Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/r_Rt9-YYp6OcC9SUpUx-USTkfLE.roa
File: r_Rt9-YYp6OcC9SUpUx-USTkfLE.roa (raw, json)
Hash identifier: s0gHRdMJqB+zPNcmpQwfdDCqEKNz7vEukX2B0mPP+3c=
Subject key identifier: AF:F4:6D:F7:E6:18:A7:A3:9C:0B:D4:94:A5:4C:7E:51:24:E4:7C:B1
Certificate issuer: /CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Certificate serial: 0181D7E48D9FCDA070A3F9ABAA0B033BF363
Authority key identifier: F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/r_Rt9-YYp6OcC9SUpUx-USTkfLE.roa
Signing time: Thu 07 Jul 2022 09:01:28 +0000
ROA not before: Thu 07 Jul 2022 09:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202470
IP address blocks: 109.205.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:e4:8d:9f:cd:a0:70:a3:f9:ab:aa:0b:03:3b:f3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Validity
Not Before: Jul 7 09:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aff46df7e618a7a39c0bd494a54c7e5124e47cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:6c:1b:ab:fd:eb:33:6b:06:c8:4a:84:75:
15:15:2c:85:ef:12:c3:5d:4d:6c:fe:4a:cd:55:22:
57:b5:f9:78:f6:c9:fd:8c:29:66:7c:db:38:0f:90:
f9:a0:b1:28:23:0e:55:ef:39:33:29:42:f1:77:5e:
e8:e9:8f:97:07:f4:3e:d4:6e:90:dc:91:4c:a7:be:
7f:0f:a4:64:78:0e:f8:49:8c:35:d0:e4:26:c9:ee:
2d:f8:fa:61:3e:1e:8b:2d:65:a2:95:c5:3e:a9:e7:
cf:6c:8b:50:2f:8d:c6:fa:20:dc:30:bc:1c:03:ea:
b5:4f:10:76:d9:1e:d8:4c:c2:a5:c6:1c:be:c1:2c:
bf:15:1c:cf:f2:13:b5:90:c2:a2:f0:59:91:a0:14:
ca:4d:96:59:6f:01:51:e9:1e:51:e4:fc:36:7e:89:
1b:61:bd:ef:e3:70:8f:a2:f4:b5:89:57:93:f7:ea:
3e:e1:a9:c5:73:fe:1c:c3:b9:69:ec:c9:d4:44:d1:
8e:75:dc:6b:73:8e:5e:95:1d:35:09:e4:a7:02:2f:
bc:2e:f2:fb:a5:a7:a1:6b:1d:36:1e:28:12:20:1b:
aa:cf:9a:fa:d6:e7:5e:63:e1:07:b5:7a:12:38:31:
86:e8:76:9a:b0:1d:2c:a6:6f:fa:aa:b1:e0:3d:eb:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:6D:F7:E6:18:A7:A3:9C:0B:D4:94:A5:4C:7E:51:24:E4:7C:B1
X509v3 Authority Key Identifier:
keyid:F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/r_Rt9-YYp6OcC9SUpUx-USTkfLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bf:9e:cb:07:17:41:1b:86:9b:0e:f8:9a:d5:8b:dc:94:f3:
81:e8:bf:eb:bd:fb:b3:8a:e1:d4:45:e3:de:d4:fc:1e:b6:95:
5c:ec:7c:25:5a:ff:b1:78:56:1d:cf:04:ae:a5:ac:a1:e7:9c:
14:05:78:62:0b:aa:11:ae:fd:fb:45:a2:c5:63:b7:bb:31:8d:
aa:83:9d:4c:92:26:92:8f:c9:5a:81:f5:85:ea:5b:79:fb:6f:
80:5b:db:41:a2:01:83:7d:eb:41:b5:3f:4d:de:46:6a:bd:f5:
96:25:96:f8:ac:35:d1:e4:a6:b0:be:71:68:96:b7:2b:16:7c:
e4:a2:06:06:14:d4:f1:ea:6f:6b:3e:c4:f6:29:99:61:00:1e:
da:cc:f5:39:11:65:06:8a:b6:4b:08:40:54:62:dd:bd:be:ea:
08:66:80:89:1f:dc:f3:c5:b4:5f:60:f4:c4:c6:8b:3c:bd:26:
b3:6d:53:e7:0c:8a:da:f7:01:c2:4c:6b:69:c5:8e:a2:71:c8:
b8:ac:98:08:72:92:42:98:40:dc:a5:ed:78:a6:1e:05:d0:25:
ba:8e:c1:e4:91:18:ec:d3:e3:43:4f:04:bd:ef:8f:3b:f5:35:
38:9d:7a:63:62:33:b6:17:8e:86:b2:5d:29:bf:18:ad:e2:3c:
b0:2e:fb:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHX5I2fzaBwo/mrqgsDO/NjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDU3ZmJlMTBlYjJhZTZlMGY4ZGM3ZWE2MmQ3MGYzMzE2
YzM1ZGIwHhcNMjIwNzA3MDkwMTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmY0NmRmN2U2MThhN2EzOWMwYmQ0OTRhNTRjN2U1MTI0ZTQ3Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5dsG6v96zNrBshKhHUVFSyF7xLD
XU1s/krNVSJXtfl49sn9jClmfNs4D5D5oLEoIw5V7zkzKULxd17o6Y+XB/Q+1G6Q
3JFMp75/D6RkeA74SYw10OQmye4t+PphPh6LLWWilcU+qefPbItQL43G+iDcMLwc
A+q1TxB22R7YTMKlxhy+wSy/FRzP8hO1kMKi8FmRoBTKTZZZbwFR6R5R5Pw2fokb
Yb3v43CPovS1iVeT9+o+4anFc/4cw7lp7MnURNGOddxrc45elR01CeSnAi+8LvL7
paehax02HigSIBuqz5r61udeY+EHtXoSODGG6HaasB0spm/6qrHgPetqNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK/0bffmGKejnAvUlKVMflEk5HyxMB8GA1UdIwQY
MBaAFPRFf74Q6yrm4PjcfqYtcPMxbDXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVWX3ZoRHJLdWJnLU54LXBpMXc4ekZzTmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85NDVmMGUtMjY4ZS00OTQ3LWFiYjMt
YTk0MjRkOTQ4MjUxLzEvcl9SdDktWVlwNk9jQzlTVXBVeC1VU1RrZkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85NDVmMGUtMjY4ZS00OTQ3LWFiYjMtYTk0MjRkOTQ4MjUx
LzEvOUVWX3ZoRHJLdWJnLU54LXBpMXc4ekZzTmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc2/MA0G
CSqGSIb3DQEBCwUAA4IBAQAOv57LBxdBG4abDvia1YvclPOB6L/rvfuziuHURePe
1PwetpVc7HwlWv+xeFYdzwSupayh55wUBXhiC6oRrv37RaLFY7e7MY2qg51MkiaS
j8lagfWF6lt5+2+AW9tBogGDfetBtT9N3kZqvfWWJZb4rDXR5KawvnFolrcrFnzk
ogYGFNTx6m9rPsT2KZlhAB7azPU5EWUGirZLCEBUYt29vuoIZoCJH9zzxbRfYPTE
xos8vSazbVPnDIra9wHCTGtpxY6icci4rJgIcpJCmEDcpe14ph4F0CW6jsHkkRjs
0+NDTwS974879TU4nXpjYjO2F46Gsl0pvxit4jywLvv/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-fra.rpki-client.org