Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/VGMHOgs9svjRIKIz6sWIQ1g2ePU.roa
File: VGMHOgs9svjRIKIz6sWIQ1g2ePU.roa (raw, json)
Hash identifier: 6iwRQCIlkruZ5cQbiPrLFdr2ua5Gx2uo3NbRJEFIkDo=
Subject key identifier: 54:63:07:3A:0B:3D:B2:F8:D1:20:A2:33:EA:C5:88:43:58:36:78:F5
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 02C3BD86
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/VGMHOgs9svjRIKIz6sWIQ1g2ePU.roa
Signing time: Sat 01 Jan 2022 11:58:04 +0000
ROA not before: Sat 01 Jan 2022 11:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203948
IP address blocks: 109.238.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46382470 (0x2c3bd86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jan 1 11:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5463073a0b3db2f8d120a233eac58843583678f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:26:77:21:e9:54:90:4c:3b:a7:2c:67:c8:
b5:9c:84:fd:0a:55:80:05:b9:65:88:49:39:29:71:
b3:55:29:b4:d4:1c:8a:a8:4f:7b:5f:09:da:ce:0c:
08:e9:0e:5a:cf:40:59:11:a9:cc:f8:6e:0a:a5:99:
aa:a4:9e:37:f1:db:21:6b:33:68:3f:5c:31:50:e5:
4f:e7:28:75:a2:20:63:6a:1f:f3:01:05:8e:c3:e9:
c5:21:d6:5c:5d:ad:30:d9:d6:da:4b:1a:51:ab:26:
f8:ce:0a:a8:e2:b5:5b:a3:8c:61:20:f3:c7:ee:b2:
46:08:66:10:9d:ca:86:fa:6d:39:9a:0c:bd:37:b6:
05:9f:e1:95:f3:47:4e:06:76:e6:6d:ff:81:f5:72:
82:fd:44:03:a7:f0:45:40:a1:6a:03:a3:ef:93:aa:
31:8c:32:35:1b:f9:52:0c:df:ab:22:31:32:12:3d:
e3:ff:77:ca:5f:b2:9a:35:eb:d0:a3:be:24:4d:f3:
5d:a7:1d:44:35:2a:81:94:27:26:32:7d:68:f2:e7:
07:65:6e:9a:91:d7:2f:bd:71:32:de:78:bf:e1:c0:
1a:36:9c:84:a8:e4:26:2e:ca:34:a0:44:dd:7d:b3:
69:88:c5:46:b4:fc:43:d0:74:77:aa:ab:0b:9c:27:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:07:3A:0B:3D:B2:F8:D1:20:A2:33:EA:C5:88:43:58:36:78:F5
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/VGMHOgs9svjRIKIz6sWIQ1g2ePU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.196.0/22
Signature Algorithm: sha256WithRSAEncryption
04:5d:f6:91:1a:b6:57:c1:34:2c:91:80:70:11:5b:60:e9:8b:
74:be:dd:45:3b:70:8c:be:93:10:e2:31:eb:2f:30:4d:2d:85:
5a:46:ba:6d:9a:2c:ae:84:12:6f:cc:0f:77:06:36:15:5e:c5:
f8:d4:39:34:98:d9:2c:c4:51:12:77:61:db:de:26:24:89:6c:
23:6b:03:9d:60:6d:59:ba:fa:9c:16:3d:6f:92:fb:dd:f0:87:
02:5a:03:09:68:ac:56:b2:b0:bd:20:86:ec:a7:57:1a:fb:47:
b8:b5:30:e8:9f:e8:0d:e3:cf:1c:22:61:5b:05:1b:b3:18:8a:
f3:8e:9d:e1:11:bc:75:ff:66:18:0d:11:2d:4f:4f:85:60:61:
ea:ed:80:8e:ca:fe:fa:6b:a1:c9:14:c9:d3:52:dc:b8:19:c2:
0d:2a:f9:e7:15:61:88:4c:7e:d4:8c:22:de:b2:58:61:d6:bb:
61:88:5d:42:ac:b0:44:c7:bd:a1:2b:bf:55:55:86:54:b5:42:
50:7b:d9:a5:4c:6e:8d:5d:e2:67:b9:73:2d:fd:ef:c4:02:05:
df:f4:a7:87:73:6f:7f:e5:85:31:4a:5c:0d:c2:7f:ab:de:97:
6a:19:49:dd:18:3c:db:50:d1:ff:af:e1:62:ee:4d:3d:8e:35:
71:3f:54:f6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAsO9hjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmYzNDRhNjNkY2I3MGU4OTA1N2RlYjhlMjc2MWRjNDUxNjU4ODFhMB4XDTIyMDEw
MTExNTgwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTQ2MzA3M2EwYjNk
YjJmOGQxMjBhMjMzZWFjNTg4NDM1ODM2NzhmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKFCJnch6VSQTDunLGfItZyE/QpVgAW5ZYhJOSlxs1UptNQc
iqhPe18J2s4MCOkOWs9AWRGpzPhuCqWZqqSeN/HbIWszaD9cMVDlT+codaIgY2of
8wEFjsPpxSHWXF2tMNnW2ksaUasm+M4KqOK1W6OMYSDzx+6yRghmEJ3KhvptOZoM
vTe2BZ/hlfNHTgZ25m3/gfVygv1EA6fwRUChagOj75OqMYwyNRv5UgzfqyIxMhI9
4/93yl+ymjXr0KO+JE3zXacdRDUqgZQnJjJ9aPLnB2VumpHXL71xMt54v+HAGjac
hKjkJi7KNKBE3X2zaYjFRrT8Q9B0d6qrC5wnY8kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRUYwc6Cz2y+NEgojPqxYhDWDZ49TAfBgNVHSMEGDAWgBQi80SmPctw6JBX
3rjidh3EUWWIGjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0l2TkVwajNMY09pUVY5NjQ0bllkeEZGbGlCby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNTM2MGU3LWYwMmEtNDczNy05OWM3LWZlYmI2NGI1ZTE2NC8x
L1ZHTUhPZ3M5c3ZqUklLSXo2c1dJUTFnMmVQVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NTM2MGU3LWYwMmEtNDczNy05OWM3LWZlYmI2NGI1ZTE2NC8xL0l2TkVwajNMY09p
UVY5NjQ0bllkeEZGbGlCby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm3uxDANBgkqhkiG9w0BAQsFAAOC
AQEABF32kRq2V8E0LJGAcBFbYOmLdL7dRTtwjL6TEOIx6y8wTS2FWka6bZosroQS
b8wPdwY2FV7F+NQ5NJjZLMRREndh294mJIlsI2sDnWBtWbr6nBY9b5L73fCHAloD
CWisVrKwvSCG7KdXGvtHuLUw6J/oDePPHCJhWwUbsxiK846d4RG8df9mGA0RLU9P
hWBh6u2Ajsr++muhyRTJ01LcuBnCDSr55xVhiEx+1Iwi3rJYYda7YYhdQqywRMe9
oSu/VVWGVLVCUHvZpUxujV3iZ7lzLf3vxAIF3/Snh3Nvf+WFMUpcDcJ/q96XahlJ
3Rg821DR/6/hYu5NPY41cT9U9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:55 2024 by rpki-client on console-fra.rpki-client.org