Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/DRTqS6jl3-KxrQuqnTDSXdRG12E.roa
File: DRTqS6jl3-KxrQuqnTDSXdRG12E.roa (raw, json)
Hash identifier: xFYeNefRAbGNDOk4K3RcQjWEGu9U84MgaRLGh+JTpV8=
Subject key identifier: 0D:14:EA:4B:A8:E5:DF:E2:B1:AD:0B:AA:9D:30:D2:5D:D4:46:D7:61
Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial: 363640A9
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/DRTqS6jl3-KxrQuqnTDSXdRG12E.roa
Signing time: Sat 01 Jan 2022 05:57:55 +0000
ROA not before: Sat 01 Jan 2022 05:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57280
IP address blocks: 109.163.200.0/21 maxlen: 21
185.60.172.0/22 maxlen: 22
185.60.174.0/24 maxlen: 24
185.60.175.0/24 maxlen: 24
2a03:5584::/30 maxlen: 30
2a03:5580::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909525161 (0x363640a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Validity
Not Before: Jan 1 05:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d14ea4ba8e5dfe2b1ad0baa9d30d25dd446d761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:63:8b:dd:f5:e8:4b:05:18:f0:f5:df:1a:
ed:7e:a9:23:87:02:e5:f8:be:6b:10:af:f3:31:58:
ca:a6:eb:84:2e:ea:86:e4:d8:f2:c7:88:9c:1e:62:
e1:9f:78:6c:92:2e:7e:27:db:a8:6b:8e:b5:90:80:
d3:33:40:ec:27:5d:a0:25:26:e6:6c:b2:15:d9:b1:
ee:79:c2:2c:73:d2:a5:d6:6b:23:55:4e:2d:c3:c8:
fb:d6:45:c7:d0:3d:c7:44:2c:73:a0:de:60:cf:72:
6a:bd:60:0e:95:0e:67:31:00:31:1b:9f:01:a5:9c:
27:c8:e1:1f:31:c8:cc:da:3e:71:b7:92:57:46:45:
f6:f6:01:a7:fe:26:17:11:f1:da:b9:01:06:39:a6:
af:c6:6e:41:fa:50:b5:bd:2a:b0:a8:7e:60:56:a6:
62:0f:3f:a2:dd:96:66:13:f5:ac:ce:56:c3:08:ac:
f7:bc:22:ea:8a:16:de:e9:b9:b4:f4:d2:e0:2d:76:
76:78:9c:89:ee:64:24:f5:bf:31:38:85:52:90:5a:
02:8f:eb:01:6f:05:51:62:e1:0e:c4:77:58:66:a4:
9a:7b:13:01:89:d0:8c:cb:eb:1b:0c:59:1c:10:40:
5b:53:e9:fa:23:05:85:da:1d:c5:19:3e:8e:ba:7d:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:14:EA:4B:A8:E5:DF:E2:B1:AD:0B:AA:9D:30:D2:5D:D4:46:D7:61
X509v3 Authority Key Identifier:
keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/DRTqS6jl3-KxrQuqnTDSXdRG12E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.163.200.0/21
185.60.172.0/22
IPv6:
2a03:5580::/29
Signature Algorithm: sha256WithRSAEncryption
11:2c:f0:2c:2c:0c:cd:3e:1d:ae:c5:c2:f7:97:37:c9:95:9a:
7f:1a:38:e2:11:b0:cd:86:f1:96:4f:b7:a7:03:0f:b0:a1:4e:
06:f2:1a:ac:a1:a9:ab:77:c4:90:68:9b:43:be:41:06:a0:75:
09:c7:82:b0:96:47:b5:77:2c:81:9e:a5:ae:cf:49:ca:d3:e2:
50:96:ff:f2:cd:50:a0:9a:0c:a2:2a:d7:8b:ee:9e:39:98:46:
02:12:9d:54:95:d0:d3:49:e5:05:ad:1a:39:4f:ae:88:c6:db:
a3:a0:95:4a:a4:dc:f5:a8:11:b9:a8:04:75:5a:01:30:92:2b:
97:35:60:49:17:5c:af:4f:32:82:4e:01:a3:a5:c4:1c:96:d2:
c5:ae:23:1d:6b:65:04:11:5e:cd:cc:1a:04:24:d4:da:79:69:
26:5a:bd:21:6c:50:0b:fe:be:f3:f9:fe:21:a1:65:2e:1b:25:
c7:56:ae:b0:bd:94:83:f0:bf:de:63:20:62:99:fb:21:4c:e1:
73:22:bf:22:93:2f:5a:7a:c4:95:7a:1d:d4:27:cc:0f:63:4b:
5b:f0:3d:33:cc:66:9e:2b:4e:70:da:c4:2e:27:66:4b:97:9d:
de:54:c2:d7:62:d9:76:e8:69:2c:91:00:a1:fa:b1:05:07:9e:
f4:7f:6d:3f
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIENjZAqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MTRiNzBmZjljMjJmZmUwYjc3ZjQzZjQxYzA4MDc0ZGU2ZjM2ZTFiMB4XDTIyMDEw
MTA1NTc1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQxNGVhNGJhOGU1
ZGZlMmIxYWQwYmFhOWQzMGQyNWRkNDQ2ZDc2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMhAY4vd9ehLBRjw9d8a7X6pI4cC5fi+axCv8zFYyqbrhC7q
huTY8seInB5i4Z94bJIufifbqGuOtZCA0zNA7CddoCUm5myyFdmx7nnCLHPSpdZr
I1VOLcPI+9ZFx9A9x0Qsc6DeYM9yar1gDpUOZzEAMRufAaWcJ8jhHzHIzNo+cbeS
V0ZF9vYBp/4mFxHx2rkBBjmmr8ZuQfpQtb0qsKh+YFamYg8/ot2WZhP1rM5Wwwis
97wi6ooW3um5tPTS4C12dnicie5kJPW/MTiFUpBaAo/rAW8FUWLhDsR3WGakmnsT
AYnQjMvrGwxZHBBAW1Pp+iMFhdodxRk+jrp9uhMCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQNFOpLqOXf4rGtC6qdMNJd1EbXYTAfBgNVHSMEGDAWgBRhS3D/nCL/4Ld/
Q/QcCAdN5vNuGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lVdHdfNXdpXy1DM2YwUDBIQWdIVGViemJocy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTIvOTcxZjE3LTBiZjgtNGJhMS1iNzY4LTU1ZmVjMTI1MmFiMC8x
L0RSVHFTNmpsMy1LeHJRdXFuVERTWGRSRzEyRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIv
OTcxZjE3LTBiZjgtNGJhMS1iNzY4LTU1ZmVjMTI1MmFiMC8xL1lVdHdfNXdpXy1D
M2YwUDBIQWdIVGViemJocy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA22jyAMEArk8rDANBAIAAjAHAwUD
KgNVgDANBgkqhkiG9w0BAQsFAAOCAQEAESzwLCwMzT4drsXC95c3yZWafxo44hGw
zYbxlk+3pwMPsKFOBvIarKGpq3fEkGibQ75BBqB1CceCsJZHtXcsgZ6lrs9JytPi
UJb/8s1QoJoMoirXi+6eOZhGAhKdVJXQ00nlBa0aOU+uiMbbo6CVSqTc9agRuagE
dVoBMJIrlzVgSRdcr08ygk4Bo6XEHJbSxa4jHWtlBBFezcwaBCTU2nlpJlq9IWxQ
C/6+8/n+IaFlLhslx1ausL2Ug/C/3mMgYpn7IUzhcyK/IpMvWnrElXod1CfMD2NL
W/A9M8xmnitOcNrELidmS5ed3lTC12LZduhpLJEAofqxBQee9H9tPw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:09 2024 by rpki-client on console-ams.rpki-client.org