Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/dKYYTEe6Fa4sQLVRDFuNyyRZTNM.roa
File: dKYYTEe6Fa4sQLVRDFuNyyRZTNM.roa (raw, json)
Hash identifier: n/gInfCg0yDdYrW11nTYPjI+JHk6TKIlt+Ag/5PkP2o=
Subject key identifier: 74:A6:18:4C:47:BA:15:AE:2C:40:B5:51:0C:5B:8D:CB:24:59:4C:D3
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 11A5C659
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/dKYYTEe6Fa4sQLVRDFuNyyRZTNM.roa
Signing time: Sun 27 Mar 2022 19:20:21 +0000
ROA not before: Sun 27 Mar 2022 19:20:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205086
IP address blocks: 109.234.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296076889 (0x11a5c659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Mar 27 19:20:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74a6184c47ba15ae2c40b5510c5b8dcb24594cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:3e:be:7e:bb:86:6e:3d:bd:44:a0:62:bc:
1b:ee:19:26:8e:a3:f9:ce:7b:4b:a9:dd:65:cb:87:
ac:6a:0d:92:89:f1:ef:9a:f7:d4:8c:94:8c:67:73:
af:8c:e4:97:44:90:bf:1a:9e:52:42:5c:64:70:47:
b3:16:73:5f:fe:58:cf:c9:a8:02:de:63:d1:6b:2d:
c7:74:ea:e5:6c:e9:37:6e:a0:57:85:5f:aa:f9:21:
d6:79:f0:3c:e5:51:fe:4f:55:25:30:07:57:ff:5e:
f0:36:a7:61:35:45:c7:dd:6d:cd:9e:79:6a:f3:4d:
68:39:58:01:6c:3a:ee:81:20:d7:e8:1e:a0:c4:fa:
4b:0a:13:bd:0a:00:02:11:f1:ee:bf:dd:2c:e6:d4:
5e:df:47:fa:75:03:a6:ff:ff:f7:16:be:f1:d4:d5:
af:cf:4e:68:a6:14:e9:fe:92:54:b6:bb:a7:a7:e1:
48:42:8c:64:28:a8:ac:d7:d4:de:96:0d:0c:8e:ca:
22:64:2a:12:c7:8d:19:5d:f9:9d:ab:09:31:26:91:
a2:8b:d3:c4:29:ef:f3:20:1b:c4:db:1d:3b:1c:d3:
4b:cc:4b:bf:ab:e4:30:cf:3b:12:d2:53:45:8f:bd:
e7:b6:e7:89:9a:c0:4d:89:25:cc:6f:67:d9:39:8e:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:18:4C:47:BA:15:AE:2C:40:B5:51:0C:5B:8D:CB:24:59:4C:D3
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/dKYYTEe6Fa4sQLVRDFuNyyRZTNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:42:82:8f:6c:16:f9:6b:3b:10:93:04:51:04:56:3e:7b:6b:
13:a6:22:40:6a:92:93:3c:43:d1:4f:ef:bf:9c:20:8a:5e:32:
21:4f:1d:9e:36:4f:89:02:cd:90:c8:d7:d8:5f:09:d5:b0:67:
73:e0:12:a3:dd:50:3e:51:e2:36:bd:fa:f0:49:c7:13:df:65:
04:c2:78:2e:e6:77:e7:39:13:de:89:92:d9:9b:85:05:a5:d8:
3b:72:59:09:10:c8:37:8b:dd:28:6d:87:6a:d2:e2:39:73:a2:
15:e4:39:e1:eb:ee:a9:da:1d:3c:b8:d1:53:3f:6c:12:7f:45:
8d:e0:fa:8c:ce:88:1a:42:59:53:f6:0f:3c:f6:09:0b:24:6c:
d6:77:4a:27:75:1d:c3:48:55:4b:54:9e:c0:58:8e:09:6d:bf:
9d:92:9b:7c:0f:d2:25:e3:5d:fa:b4:7d:20:78:c3:5d:4d:f2:
66:6e:d3:68:18:9f:0b:87:ac:d2:7d:5d:a9:fb:d5:55:c3:e4:
f0:a6:2c:9f:02:14:6e:ae:21:f0:f7:0f:19:be:75:70:0b:2c:
21:41:03:45:68:be:f5:0f:67:42:14:cd:bd:0f:d0:5e:09:f2:
c9:8b:57:f0:60:19:1b:1d:73:85:90:5b:6b:3b:94:85:d2:e5:
c0:39:bb:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEaXGWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjU0ZmU4MzFiNmE3MTlmNDJlNmM4NDg2ZmQwM2I1NTBiZTc2MWZiMB4XDTIyMDMy
NzE5MjAyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzRhNjE4NGM0N2Jh
MTVhZTJjNDBiNTUxMGM1YjhkY2IyNDU5NGNkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBZPr5+u4ZuPb1EoGK8G+4ZJo6j+c57S6ndZcuHrGoNkonx
75r31IyUjGdzr4zkl0SQvxqeUkJcZHBHsxZzX/5Yz8moAt5j0Wstx3Tq5WzpN26g
V4Vfqvkh1nnwPOVR/k9VJTAHV/9e8DanYTVFx91tzZ55avNNaDlYAWw67oEg1+ge
oMT6SwoTvQoAAhHx7r/dLObUXt9H+nUDpv//9xa+8dTVr89OaKYU6f6SVLa7p6fh
SEKMZCiorNfU3pYNDI7KImQqEseNGV35nasJMSaRoovTxCnv8yAbxNsdOxzTS8xL
v6vkMM87EtJTRY+957bniZrATYklzG9n2TmOk6kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR0phhMR7oVrixAtVEMW43LJFlM0zAfBgNVHSMEGDAWgBSrVP6DG2pxn0Lm
yEhv0DtVC+dh+zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ExVC1neHRxY1o5QzVzaEliOUE3VlF2bllmcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGEvNWVhYWE3LTMxMDctNDI2OC1hYWQ2LTZmZDk3ODkyMDViYS8x
L2RLWVlURWU2RmE0c1FMVlJERnVOeXlSWlROTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEv
NWVhYWE3LTMxMDctNDI2OC1hYWQ2LTZmZDk3ODkyMDViYS8xL3ExVC1neHRxY1o5
QzVzaEliOUE3VlF2bllmcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG3qVjANBgkqhkiG9w0BAQsFAAOC
AQEAn0KCj2wW+Ws7EJMEUQRWPntrE6YiQGqSkzxD0U/vv5wgil4yIU8dnjZPiQLN
kMjX2F8J1bBnc+ASo91QPlHiNr368EnHE99lBMJ4LuZ35zkT3omS2ZuFBaXYO3JZ
CRDIN4vdKG2HatLiOXOiFeQ54evuqdodPLjRUz9sEn9FjeD6jM6IGkJZU/YPPPYJ
CyRs1ndKJ3Udw0hVS1SewFiOCW2/nZKbfA/SJeNd+rR9IHjDXU3yZm7TaBifC4es
0n1dqfvVVcPk8KYsnwIUbq4h8PcPGb51cAssIUEDRWi+9Q9nQhTNvQ/QXgnyyYtX
8GAZGx1zhZBbazuUhdLlwDm7mw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:35 2023 by rpki-client on console.sobornost.net