Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/ot9_pxD8sZeJHkPKdcmi7xJ2dSw.roa
File: ot9_pxD8sZeJHkPKdcmi7xJ2dSw.roa (raw, json)
Hash identifier: K55vf236C3l+SPhNrkjevC+nDrtu1v4igmUXYJMJp40=
Subject key identifier: A2:DF:7F:A7:10:FC:B1:97:89:1E:43:CA:75:C9:A2:EF:12:76:75:2C
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 01823A2CFCEEE98B20D686B40E6D67875533
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/ot9_pxD8sZeJHkPKdcmi7xJ2dSw.roa
Signing time: Tue 26 Jul 2022 11:03:23 +0000
ROA not before: Tue 26 Jul 2022 11:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207718
IP address blocks: 176.32.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:2c:fc:ee:e9:8b:20:d6:86:b4:0e:6d:67:87:55:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jul 26 11:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2df7fa710fcb197891e43ca75c9a2ef1276752c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:89:a4:8a:df:a7:00:2d:ac:9f:4b:b3:0e:
52:25:6e:26:c2:6c:9b:64:4f:94:8b:58:21:b2:33:
a3:ed:d9:31:3b:d0:02:9a:9c:7c:c5:08:89:76:a9:
b5:a3:0f:ce:b0:1d:58:5f:aa:b5:40:8f:2d:0c:8f:
43:88:ab:40:b4:4a:0f:33:69:1b:86:58:8f:fe:8f:
67:49:87:88:4c:dc:94:62:be:83:7c:ae:12:ca:9a:
fe:f1:d3:04:51:26:c1:2f:87:2c:25:e0:aa:ad:96:
86:c9:81:e7:e4:7c:1b:c8:9e:43:22:ed:dd:ad:de:
c8:95:b9:03:4f:92:d9:0c:44:d2:66:65:f9:c4:7a:
e3:e4:02:ff:2b:61:1f:41:14:40:14:b8:a2:16:9b:
24:bc:c4:92:31:4d:2b:2a:6c:1e:15:2d:82:b3:13:
0b:62:60:58:c3:66:a4:17:c6:0f:49:ac:99:ff:0a:
d3:1e:21:95:70:fb:ed:e8:e7:68:52:a6:81:05:1c:
c6:3d:29:9d:64:0b:50:c1:75:cd:7e:40:cc:ce:a4:
98:a9:79:a9:bb:6e:39:20:82:8c:8e:12:a1:22:00:
09:5a:bc:ee:ca:d8:e4:38:1d:92:0f:c1:c3:cb:3f:
a9:c5:87:ee:45:67:c2:07:a5:f7:77:38:ee:69:07:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:7F:A7:10:FC:B1:97:89:1E:43:CA:75:C9:A2:EF:12:76:75:2C
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/ot9_pxD8sZeJHkPKdcmi7xJ2dSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.36.0/22
Signature Algorithm: sha256WithRSAEncryption
24:3c:50:8b:3d:42:7e:6a:9d:7d:49:95:3a:1f:3e:e5:70:27:
18:d2:4a:a4:a8:a6:d0:9d:ff:94:46:8b:97:2e:f7:d0:5c:9e:
ad:f9:1f:bb:16:45:f0:12:8b:79:03:7a:23:b3:d9:d0:ca:6d:
e9:e8:f2:00:fd:fe:12:40:a4:08:26:35:16:bc:cb:3d:7f:de:
b5:f1:4c:ee:fc:e3:96:b5:57:51:62:2b:51:1b:1b:96:9e:7b:
81:bd:2f:34:47:0c:67:d9:f2:33:29:b4:49:93:38:06:e9:42:
a0:b0:e3:81:22:91:94:58:13:b2:ee:54:1f:06:15:4a:96:d6:
f5:9c:58:c2:aa:b4:c4:73:54:a0:e8:8a:d7:d9:88:4f:74:bb:
85:0e:df:d1:e0:38:b2:0d:33:4e:fd:7d:d9:68:60:a8:61:93:
8a:03:e1:d8:50:6e:7a:ee:55:cb:a6:5c:97:51:a3:d2:6b:94:
b8:e9:ac:15:40:fb:d8:44:1d:e5:34:0d:13:4e:27:d7:90:49:
89:42:9f:1e:67:49:f8:e2:0b:3f:e8:44:92:75:52:09:ee:82:
db:3f:76:d9:32:98:c4:a8:2b:c5:22:57:11:9b:3b:f2:cc:f3:
12:01:84:43:cf:61:94:0e:f4:9b:29:d0:6b:df:df:c3:2d:ce:
7e:b4:d8:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYI6LPzu6Ysg1oa0Dm1nh1UzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy
MTViYzAwHhcNMjIwNzI2MTEwMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmRmN2ZhNzEwZmNiMTk3ODkxZTQzY2E3NWM5YTJlZjEyNzY3NTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDWJpIrfpwAtrJ9Lsw5SJW4mwmyb
ZE+Ui1ghsjOj7dkxO9ACmpx8xQiJdqm1ow/OsB1YX6q1QI8tDI9DiKtAtEoPM2kb
hliP/o9nSYeITNyUYr6DfK4Sypr+8dMEUSbBL4csJeCqrZaGyYHn5HwbyJ5DIu3d
rd7IlbkDT5LZDETSZmX5xHrj5AL/K2EfQRRAFLiiFpskvMSSMU0rKmweFS2CsxML
YmBYw2akF8YPSayZ/wrTHiGVcPvt6OdoUqaBBRzGPSmdZAtQwXXNfkDMzqSYqXmp
u245IIKMjhKhIgAJWrzuytjkOB2SD8HDyz+pxYfuRWfCB6X3dzjuaQfeNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKLff6cQ/LGXiR5DynXJou8SdnUsMB8GA1UdIwQY
MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt
MDI3YTc0M2JhNDYyLzEvb3Q5X3B4RDhzWmVKSGtQS2RjbWk3eEoyZFN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy
LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsCAkMA0G
CSqGSIb3DQEBCwUAA4IBAQAkPFCLPUJ+ap19SZU6Hz7lcCcY0kqkqKbQnf+URouX
LvfQXJ6t+R+7FkXwEot5A3ojs9nQym3p6PIA/f4SQKQIJjUWvMs9f9618Uzu/OOW
tVdRYitRGxuWnnuBvS80Rwxn2fIzKbRJkzgG6UKgsOOBIpGUWBOy7lQfBhVKltb1
nFjCqrTEc1Sg6IrX2YhPdLuFDt/R4DiyDTNO/X3ZaGCoYZOKA+HYUG567lXLplyX
UaPSa5S46awVQPvYRB3lNA0TTifXkEmJQp8eZ0n44gs/6ESSdVIJ7oLbP3bZMpjE
qCvFIlcRmzvyzPMSAYRDz2GUDvSbKdBr39/DLc5+tNiJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:42 2024 by rpki-client on console-fra.rpki-client.org