Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/j6oFqE6aqYLxrQS9nWfKnFyuWhw.roa
File: j6oFqE6aqYLxrQS9nWfKnFyuWhw.roa (raw, json)
Hash identifier: FTScPLboaHiATG95+eBZtsN+b2Iqxo/sVKy1C34kD8c=
Subject key identifier: 8F:AA:05:A8:4E:9A:A9:82:F1:AD:04:BD:9D:67:CA:9C:5C:AE:5A:1C
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 11F011E3
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/j6oFqE6aqYLxrQS9nWfKnFyuWhw.roa
Signing time: Tue 26 Apr 2022 11:44:33 +0000
ROA not before: Tue 26 Apr 2022 11:44:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205086
IP address blocks: 109.234.86.0/24 maxlen: 24
185.33.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300945891 (0x11f011e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Apr 26 11:44:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8faa05a84e9aa982f1ad04bd9d67ca9c5cae5a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:02:fa:7f:02:9c:5e:df:19:4f:df:90:da:
80:6d:ab:95:ec:71:60:b3:77:12:a3:d7:a0:f0:19:
a6:a9:fb:97:b1:1d:15:9c:6d:8e:bc:f6:8f:14:7a:
e4:28:42:6d:a3:4c:4f:f1:a5:2a:f0:f1:ed:00:5d:
e1:8f:32:8f:56:8b:69:3e:a2:42:1a:b9:67:2a:8c:
c7:6f:d0:91:e8:7e:0b:2c:bd:6e:e0:0a:f5:ac:4d:
a1:63:01:3f:8c:6a:90:fa:e7:c8:9a:a8:c2:f6:46:
b2:dc:c1:fa:5c:18:98:bc:25:2e:78:1a:f9:fe:68:
62:fe:7c:34:5e:5e:5b:43:0f:92:40:c8:9d:20:42:
cd:6e:14:3f:ba:fb:1f:34:98:12:12:7c:21:ef:4c:
d9:a1:cf:dc:e9:8c:39:69:a6:1a:d5:32:11:94:19:
76:d0:9f:54:c9:f1:47:58:29:89:2d:60:fc:b9:05:
91:d4:4d:fd:34:61:87:dc:26:cc:26:9c:ab:40:d3:
61:78:e6:a7:68:52:15:04:82:dc:1b:9b:e2:81:84:
13:99:2b:da:d6:03:f2:8b:c4:7b:c1:88:47:93:b6:
bd:cc:c8:9e:33:78:44:08:fd:df:7f:3d:da:eb:44:
c2:21:08:fd:3f:c0:63:a8:56:42:10:68:e1:b8:09:
0d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:05:A8:4E:9A:A9:82:F1:AD:04:BD:9D:67:CA:9C:5C:AE:5A:1C
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/j6oFqE6aqYLxrQS9nWfKnFyuWhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.86.0/24
185.33.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f3:28:b0:76:05:fa:3b:dd:cb:23:26:60:96:d4:8a:1c:8f:
6e:d9:eb:c0:d2:f2:b9:62:1a:32:79:2f:3b:e8:57:5b:ce:0b:
24:93:29:7a:39:94:6c:e8:57:1a:77:53:5b:46:82:89:f4:be:
03:81:7d:34:04:d9:ea:c3:e2:11:11:90:68:24:70:1a:c0:36:
4f:88:8b:56:04:f1:a2:d4:ee:90:19:f7:e6:fa:1e:de:1d:37:
45:ba:49:00:50:a0:3e:bd:12:52:45:89:90:ed:92:12:67:11:
f4:ef:80:15:6e:d7:43:92:d2:c3:a7:a7:04:8c:05:8e:68:4c:
0b:2f:8d:41:64:37:fe:eb:64:66:56:c6:e9:66:ef:bb:c3:b3:
01:ba:c5:ab:80:3c:e9:2e:9f:9f:b3:40:4e:47:3c:bd:d3:16:
60:d4:16:26:a5:79:1d:39:7b:39:e9:d0:64:43:dd:bb:c8:ab:
da:71:c7:c7:c0:ad:bc:81:33:75:e1:46:67:10:a5:22:94:d9:
bf:8a:ef:45:bc:e3:62:3c:be:e4:60:a8:71:e8:36:3b:a0:4e:
5f:9e:ff:a4:28:f5:49:dc:f6:f2:b3:f0:cd:a1:4c:2f:4e:a8:
54:c0:ae:a4:b1:4c:2e:50:2f:39:a9:2b:5c:b6:f9:d8:13:b6:
3d:c4:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:19 2024 by rpki-client on console-fra.rpki-client.org