Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/1Y7YTwrBNjfKEDEEvwtXyCzQ2Ps.roa
File: 1Y7YTwrBNjfKEDEEvwtXyCzQ2Ps.roa (raw, json)
Hash identifier: 49gxJ0jj4qCxUJ+nH11OkgiWm+Tghz4IeOXCLVWqUBY=
Subject key identifier: D5:8E:D8:4F:0A:C1:36:37:CA:10:31:04:BF:0B:57:C8:2C:D0:D8:FB
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 01845D0C87880D8367522DC797DE739B62FD
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/1Y7YTwrBNjfKEDEEvwtXyCzQ2Ps.roa
Signing time: Wed 09 Nov 2022 15:40:13 +0000
ROA not before: Wed 09 Nov 2022 15:40:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31287
IP address blocks: 109.121.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:0c:87:88:0d:83:67:52:2d:c7:97:de:73:9b:62:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Nov 9 15:40:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d58ed84f0ac13637ca103104bf0b57c82cd0d8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:b6:fe:e8:70:22:bd:3b:e1:a8:bd:35:1f:
cd:25:c6:3a:65:d9:03:71:65:28:6e:d1:58:1b:06:
9e:b0:aa:5c:0a:79:64:03:53:d0:88:76:8e:c1:ef:
19:dd:52:b4:28:10:65:50:7a:37:c4:be:01:ac:6b:
a2:b9:58:b0:66:2a:d3:4b:6a:4f:e3:28:ed:ce:8f:
d3:0f:cd:47:27:58:3e:c0:3b:80:dc:f8:73:5d:d0:
4d:b5:ac:62:84:ab:2e:e1:6b:f0:93:9c:7b:34:4b:
58:d6:a3:cc:83:5e:38:90:77:b2:46:b2:c2:56:75:
a1:1b:04:96:56:0b:d7:22:fd:d1:a0:d6:ec:ce:c0:
b0:12:8b:e3:b1:af:1e:48:eb:30:6a:4a:8e:ae:35:
6d:eb:76:36:03:6e:31:ab:57:b0:6a:b7:db:0e:7e:
61:67:18:6d:d6:43:3e:b1:e6:aa:e9:9d:e3:81:9a:
09:ab:5f:d4:c9:d3:d6:2f:c2:c0:0d:02:cb:91:8b:
97:d9:70:21:26:ad:c6:c3:84:39:39:27:72:97:69:
c5:ae:6f:cb:f1:d2:b3:0e:6b:ea:4f:2a:9d:a6:56:
cb:c5:de:5a:73:fa:42:f1:7d:98:43:a2:dc:27:dd:
69:7d:37:0f:54:77:9a:60:d5:a4:e0:c3:70:dd:99:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:D8:4F:0A:C1:36:37:CA:10:31:04:BF:0B:57:C8:2C:D0:D8:FB
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/1Y7YTwrBNjfKEDEEvwtXyCzQ2Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.153.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d7:3d:88:25:c4:4a:fd:c0:6f:cc:d0:3b:c8:6e:ab:e6:23:
3f:a7:89:a9:89:9e:0e:34:3f:85:43:42:07:cd:76:a1:b6:8b:
25:9f:26:9c:5e:1d:d6:65:e3:10:26:22:d7:55:33:27:7b:a2:
50:98:85:48:8e:ce:4d:aa:5f:5c:a3:f7:ad:76:91:aa:36:fc:
79:3b:01:f6:e2:ce:40:4b:39:67:61:39:ff:38:3a:80:c1:92:
07:3b:9c:b2:0d:5e:52:70:1e:97:4a:8d:7a:b4:ad:2f:56:ff:
70:e9:fa:a3:ed:35:eb:e8:f4:97:58:9b:c4:80:d9:62:60:e9:
33:48:fd:a8:ba:b2:f5:8f:7a:0c:7b:a8:a7:43:54:92:43:90:
c5:1b:50:93:15:4a:92:1d:e2:9e:80:06:0c:bb:32:d8:56:1a:
b6:4c:da:77:c2:48:1f:db:7d:f9:ce:f9:cc:0e:85:00:3c:f0:
a2:c8:85:a3:1e:49:c9:b1:d4:98:dc:ab:ac:96:c2:f7:b9:fb:
62:c2:b4:aa:a3:03:f1:33:94:34:39:6b:9e:01:c4:f0:61:05:
e8:4e:d6:36:6e:2f:1d:17:3a:99:0a:e6:da:4f:fa:7b:1a:48:
bc:20:7c:46:d1:72:bd:7d:12:6a:ce:22:41:e8:fa:a8:5e:71:
0a:cd:ea:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRdDIeIDYNnUi3Hl95zm2L9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz
YjcxYzUwHhcNMjIxMTA5MTU0MDEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNThlZDg0ZjBhYzEzNjM3Y2ExMDMxMDRiZjBiNTdjODJjZDBkOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7e2/uhwIr074ai9NR/NJcY6ZdkD
cWUobtFYGwaesKpcCnlkA1PQiHaOwe8Z3VK0KBBlUHo3xL4BrGuiuViwZirTS2pP
4yjtzo/TD81HJ1g+wDuA3PhzXdBNtaxihKsu4Wvwk5x7NEtY1qPMg144kHeyRrLC
VnWhGwSWVgvXIv3RoNbszsCwEovjsa8eSOswakqOrjVt63Y2A24xq1ewarfbDn5h
Zxht1kM+seaq6Z3jgZoJq1/UydPWL8LADQLLkYuX2XAhJq3Gw4Q5OSdyl2nFrm/L
8dKzDmvqTyqdplbLxd5ac/pC8X2YQ6LcJ91pfTcPVHeaYNWk4MNw3Zk7bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNWO2E8KwTY3yhAxBL8LV8gs0Nj7MB8GA1UdIwQY
MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt
MWQ1ZDk0NWEwNWEzLzEvMVk3WVR3ckJOamZLRURFRXZ3dFh5Q3pRMlBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz
LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmZMA0G
CSqGSIb3DQEBCwUAA4IBAQBy1z2IJcRK/cBvzNA7yG6r5iM/p4mpiZ4OND+FQ0IH
zXahtoslnyacXh3WZeMQJiLXVTMne6JQmIVIjs5Nql9co/etdpGqNvx5OwH24s5A
SzlnYTn/ODqAwZIHO5yyDV5ScB6XSo16tK0vVv9w6fqj7TXr6PSXWJvEgNliYOkz
SP2ourL1j3oMe6inQ1SSQ5DFG1CTFUqSHeKegAYMuzLYVhq2TNp3wkgf2335zvnM
DoUAPPCiyIWjHknJsdSY3KuslsL3uftiwrSqowPxM5Q0OWueAcTwYQXoTtY2bi8d
FzqZCubaT/p7Gki8IHxG0XK9fRJqziJB6PqoXnEKzerE
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org