4:17:c1:f7:a4:51:37:77:d7:88:57:5e:f2:fc:08:
73:d5:74:31:78:07:7d:4c:be:bb:cf:49:50:bc:de:9c:be:76:
82:37:cd:1e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJIctzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjA3MGMwN2EyOTI2MTgxODYzODVjYzIwNGVjOTVmYjY0YWY1ZDE5MB4XDTIyMDEw
MTAxNTk1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjAzMDkzMWRlOWZh
M2I1ZWZkZDA0MGIyMzk2OTE1NzdjY2ZkM2MwNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM+XlGonEv4T9EYA+BSD6MJmolYmfbfMcxfvLl3Hm0cl8zb3
W4URkBBlYQCZtyEk6q7ugLoiQF1rPBnNqc6LtGdwO9qhynHAfsjmUrpHEKkrNjbA
wMmVy6hvFa71r1VEv16j6QYtdykSZR+D9i+oDaRQv2OmGzP7l499CrYLEBX0+9up
inDszuuIXRs8y7XN+EEEqEl/Ixgyj4dQ5UGKdg+unek667pkJ+QschzAaZumNt5J
Ei8DPaObgAzNY3dYpxFj981E4B3WiozAxnseAwKA2t+Edgme+MlmMqqElIflVnAS
Q3F+QWpzjd3GUClAxqIfiBrvhbZV+fN6UvHHQSsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSwMJMd6fo7Xv3QQLI5aRV3zP08BTAfBgNVHSMEGDAWgBSbBwwHopJhgYY4
XMIE7JX7ZK9dGTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L213Y01CNktTWVlHR09GekNCT3lWLTJTdlhSay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvNmEzZTJiLTVkNDAtNDY3ZS1iNDY3LWZlM2Q2ZWNkNGIzYy8x
L3NEQ1RIZW42TzE3OTBFQ3lPV2tWZDh6OVBBVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
NmEzZTJiLTVkNDAtNDY3ZS1iNDY3LWZlM2Q2ZWNkNGIzYy8xL213Y01CNktTWVlH
R09GekNCT3lWLTJTdlhSay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALBhwzANBgkqhkiG9w0BAQsFAAOC
AQEAVOMQHMYD8tBiQKlU6HGkzo2OD3uTqt8dG9bGE5liF92gf5CASVSFJo3YzrgA
jsMMwcYMic31zFOg96Hy2ihqSW6YaM0/m1Qt9eml39mync3FEXL0LX46i6Wg0j0i
QrxycI4wIaf/o2Vi+D8687anoqe1xEtMI4qJ5LTHH1Ab2ZIzECAA95Xim8qrhJX6
ull4P6Bo5wM7H/Y7sVhN+JoXfkP7yT+j56xZONtwKdZAQR3/zEpOCPA7qSHEQbSi
79fuHnLbNDQSMFfbNw+VZ/GO/Uepc4nCWnQoiOy/5BfB96RRN3fXiFde8vwIc9V0
MXgHfUy+u89JULzenL52gjfNHg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org