Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/xxrBfTjA48CKRKHVoepqg1FRMkI.roa
File: xxrBfTjA48CKRKHVoepqg1FRMkI.roa (raw, json)
Hash identifier: MfInX8Kz4HfRAt+Z1xk2x/XyzTzXKv33VQNWBuTEyns=
Subject key identifier: C7:1A:C1:7D:38:C0:E3:C0:8A:44:A1:D5:A1:EA:6A:83:51:51:32:42
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 12304A
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/xxrBfTjA48CKRKHVoepqg1FRMkI.roa
Signing time: Sun 03 Jul 2022 06:42:25 +0000
ROA not before: Sun 03 Jul 2022 06:42:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 209.127.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192010 (0x12304a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jul 3 06:42:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c71ac17d38c0e3c08a44a1d5a1ea6a8351513242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:e5:d8:e0:b9:fa:c8:7e:f0:b7:b9:a9:b2:
a1:a7:d8:58:51:be:2f:04:d9:b0:2d:8c:99:2d:6a:
0f:e9:2f:cd:06:d8:66:92:d3:f1:3b:4b:b9:c7:ed:
38:09:d3:a6:d0:46:60:af:c7:0a:4a:4e:69:90:3c:
a9:93:fb:86:cf:a1:0e:0c:9a:15:13:4e:5b:5b:7b:
17:1b:c0:78:59:87:0f:a2:3c:1b:69:52:df:67:1c:
c6:0f:60:4f:7f:47:77:f6:aa:63:08:63:ba:f3:2f:
c3:20:0b:2c:43:2e:17:64:51:7e:43:88:2c:2f:5e:
bf:a7:aa:80:46:3b:76:b4:ec:f3:3d:04:5c:28:8a:
f2:dc:80:73:b6:dd:98:5f:37:f6:82:7e:53:cf:50:
c3:49:24:6a:61:48:f8:da:b0:56:ca:a2:00:45:6d:
93:91:7d:7d:3d:6b:97:5e:f6:00:60:32:f0:2b:e5:
0d:1e:a7:35:e9:f1:dd:a5:42:db:64:db:27:f7:26:
00:ac:e7:49:47:37:1a:91:7f:b2:84:79:50:36:09:
a7:b7:22:a9:d1:52:36:eb:14:47:74:23:db:85:67:
ed:2b:e2:c2:86:cc:44:c6:d9:d4:ab:90:7d:98:9d:
d6:80:6e:02:73:f0:33:9c:54:25:06:74:5d:17:6c:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:C1:7D:38:C0:E3:C0:8A:44:A1:D5:A1:EA:6A:83:51:51:32:42
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/xxrBfTjA48CKRKHVoepqg1FRMkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.127.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:10:e8:fb:46:25:c8:6f:9d:25:b1:08:51:c3:ba:51:97:36:
e9:12:5f:32:b7:7b:83:9a:c5:f9:4a:ef:ce:e4:f5:1d:d9:c7:
24:51:48:36:32:52:bd:34:67:dc:2f:b5:13:4a:60:82:25:05:
31:aa:bb:5a:34:cb:ad:62:29:cb:b4:83:49:3f:66:1f:1a:78:
ab:81:bf:12:ee:cf:94:15:69:61:7b:8b:f4:d2:f7:7a:ef:29:
f1:07:8e:ce:b5:ec:11:a4:f4:08:42:f7:0e:77:d6:af:da:31:
2c:2e:ef:c0:30:b5:79:7d:fb:1e:31:f9:b0:9b:d5:89:f6:cc:
ee:c2:32:e6:51:40:53:68:97:8a:10:6b:18:19:13:b8:3b:d7:
ad:66:09:9a:04:04:0a:9e:8e:17:fe:d5:21:68:c9:08:a2:48:
45:56:8d:54:5b:92:69:27:f7:12:be:72:1b:24:30:63:e4:39:
c8:bb:2d:32:9b:e0:40:c9:c6:19:6f:7d:41:d7:69:51:e4:54:
df:ac:dd:01:1b:af:72:f7:52:d3:85:cd:2e:48:ad:37:6e:31:
b0:d6:80:c8:e5:b4:31:90:ae:e5:6b:3d:12:b4:fb:16:f8:9c:
ba:dc:85:f2:21:80:6e:b0:fc:5b:3d:e6:6c:e1:97:7c:3f:42:
9a:7f:d5:76
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDEjBKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
Y2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdjNGFkZmYwHhcNMjIwNzAz
MDY0MjI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNzFhYzE3ZDM4YzBl
M2MwOGE0NGExZDVhMWVhNmE4MzUxNTEzMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3lrl2OC5+sh+8Le5qbKhp9hYUb4vBNmwLYyZLWoP6S/NBthm
ktPxO0u5x+04CdOm0EZgr8cKSk5pkDypk/uGz6EODJoVE05bW3sXG8B4WYcPojwb
aVLfZxzGD2BPf0d39qpjCGO68y/DIAssQy4XZFF+Q4gsL16/p6qARjt2tOzzPQRc
KIry3IBztt2YXzf2gn5Tz1DDSSRqYUj42rBWyqIARW2TkX19PWuXXvYAYDLwK+UN
Hqc16fHdpULbZNsn9yYArOdJRzcakX+yhHlQNgmntyKp0VI26xRHdCPbhWftK+LC
hsxExtnUq5B9mJ3WgG4Cc/AznFQlBnRdF2yHZQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMcawX04wOPAikSh1aHqaoNRUTJCMB8GA1UdIwQYMBaAFKvN/Bp8Ugz40Xcp
II6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3YjdiLzEv
eHhyQmZUakE0OENLUktIVm9lcHFnMUZSTWtJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9l
NTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3YjdiLzEvcTgzOEdueFNEUGpS
ZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/cMA0GCSqGSIb3DQEBCwUAA4IB
AQA9EOj7RiXIb50lsQhRw7pRlzbpEl8yt3uDmsX5Su/O5PUd2cckUUg2MlK9NGfc
L7UTSmCCJQUxqrtaNMutYinLtINJP2YfGnirgb8S7s+UFWlhe4v00vd67ynxB47O
tewRpPQIQvcOd9av2jEsLu/AMLV5ffseMfmwm9WJ9szuwjLmUUBTaJeKEGsYGRO4
O9etZgmaBAQKno4X/tUhaMkIokhFVo1UW5JpJ/cSvnIbJDBj5DnIuy0ym+BAycYZ
b31B12lR5FTfrN0BG69y91LThc0uSK03bjGw1oDI5bQxkK7laz0StPsW+Jy63IXy
IYBusPxbPeZs4Zd8P0Kaf9V2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:39 2024 by rpki-client on console-fra.rpki-client.org