Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/dRCL-k-oSrie8DDrgobXySEV5IM.roa
File: dRCL-k-oSrie8DDrgobXySEV5IM.roa (raw, json)
Hash identifier: l3H5Lvs/+sruECSYsABwSto3v5itc/4YtXAY3HSY9YY=
Subject key identifier: 75:10:8B:FA:4F:A8:4A:B8:9E:F0:30:EB:82:86:D7:C9:21:15:E4:83
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 01845D0C8C658CF680EC4425AAD79970718E
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/dRCL-k-oSrie8DDrgobXySEV5IM.roa
Signing time: Wed 09 Nov 2022 15:40:14 +0000
ROA not before: Wed 09 Nov 2022 15:40:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209362
IP address blocks: 109.121.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:0c:8c:65:8c:f6:80:ec:44:25:aa:d7:99:70:71:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Nov 9 15:40:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75108bfa4fa84ab89ef030eb8286d7c92115e483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:90:18:0d:07:35:64:2f:9c:44:37:32:36:
dc:5e:c2:39:d5:28:25:ff:08:34:df:0e:8d:fd:43:
7d:07:fc:84:82:ba:30:d7:2f:10:7a:31:ac:64:2c:
55:42:22:56:7d:9c:61:dd:1a:d0:35:86:35:fd:29:
a5:c8:70:81:14:91:de:07:62:fa:66:3d:f0:b8:5b:
b0:9d:87:b7:b2:42:f3:01:4b:3d:bc:c4:8b:a1:3f:
ba:bb:4b:c9:bf:1c:5c:67:fa:5b:6e:2d:89:7a:a9:
8d:df:b4:0e:fb:57:9c:3b:9d:0a:2d:34:f4:8d:53:
06:e7:60:fe:5c:74:d7:08:62:2c:5b:da:c7:21:02:
44:1f:a9:48:67:0d:07:35:5e:94:a6:d1:96:8a:a3:
72:10:2e:41:1d:a8:28:21:bf:ce:13:e1:e9:09:da:
81:20:7b:15:86:5e:3f:19:ff:a6:89:a5:ef:47:33:
df:e7:5a:37:95:f4:fc:45:61:c5:7f:cb:21:51:78:
0b:09:82:1f:94:3a:bc:5c:e7:f4:6d:21:4a:0b:f2:
f1:6e:00:9b:48:f4:38:d6:df:bf:2e:77:25:95:27:
cf:f1:75:80:71:1c:4b:d3:f4:2d:d9:a0:02:1d:74:
01:36:de:cb:d2:02:f9:52:b3:0b:2d:7c:b9:fe:6b:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:10:8B:FA:4F:A8:4A:B8:9E:F0:30:EB:82:86:D7:C9:21:15:E4:83
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/dRCL-k-oSrie8DDrgobXySEV5IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.128.0/24
Signature Algorithm: sha256WithRSAEncryption
05:74:9f:66:5c:be:89:ea:89:e0:bd:34:2a:62:f6:ef:f0:35:
5c:ce:8b:aa:0d:bd:cc:42:9d:cd:72:06:97:69:8f:65:9d:37:
83:e5:ed:65:0a:81:d1:fe:05:79:6f:33:e0:50:b8:7d:f9:af:
1d:a0:f7:fd:e2:a5:bd:3d:2c:f9:f0:89:9a:0c:26:3f:f2:c2:
99:5d:34:f7:8a:57:c0:b2:a0:b0:e4:86:d6:70:c2:66:0d:b5:
3d:cd:bd:f7:ed:f6:e9:dc:3b:bf:ee:09:15:46:71:17:80:04:
3b:2e:a2:fe:c4:be:73:b1:4b:30:78:7d:eb:dd:48:0c:a0:c4:
3d:6c:79:77:35:eb:4e:e1:90:33:b4:ee:f8:e2:e0:f1:0c:35:
47:3f:f9:02:c1:64:30:4f:68:ea:98:f5:cf:d0:09:21:2b:7d:
fb:8d:2d:19:9e:8a:bf:11:90:8b:ba:4e:ef:80:d1:34:18:99:
8f:e0:5e:d0:37:c0:ab:db:68:6f:2f:f2:09:56:f5:b9:61:88:
11:4f:2b:b3:3b:24:48:13:54:70:c6:c7:7a:8d:8c:0b:c4:c1:
7b:57:2c:6f:ff:b8:ca:9c:c3:d1:d9:27:43:01:64:43:69:01:
07:54:11:68:17:b0:8d:72:1b:e5:17:cd:33:7f:30:f4:7c:86:
dd:ab:de:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRdDIxljPaA7EQlqteZcHGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz
YjcxYzUwHhcNMjIxMTA5MTU0MDE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTEwOGJmYTRmYTg0YWI4OWVmMDMwZWI4Mjg2ZDdjOTIxMTVlNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyOQGA0HNWQvnEQ3MjbcXsI51Sgl
/wg03w6N/UN9B/yEgrow1y8QejGsZCxVQiJWfZxh3RrQNYY1/SmlyHCBFJHeB2L6
Zj3wuFuwnYe3skLzAUs9vMSLoT+6u0vJvxxcZ/pbbi2JeqmN37QO+1ecO50KLTT0
jVMG52D+XHTXCGIsW9rHIQJEH6lIZw0HNV6UptGWiqNyEC5BHagoIb/OE+HpCdqB
IHsVhl4/Gf+miaXvRzPf51o3lfT8RWHFf8shUXgLCYIflDq8XOf0bSFKC/LxbgCb
SPQ41t+/LncllSfP8XWAcRxL0/Qt2aACHXQBNt7L0gL5UrMLLXy5/mvSZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUQi/pPqEq4nvAw64KG18khFeSDMB8GA1UdIwQY
MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt
MWQ1ZDk0NWEwNWEzLzEvZFJDTC1rLW9TcmllOEREcmdvYlh5U0VWNUlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz
LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmAMA0G
CSqGSIb3DQEBCwUAA4IBAQAFdJ9mXL6J6ongvTQqYvbv8DVczouqDb3MQp3NcgaX
aY9lnTeD5e1lCoHR/gV5bzPgULh9+a8doPf94qW9PSz58ImaDCY/8sKZXTT3ilfA
sqCw5IbWcMJmDbU9zb337fbp3Du/7gkVRnEXgAQ7LqL+xL5zsUsweH3r3UgMoMQ9
bHl3NetO4ZAztO744uDxDDVHP/kCwWQwT2jqmPXP0AkhK337jS0Znoq/EZCLuk7v
gNE0GJmP4F7QN8Cr22hvL/IJVvW5YYgRTyuzOyRIE1Rwxsd6jYwLxMF7Vyxv/7jK
nMPR2SdDAWRDaQEHVBFoF7CNchvlF80zfzD0fIbdq97I
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org