Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dG7uf4wZ-FXJlQc8L685wKEcZSU.roa
File: dG7uf4wZ-FXJlQc8L685wKEcZSU.roa (raw, json)
Hash identifier: k3rq56dgAcNVfXYjkclhYU2EzOnBu70slhs/Pg0Snqw=
Subject key identifier: 74:6E:EE:7F:8C:19:F8:55:C9:95:07:3C:2F:AF:39:C0:A1:1C:65:25
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841D7F48523B4CE9D91D4BA5938F273E65
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dG7uf4wZ-FXJlQc8L685wKEcZSU.roa
Signing time: Fri 28 Oct 2022 07:29:51 +0000
ROA not before: Fri 28 Oct 2022 07:29:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50040
IP address blocks: 109.73.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:7f:48:52:3b:4c:e9:d9:1d:4b:a5:93:8f:27:3e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 28 07:29:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=746eee7f8c19f855c995073c2faf39c0a11c6525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ff:a8:4c:b1:db:47:8d:8b:af:c9:ca:bd:6c:
7e:9f:30:32:41:7a:05:4e:a2:bd:06:ac:40:69:ff:
88:7d:5b:14:35:f1:19:ec:2d:09:2b:c6:9d:40:a4:
20:a5:eb:58:c4:14:02:29:2e:10:4b:e4:81:96:c9:
9a:5b:c0:4f:0b:75:0c:7d:55:12:f2:78:6c:40:f6:
42:b3:30:b1:62:42:2e:e6:7a:b4:35:53:c8:6a:26:
21:62:6a:04:3a:9e:ea:71:39:d1:52:8d:fc:45:8c:
78:c9:9f:2e:00:17:a7:ad:58:fc:22:38:54:ee:1f:
fa:0c:40:63:eb:62:dd:3e:50:36:90:3f:8d:4e:21:
6b:f7:24:f9:0b:af:c8:35:ef:23:2e:f1:c6:0c:8d:
36:d1:3c:85:f8:83:f1:18:32:ef:a3:5f:92:b7:24:
80:ba:a1:9f:3d:89:24:d5:34:ff:85:fd:31:b8:7b:
2b:15:4d:7b:e3:49:ca:26:e5:12:df:20:46:93:e8:
9e:65:20:a5:3b:03:b9:a4:8d:ca:df:7c:9b:94:32:
64:ab:a8:58:0e:05:33:c1:20:b0:ad:1d:e9:10:95:
14:1b:b7:49:c7:f5:4e:ef:22:66:e6:f5:2d:f5:fb:
ef:55:f5:f6:f8:33:23:b3:82:13:e3:6c:96:d7:cc:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6E:EE:7F:8C:19:F8:55:C9:95:07:3C:2F:AF:39:C0:A1:1C:65:25
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dG7uf4wZ-FXJlQc8L685wKEcZSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.73.15.0/24
Signature Algorithm: sha256WithRSAEncryption
80:6c:62:62:70:27:79:40:04:08:0a:03:a5:45:45:d3:40:13:
6b:ae:9b:72:79:e5:8d:c5:a2:37:71:bb:e9:d0:c2:42:6a:eb:
f3:01:91:c5:4d:50:a2:fa:b6:a1:37:36:46:8e:a1:9f:da:51:
c6:2c:b3:5d:43:65:08:e0:dd:fe:69:07:fa:c7:76:e2:c3:c5:
2d:54:ef:00:83:ae:c3:01:f2:b5:3f:22:a5:94:12:dd:d8:af:
f4:90:5f:67:e9:53:41:f3:d1:9e:cc:db:df:dc:96:a5:43:19:
f8:f3:90:08:92:6c:4a:bd:86:1f:a9:3b:3d:c8:4a:0f:8b:c0:
ef:83:b6:7e:16:b7:04:bc:0d:59:b1:2a:66:ca:4b:ab:a5:64:
7b:10:da:6e:7d:89:e7:64:6e:eb:a5:35:32:65:d4:40:9e:12:
4a:8e:69:89:59:28:f9:04:58:44:71:0a:31:5c:c7:47:db:d5:
03:f6:11:c7:1c:3c:59:d8:e1:f1:78:7c:05:cb:2e:28:77:52:
cb:e8:30:37:ad:66:3f:87:8f:07:ec:f3:02:a6:bc:7c:3b:cf:
67:b5:80:0f:8e:2d:6d:1a:a4:d8:76:7e:f3:fc:79:a4:ce:3e:
08:e8:b3:0a:67:35:41:a1:29:14:2a:e3:b2:84:a5:7a:86:cc:
2c:c8:1d:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQdf0hSO0zp2R1LpZOPJz5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI4MDcyOTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDZlZWU3ZjhjMTlmODU1Yzk5NTA3M2MyZmFmMzljMGExMWM2NTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/+oTLHbR42Lr8nKvWx+nzAyQXoF
TqK9BqxAaf+IfVsUNfEZ7C0JK8adQKQgpetYxBQCKS4QS+SBlsmaW8BPC3UMfVUS
8nhsQPZCszCxYkIu5nq0NVPIaiYhYmoEOp7qcTnRUo38RYx4yZ8uABenrVj8IjhU
7h/6DEBj62LdPlA2kD+NTiFr9yT5C6/INe8jLvHGDI020TyF+IPxGDLvo1+StySA
uqGfPYkk1TT/hf0xuHsrFU1740nKJuUS3yBGk+ieZSClOwO5pI3K33yblDJkq6hY
DgUzwSCwrR3pEJUUG7dJx/VO7yJm5vUt9fvvVfX2+DMjs4IT42yW18xhKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHRu7n+MGfhVyZUHPC+vOcChHGUlMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvZEc3dWY0d1otRlhKbFFjOEw2ODV3S0VjWlNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUkPMA0G
CSqGSIb3DQEBCwUAA4IBAQCAbGJicCd5QAQICgOlRUXTQBNrrptyeeWNxaI3cbvp
0MJCauvzAZHFTVCi+rahNzZGjqGf2lHGLLNdQ2UI4N3+aQf6x3biw8UtVO8Ag67D
AfK1PyKllBLd2K/0kF9n6VNB89GezNvf3JalQxn485AIkmxKvYYfqTs9yEoPi8Dv
g7Z+FrcEvA1ZsSpmykurpWR7ENpufYnnZG7rpTUyZdRAnhJKjmmJWSj5BFhEcQox
XMdH29UD9hHHHDxZ2OHxeHwFyy4od1LL6DA3rWY/h48H7PMCprx8O89ntYAPji1t
GqTYdn7z/Hmkzj4I6LMKZzVBoSkUKuOyhKV6hswsyB2F
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:45 2025 by rpki-client