Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/zahC2iMQ484bwiiJppx_o9aAdHQ.roa
File: zahC2iMQ484bwiiJppx_o9aAdHQ.roa (raw, json)
Hash identifier: uoD4t/TxQhAENEpX+dii3Iw7jTX6u0SX/RC3Mh8eo1k=
Subject key identifier: CD:A8:42:DA:23:10:E3:CE:1B:C2:28:89:A6:9C:7F:A3:D6:80:74:74
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 3116135D
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/zahC2iMQ484bwiiJppx_o9aAdHQ.roa
Signing time: Thu 28 Apr 2022 06:28:17 +0000
ROA not before: Thu 28 Apr 2022 06:28:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.160.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823530333 (0x3116135d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Apr 28 06:28:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cda842da2310e3ce1bc22889a69c7fa3d6807474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:cc:6e:a8:f2:62:9f:8f:e6:62:51:bd:9a:
6d:af:c1:a7:3b:e2:be:78:ce:3d:df:95:87:97:e7:
88:21:03:14:0d:1d:b8:24:ef:bb:9c:eb:b8:40:f1:
73:a9:ab:e6:3b:3b:d9:1b:ca:e1:d7:17:0b:ed:4d:
dc:04:ac:1a:46:93:05:ee:1f:90:5a:46:29:29:17:
2f:4c:92:9e:8d:9a:02:7d:2e:d5:a6:ec:e3:d8:ff:
2c:01:97:c1:ab:0a:4f:4a:77:b5:d3:e5:36:f6:04:
f3:b2:40:6d:72:c9:b7:14:09:6a:4f:8d:39:d0:11:
2d:5d:92:d4:4c:0c:66:28:75:75:e1:12:dc:8d:63:
db:c6:3b:b7:1c:0d:2d:f2:ec:68:e9:8a:10:4b:ac:
cf:d6:d6:5b:bc:52:ab:9b:81:cf:17:dd:d8:cd:01:
7d:f2:2e:4f:bf:8d:53:65:11:c5:8c:ad:25:51:47:
b0:84:0f:5d:6e:3d:93:fe:2d:53:35:e9:f6:59:c1:
cf:5f:dd:b6:6c:7f:19:26:c9:07:68:20:58:ff:ec:
69:a1:be:f1:f7:e4:d7:f1:5b:53:94:ae:44:c2:e9:
f9:79:bd:95:da:7b:4c:84:b2:a6:aa:00:64:99:33:
e2:42:17:1c:90:d2:8f:2f:20:fa:53:d8:90:45:8e:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:42:DA:23:10:E3:CE:1B:C2:28:89:A6:9C:7F:A3:D6:80:74:74
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/zahC2iMQ484bwiiJppx_o9aAdHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.35.0/24
Signature Algorithm: sha256WithRSAEncryption
07:54:3e:58:c5:0f:bf:2b:5b:39:c0:08:92:7a:b8:d8:87:dc:
c9:b7:ab:e9:54:47:37:ea:56:a0:cf:68:6a:fa:6b:a2:1f:86:
dc:ab:67:63:0d:b1:a9:cd:96:3e:c6:2b:bc:22:4e:ef:d2:a7:
d5:5a:3c:a2:2e:eb:0e:ba:14:bc:34:bd:93:3d:b6:bc:58:69:
e8:92:c1:79:0d:ec:b8:1d:24:f6:35:92:d2:9c:0a:f2:e5:d5:
c4:a5:e6:c1:c2:be:71:04:65:d2:7a:14:88:4b:75:00:f0:d5:
67:e2:98:19:2d:34:4d:20:cf:2f:e8:92:57:e7:70:6b:14:e0:
84:7a:8e:73:68:20:6b:c4:89:c1:bf:ec:ca:16:3d:c9:d4:80:
5e:0a:61:76:16:55:eb:42:54:88:d5:2e:0c:43:71:ed:cd:22:
87:cf:45:5d:e7:f4:73:4f:49:d8:09:34:2b:e8:6a:79:37:00:
14:fa:e7:7c:ea:a5:e7:de:f7:e4:5c:05:9b:ce:50:be:e1:b0:
8a:6e:a5:0c:5b:c4:4f:33:80:9b:03:94:80:99:c2:7f:e4:de:
9b:bf:f5:96:76:29:a2:9b:d2:3e:4f:b6:e0:8b:15:19:dc:04:
2c:2c:b1:0f:ff:f6:a7:2d:a3:09:11:ea:3d:68:eb:ce:0e:fa:
68:36:60:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMRYTXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjJhOGMxZDMxMTg5NTAxNjEwOGZmYmQxNDU3NWM3N2NjMjg3NzNhMB4XDTIyMDQy
ODA2MjgxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2RhODQyZGEyMzEw
ZTNjZTFiYzIyODg5YTY5YzdmYTNkNjgwNzQ3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANEZzG6o8mKfj+ZiUb2aba/BpzvivnjOPd+Vh5fniCEDFA0d
uCTvu5zruEDxc6mr5js72RvK4dcXC+1N3ASsGkaTBe4fkFpGKSkXL0ySno2aAn0u
1abs49j/LAGXwasKT0p3tdPlNvYE87JAbXLJtxQJak+NOdARLV2S1EwMZih1deES
3I1j28Y7txwNLfLsaOmKEEusz9bWW7xSq5uBzxfd2M0BffIuT7+NU2URxYytJVFH
sIQPXW49k/4tUzXp9lnBz1/dtmx/GSbJB2ggWP/saaG+8ffk1/FbU5SuRMLp+Xm9
ldp7TISypqoAZJkz4kIXHJDSjy8g+lPYkEWO/28CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTNqELaIxDjzhvCKImmnH+j1oB0dDAfBgNVHSMEGDAWgBRyKowdMRiVAWEI
/70UV1x3zCh3OjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NpcU1IVEVZbFFGaENQLTlGRmRjZDh3b2R6by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvYjFmNmVlLWM0ZWYtNDM1NS1hZjM2LWE1NThlZTY1NDMxZi8x
L3phaEMyaU1RNDg0YndpaUpwcHhfbzlhQWRIUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
YjFmNmVlLWM0ZWYtNDM1NS1hZjM2LWE1NThlZTY1NDMxZi8xL2NpcU1IVEVZbFFG
aENQLTlGRmRjZDh3b2R6by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG2gIzANBgkqhkiG9w0BAQsFAAOC
AQEAB1Q+WMUPvytbOcAIknq42Ifcyber6VRHN+pWoM9oavproh+G3KtnYw2xqc2W
PsYrvCJO79Kn1Vo8oi7rDroUvDS9kz22vFhp6JLBeQ3suB0k9jWS0pwK8uXVxKXm
wcK+cQRl0noUiEt1APDVZ+KYGS00TSDPL+iSV+dwaxTghHqOc2gga8SJwb/syhY9
ydSAXgphdhZV60JUiNUuDENx7c0ih89FXef0c09J2Ak0K+hqeTcAFPrnfOql5973
5FwFm85QvuGwim6lDFvETzOAmwOUgJnCf+Tem7/1lnYpopvSPk+24IsVGdwELCyx
D//2py2jCRHqPWjrzg76aDZg4Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:32 2023 by rpki-client on console-ams.rpki-client.org