Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/2QpaJxkcwtciYCmih_WQMW111Bg.roa
File: 2QpaJxkcwtciYCmih_WQMW111Bg.roa (raw, json)
Hash identifier: fAchWaZtibML28nSGhu/6YKc2v81rh1iz6duiZ3F+m4=
Subject key identifier: D9:0A:5A:27:19:1C:C2:D7:22:60:29:A2:87:F5:90:31:6D:75:D4:18
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 09B7610E
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/2QpaJxkcwtciYCmih_WQMW111Bg.roa
Signing time: Sat 01 Jan 2022 02:50:39 +0000
ROA not before: Sat 01 Jan 2022 02:50:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57479
IP address blocks: 176.124.228.0/24 maxlen: 24
176.124.230.0/24 maxlen: 24
176.124.229.0/24 maxlen: 24
194.60.252.0/24 maxlen: 24
2001:67c:11a0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163012878 (0x9b7610e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Jan 1 02:50:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d90a5a27191cc2d7226029a287f590316d75d418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:86:5d:9b:22:f9:ad:93:7c:52:93:b7:e8:
28:1d:0e:92:8d:a8:f3:e8:82:65:34:94:15:49:27:
95:8d:92:67:ac:55:ff:e4:8b:73:a9:4b:4f:d0:02:
3f:0d:a2:0a:f8:d6:80:74:37:a4:51:22:69:a2:ac:
b9:69:2b:09:62:39:47:18:bf:2b:5f:60:f2:82:d3:
5c:f8:3c:b7:09:14:53:72:41:6f:ca:02:1b:45:0a:
54:9e:2c:fb:8e:f3:1f:ee:2e:3d:ca:ae:6d:3c:62:
fc:f6:76:f6:50:38:6a:d5:d2:b4:f3:6c:36:8e:87:
24:f0:74:89:48:63:8e:d4:64:c2:bb:60:6c:5d:aa:
94:76:ff:e2:6a:50:93:b1:0f:b4:95:d6:ed:b5:b9:
dd:7a:bf:db:2e:90:98:64:c0:fc:e1:22:d1:53:c3:
5f:02:f5:9c:2a:31:7c:1b:2b:66:93:f9:c8:7f:5e:
c7:be:36:e1:0e:04:f5:5b:8d:8b:e7:a7:87:e0:70:
a6:2a:67:ea:cf:2b:6e:7b:f9:d0:ef:c4:c2:ac:53:
38:fb:d9:d5:68:a2:a9:03:8c:5a:fe:4b:d2:be:e6:
f1:8e:c1:bd:95:06:ca:32:59:36:25:7c:47:68:dd:
70:66:d4:23:3c:c6:08:95:62:60:1e:af:6d:1e:80:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0A:5A:27:19:1C:C2:D7:22:60:29:A2:87:F5:90:31:6D:75:D4:18
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/2QpaJxkcwtciYCmih_WQMW111Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.228.0-176.124.230.255
194.60.252.0/24
IPv6:
2001:67c:11a0::/48
Signature Algorithm: sha256WithRSAEncryption
5a:be:c1:07:84:54:74:dc:67:9b:5b:70:ed:0d:ba:c4:6c:6a:
d9:3b:54:d9:40:88:87:56:c3:ac:70:05:1d:23:1d:dd:65:88:
7e:52:c0:d0:1a:e4:46:45:62:95:13:4f:00:20:6d:0d:fb:4d:
00:0e:44:42:2d:3d:8c:95:7d:a0:6b:42:d9:ae:17:d4:52:b0:
94:49:e9:c2:f0:a4:e9:15:5c:1e:d2:35:01:92:bb:be:4f:57:
8b:c9:b8:1e:07:f8:ec:21:54:61:24:83:9c:ba:17:0f:1f:e3:
eb:23:fa:48:be:a0:53:91:0b:b9:04:eb:f5:af:5a:eb:ac:6a:
74:ae:34:43:6d:b8:9e:f1:8b:98:a6:0f:c2:a9:5d:41:29:8d:
e0:bd:b5:c5:0b:b6:24:08:a9:fb:4b:8c:73:09:18:e6:8d:57:
3a:4e:ed:6b:73:c5:f7:9d:2d:5b:66:6c:30:71:e7:1a:7e:0d:
fb:ea:e3:bc:4c:2e:25:25:9f:38:8e:14:8e:4d:9b:51:d0:57:
e1:0d:15:98:7a:a9:dc:3a:cd:41:f2:96:51:12:aa:65:90:3a:
74:ca:a7:74:6e:75:23:22:03:a2:93:23:3f:18:d8:38:8a:19:
b9:d2:fd:1b:d3:b6:82:ff:96:4f:f5:7f:3e:7a:da:ff:cf:0c:
8e:d3:4f:8b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIECbdhDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YTM2NmZkZmNhYTIwZTgwZThiZmMzMzBhNGQ4YjFiZTdkZTZhMWQwMB4XDTIyMDEw
MTAyNTAzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDkwYTVhMjcxOTFj
YzJkNzIyNjAyOWEyODdmNTkwMzE2ZDc1ZDQxODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHNhl2bIvmtk3xSk7foKB0Oko2o8+iCZTSUFUknlY2SZ6xV
/+SLc6lLT9ACPw2iCvjWgHQ3pFEiaaKsuWkrCWI5Rxi/K19g8oLTXPg8twkUU3JB
b8oCG0UKVJ4s+47zH+4uPcqubTxi/PZ29lA4atXStPNsNo6HJPB0iUhjjtRkwrtg
bF2qlHb/4mpQk7EPtJXW7bW53Xq/2y6QmGTA/OEi0VPDXwL1nCoxfBsrZpP5yH9e
x7424Q4E9VuNi+enh+Bwpipn6s8rbnv50O/EwqxTOPvZ1WiiqQOMWv5L0r7m8Y7B
vZUGyjJZNiV8R2jdcGbUIzzGCJViYB6vbR6AydkCAwEAAaOCAigwggIkMB0GA1Ud
DgQWBBTZClonGRzC1yJgKaKH9ZAxbXXUGDAfBgNVHSMEGDAWgBRqNm/fyqIOgOi/
wzCk2LG+feah0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FqWnYzOHFpRG9Eb3Y4TXdwTml4dm4zbW9kQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjMvOGM0ZWM0LWQ2MzctNGQzZi05ZGU4LTA1NTU5YzFmNTkxNS8x
LzJRcGFKeGtjd3RjaVlDbWloX1dRTVcxMTFCZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMv
OGM0ZWM0LWQ2MzctNGQzZi05ZGU4LTA1NTU5YzFmNTkxNS8xL2FqWnYzOHFpRG9E
b3Y4TXdwTml4dm4zbW9kQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA+
BggrBgEFBQcBBwEB/wQvMC0wGgQCAAEwFDAMAwQCsHzkAwQAsHzmAwQAwjz8MA8E
AgACMAkDBwAgAQZ8EaAwDQYJKoZIhvcNAQELBQADggEBAFq+wQeEVHTcZ5tbcO0N
usRsatk7VNlAiIdWw6xwBR0jHd1liH5SwNAa5EZFYpUTTwAgbQ37TQAOREItPYyV
faBrQtmuF9RSsJRJ6cLwpOkVXB7SNQGSu75PV4vJuB4H+OwhVGEkg5y6Fw8f4+sj
+ki+oFORC7kE6/WvWuusanSuNENtuJ7xi5imD8KpXUEpjeC9tcULtiQIqftLjHMJ
GOaNVzpO7WtzxfedLVtmbDBx5xp+Dfvq47xMLiUlnziOFI5Nm1HQV+ENFZh6qdw6
zUHyllESqmWQOnTKp3RudSMiA6KTIz8Y2DiKGbnS/RvTtoL/lk/1fz562v/PDI7T
T4s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:27 2024 by rpki-client on console-ams.rpki-client.org