Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ayp4UOTDpCccjfAzMztNUsUNYic.roa
File: ayp4UOTDpCccjfAzMztNUsUNYic.roa (raw, json)
Hash identifier: AgiQrWLWe2qaX77tk/wAqIJBrCTmobfABQvzaWyhuOM=
Subject key identifier: 6B:2A:78:50:E4:C3:A4:27:1C:8D:F0:33:33:3B:4D:52:C5:0D:62:27
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0760A651
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ayp4UOTDpCccjfAzMztNUsUNYic.roa
Signing time: Sat 01 Jan 2022 03:51:30 +0000
ROA not before: Sat 01 Jan 2022 03:51:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206446
IP address blocks: 212.115.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123774545 (0x760a651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 03:51:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b2a7850e4c3a4271c8df033333b4d52c50d6227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:db:b9:01:b2:76:84:f2:4d:fa:20:3c:a8:
b8:e0:23:22:35:8a:ae:5d:0c:17:22:e6:a2:52:0d:
e8:a6:0e:22:f1:4a:b6:29:80:c5:c9:39:2e:03:36:
ba:bf:af:51:3f:68:24:11:6b:e8:fc:61:b3:e7:28:
e9:2a:28:fa:c5:47:c7:7c:2b:bc:9b:16:0b:e7:63:
08:b1:28:c9:bd:52:e5:df:d8:83:e8:70:b7:f2:88:
69:54:fe:36:62:37:1b:0f:08:83:15:51:84:57:6d:
fb:95:93:ea:5e:86:fe:9c:8a:e4:25:1a:3e:26:6f:
8a:e8:7d:6b:9d:6e:5d:d4:53:b4:4e:02:79:09:85:
08:39:62:6e:69:4d:31:b3:ec:ce:c8:fd:91:69:ae:
7f:43:cf:71:28:25:ce:e6:14:27:2e:3f:6d:a8:82:
57:4d:1c:46:84:3c:0f:ba:8a:32:92:12:9e:49:3b:
1f:83:11:f6:cc:f9:3f:71:8a:c7:30:e2:26:af:d8:
ce:8b:e2:ce:0b:75:3b:61:4f:9f:b4:e5:f3:e3:e5:
ad:c6:3b:bc:d8:b7:02:a7:73:66:09:a5:18:e4:9a:
38:57:fc:3c:c4:60:ee:46:70:cd:9a:c6:01:43:79:
65:0d:a8:cc:49:b9:f0:18:a8:14:ea:7b:da:50:3e:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2A:78:50:E4:C3:A4:27:1C:8D:F0:33:33:3B:4D:52:C5:0D:62:27
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ayp4UOTDpCccjfAzMztNUsUNYic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.124.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:70:7e:5c:83:fe:b8:4b:53:e3:ff:dd:27:66:c1:37:84:1e:
b6:3a:d9:24:97:ca:a1:c9:b2:95:b6:7a:a5:1c:33:f6:a4:ff:
38:6a:95:c1:7a:fa:fe:f3:9d:53:5a:c9:b3:53:60:10:4e:50:
6a:65:2c:fa:af:1e:d3:f5:04:84:09:b2:80:37:32:1e:4e:07:
1d:e9:8a:59:bc:25:df:b4:69:cf:f6:1c:b6:e8:e8:ec:2c:3e:
63:6c:92:a9:4b:11:e5:24:cc:42:e0:c4:7f:9b:32:f3:13:be:
76:df:fd:58:4b:d0:22:16:c0:51:67:d0:c8:14:47:3c:9d:f0:
17:9d:43:e1:bc:a3:8f:4f:43:8f:2c:df:f1:a2:b1:6d:dc:ad:
17:95:15:9a:8d:5d:40:dd:34:b8:60:ea:e6:d3:9f:f4:ec:b6:
d1:41:7d:b9:10:f3:6b:4b:85:9d:e4:57:2b:6a:25:3d:3f:80:
9d:2c:58:96:2d:f0:8b:a3:98:e6:57:67:df:5f:53:62:bf:61:
9a:7c:ec:51:a3:5a:df:8a:57:dd:2c:1a:1c:2a:9f:27:e0:77:
c5:fc:04:91:72:de:d7:5c:19:c0:b3:ba:de:0c:3b:c1:0c:b2:
b1:89:df:4f:67:04:cc:9b:eb:cd:23:68:ba:dc:7e:c6:e8:9e:
ca:f8:30:58
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB2CmUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjBjMGQwNDIyNTU2NmRiOTVlOWFkM2IyZWY2MDUwMTQ5NzVhYWEyMB4XDTIyMDEw
MTAzNTEzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmIyYTc4NTBlNGMz
YTQyNzFjOGRmMDMzMzMzYjRkNTJjNTBkNjIyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKJ327kBsnaE8k36IDyouOAjIjWKrl0MFyLmolIN6KYOIvFK
timAxck5LgM2ur+vUT9oJBFr6Pxhs+co6Soo+sVHx3wrvJsWC+djCLEoyb1S5d/Y
g+hwt/KIaVT+NmI3Gw8IgxVRhFdt+5WT6l6G/pyK5CUaPiZviuh9a51uXdRTtE4C
eQmFCDlibmlNMbPszsj9kWmuf0PPcSglzuYUJy4/baiCV00cRoQ8D7qKMpISnkk7
H4MR9sz5P3GKxzDiJq/Yzovizgt1O2FPn7Tl8+PlrcY7vNi3AqdzZgmlGOSaOFf8
PMRg7kZwzZrGAUN5ZQ2ozEm58BioFOp72lA+sKkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRrKnhQ5MOkJxyN8DMzO01SxQ1iJzAfBgNVHSMEGDAWgBSbDA0EIlVm25Xp
rTsu9gUBSXWqojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L213d05CQ0pWWnR1VjZhMDdMdllGQVVsMXFxSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvMGVjNmQyLWYxZDctNGIwYS1hZDMzLWU4ZWYyZjA5NTk4ZS8x
L2F5cDRVT1REcENjY2pmQXpNenROVXNVTllpYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
MGVjNmQyLWYxZDctNGIwYS1hZDMzLWU4ZWYyZjA5NTk4ZS8xL213d05CQ0pWWnR1
VjZhMDdMdllGQVVsMXFxSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdRzfDANBgkqhkiG9w0BAQsFAAOC
AQEAyXB+XIP+uEtT4//dJ2bBN4QetjrZJJfKocmylbZ6pRwz9qT/OGqVwXr6/vOd
U1rJs1NgEE5QamUs+q8e0/UEhAmygDcyHk4HHemKWbwl37Rpz/Yctujo7Cw+Y2yS
qUsR5STMQuDEf5sy8xO+dt/9WEvQIhbAUWfQyBRHPJ3wF51D4byjj09Djyzf8aKx
bdytF5UVmo1dQN00uGDq5tOf9Oy20UF9uRDza0uFneRXK2olPT+AnSxYli3wi6OY
5ldn319TYr9hmnzsUaNa34pX3SwaHCqfJ+B3xfwEkXLe11wZwLO63gw7wQyysYnf
T2cEzJvrzSNoutx+xuieyvgwWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org