Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/mrmwZ6YgHdgis3JUFVeJb4YB--E.roa
File: mrmwZ6YgHdgis3JUFVeJb4YB--E.roa (raw, json)
Hash identifier: KO99yR9O7mKjX8xy8n1hNvNX13gZ6Z8gJ6nr82XwcQ8=
Subject key identifier: 9A:B9:B0:67:A6:20:1D:D8:22:B3:72:54:15:57:89:6F:86:01:FB:E1
Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial: 0EBB97FD
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/mrmwZ6YgHdgis3JUFVeJb4YB--E.roa
Signing time: Sat 01 Jan 2022 11:56:26 +0000
ROA not before: Sat 01 Jan 2022 11:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 109.68.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247175165 (0xebb97fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
Validity
Not Before: Jan 1 11:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ab9b067a6201dd822b372541557896f8601fbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:e1:7c:fb:6c:01:66:8c:6b:d1:4d:48:79:
a1:1e:b1:ad:39:ab:60:a5:25:9f:f7:c6:66:75:a1:
a0:5f:77:da:c5:8f:0d:2b:e9:41:e2:d9:28:fa:78:
0a:40:8a:13:91:38:26:3e:51:91:62:e8:64:12:0a:
9f:a1:dc:f5:82:05:85:c5:fd:08:07:dd:b9:40:10:
10:a0:1b:91:89:73:9e:95:81:1d:52:93:f8:e9:ca:
0c:4b:05:3e:8c:b9:0f:3e:43:b0:96:e5:02:70:56:
20:6a:7e:0a:8e:ba:ab:30:09:2b:11:ac:5e:50:fd:
e6:be:3f:56:ca:99:59:a4:8b:f6:9d:98:c8:0c:37:
1a:f2:32:e1:a7:57:46:ac:b3:32:21:8b:43:f8:73:
e3:cc:02:b0:2d:d4:e3:38:9c:32:e2:bf:4f:cc:26:
ce:ae:9e:22:bb:4f:82:ce:73:a6:63:ba:e4:ef:2a:
93:ca:e4:e9:b5:47:79:c9:f8:a4:b6:da:e1:94:df:
8b:55:06:07:20:2c:2b:08:00:31:7c:ea:70:98:28:
24:18:d0:79:52:62:d1:01:e1:e2:de:b5:40:18:87:
4d:4f:c3:5e:c2:28:1c:12:b8:bb:c9:1a:db:01:76:
c6:06:57:f6:07:91:12:23:a7:50:73:e1:da:3b:51:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B9:B0:67:A6:20:1D:D8:22:B3:72:54:15:57:89:6F:86:01:FB:E1
X509v3 Authority Key Identifier:
keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/mrmwZ6YgHdgis3JUFVeJb4YB--E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a4:93:d3:a5:e2:1e:1c:3a:15:5b:3c:a6:af:6f:1b:b4:d2:
b9:5f:87:86:08:a4:65:45:3a:30:67:f5:e9:a5:d8:c4:41:b3:
33:b5:70:87:76:43:cd:b8:39:74:cb:42:1c:2d:5e:cf:d0:b5:
31:29:65:fb:76:a0:90:9e:8b:dc:b0:80:cc:16:f7:df:09:82:
55:68:8a:2e:08:04:b1:ac:50:b9:8b:41:ec:e1:27:83:a5:6e:
c5:de:f9:a1:1a:d3:16:91:2f:39:43:d6:ae:76:0f:51:47:9d:
99:02:a7:90:4f:3c:ca:ac:d7:03:67:0b:f8:e2:51:40:77:d1:
f0:b5:44:6f:83:55:e7:75:56:60:8b:d2:9c:cd:80:ea:22:b1:
7b:42:f2:2b:5c:67:7b:a9:d2:3a:4c:08:ad:01:c5:0c:bb:ef:
69:cc:34:8e:05:10:d0:79:b1:5c:3b:a6:79:aa:91:6f:a7:b9:
80:76:08:02:92:3e:2a:f0:50:cc:b4:3d:d5:0f:12:35:c6:79:
02:ad:d9:75:ff:80:15:47:6f:62:ca:cb:ee:ab:b3:f8:df:ff:
14:6a:8f:36:5a:47:d8:0f:42:58:a9:40:94:ed:e6:2e:ec:8c:
4e:a5:71:db:d4:93:76:fc:56:b4:8b:3c:8e:43:53:45:6b:1d:
6c:21:a4:2c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDruX/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NzI0MmRiYTI2ZWQ4ODJiMzgwZGFiZWJhYjNjNWYzOTQyMDA2ZWNjMB4XDTIyMDEw
MTExNTYyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWFiOWIwNjdhNjIw
MWRkODIyYjM3MjU0MTU1Nzg5NmY4NjAxZmJlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ2u4Xz7bAFmjGvRTUh5oR6xrTmrYKUln/fGZnWhoF932sWP
DSvpQeLZKPp4CkCKE5E4Jj5RkWLoZBIKn6Hc9YIFhcX9CAfduUAQEKAbkYlznpWB
HVKT+OnKDEsFPoy5Dz5DsJblAnBWIGp+Co66qzAJKxGsXlD95r4/VsqZWaSL9p2Y
yAw3GvIy4adXRqyzMiGLQ/hz48wCsC3U4zicMuK/T8wmzq6eIrtPgs5zpmO65O8q
k8rk6bVHecn4pLba4ZTfi1UGByAsKwgAMXzqcJgoJBjQeVJi0QHh4t61QBiHTU/D
XsIoHBK4u8ka2wF2xgZX9geREiOnUHPh2jtRyrECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSaubBnpiAd2CKzclQVV4lvhgH74TAfBgNVHSMEGDAWgBSXJC26Ju2IKzgN
q+urPF85QgBuzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2x5UXR1aWJ0aUNzNERhdnJxenhmT1VJQWJzdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjcvNGNiNjg3LTg3ZmQtNGFmMC1hMzZiLTYwNzI3MmQ3MzdjYi8x
L21ybXdaNllnSGRnaXMzSlVGVmVKYjRZQi0tRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcv
NGNiNjg3LTg3ZmQtNGFmMC1hMzZiLTYwNzI3MmQ3MzdjYi8xL2x5UXR1aWJ0aUNz
NERhdnJxenhmT1VJQWJzdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1E+DANBgkqhkiG9w0BAQsFAAOC
AQEAHKST06XiHhw6FVs8pq9vG7TSuV+HhgikZUU6MGf16aXYxEGzM7Vwh3ZDzbg5
dMtCHC1ez9C1MSll+3agkJ6L3LCAzBb33wmCVWiKLggEsaxQuYtB7OEng6Vuxd75
oRrTFpEvOUPWrnYPUUedmQKnkE88yqzXA2cL+OJRQHfR8LVEb4NV53VWYIvSnM2A
6iKxe0LyK1xne6nSOkwIrQHFDLvvacw0jgUQ0HmxXDumeaqRb6e5gHYIApI+KvBQ
zLQ91Q8SNcZ5Aq3Zdf+AFUdvYsrL7quz+N//FGqPNlpH2A9CWKlAlO3mLuyMTqVx
29STdvxWtIs8jkNTRWsdbCGkLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:04 2024 by rpki-client on console-fra.rpki-client.org