Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/ec3KSgBp-AwGDVYYZBENUBUg4kA.roa
File: ec3KSgBp-AwGDVYYZBENUBUg4kA.roa (raw, json)
Hash identifier: SB4Yo3DkNeOZJAhRUNywadG9mPtBR1h9gJtib5GEHEs=
Subject key identifier: 79:CD:CA:4A:00:69:F8:0C:06:0D:56:18:64:11:0D:50:15:20:E2:40
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 02BFC7AC
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/ec3KSgBp-AwGDVYYZBENUBUg4kA.roa
Signing time: Sat 01 Jan 2022 12:57:50 +0000
ROA not before: Sat 01 Jan 2022 12:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50269
IP address blocks: 109.95.64.0/21 maxlen: 21
109.95.64.0/24 maxlen: 24
109.95.71.0/24 maxlen: 24
109.95.68.0/24 maxlen: 24
109.95.70.0/24 maxlen: 24
109.95.67.0/24 maxlen: 24
109.95.69.0/24 maxlen: 24
109.95.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46122924 (0x2bfc7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jan 1 12:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79cdca4a0069f80c060d561864110d501520e240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:2f:ef:0f:b8:80:05:cb:50:0b:19:96:f7:f5:
0a:15:d9:0b:e9:14:b4:88:df:3d:00:7b:7c:38:03:
3e:f5:32:07:e7:4b:3e:7b:04:57:b4:37:8a:36:b1:
e1:de:98:34:95:e7:9c:44:c2:08:7c:80:82:e1:89:
c5:5f:35:21:48:1b:e7:3c:6e:7f:7c:01:34:79:96:
b4:01:b4:71:39:3c:a6:4c:35:34:1e:c2:04:0a:51:
06:d1:39:ce:10:a6:68:98:e3:48:75:e7:dc:a3:52:
39:5a:42:bb:24:37:59:74:fc:b4:2e:0c:8a:b1:cf:
76:99:b4:a4:db:89:66:5d:db:6a:35:9a:45:10:8c:
9b:a7:de:0e:b3:a1:1a:be:af:3c:c7:21:52:4b:fc:
33:30:73:13:ab:b7:6c:10:df:0a:bd:cc:d1:df:a3:
95:91:21:ba:18:45:e7:f7:79:81:6e:77:8f:2e:72:
01:73:82:70:55:a0:55:ca:5b:f9:45:2d:4d:f1:f9:
ed:17:a8:42:e6:e5:6b:63:bc:fb:45:76:67:b4:61:
82:66:77:ed:eb:33:c6:1c:ed:3f:c7:7b:51:37:f5:
a9:2d:e0:a7:3e:77:8d:db:ed:ea:fc:31:42:63:04:
62:0b:43:07:7b:05:c2:2f:57:22:ab:06:5a:91:59:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CD:CA:4A:00:69:F8:0C:06:0D:56:18:64:11:0D:50:15:20:E2:40
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/ec3KSgBp-AwGDVYYZBENUBUg4kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.64.0/21
Signature Algorithm: sha256WithRSAEncryption
63:24:bd:8a:4d:7a:f7:0e:4c:ee:b0:51:84:45:bd:67:0c:b2:
36:1e:e8:50:63:cf:f2:39:1b:e0:8f:99:1e:b4:39:eb:ba:53:
85:51:22:a5:37:f0:53:54:5d:3e:67:e4:58:5a:ae:34:70:b8:
86:eb:4c:5d:94:bb:43:9e:54:fe:0f:42:95:22:0d:0d:d5:e7:
eb:2e:8e:67:a5:71:48:bb:c5:ab:22:49:d1:d9:be:a6:a4:14:
08:e1:d8:73:a3:4f:74:6e:da:15:3a:f8:83:b8:a9:2c:72:b1:
5f:f3:88:df:8c:61:5c:f2:c4:99:68:18:1d:cf:eb:3d:d9:53:
03:95:53:5f:3a:cf:e0:c9:d2:fd:08:f9:d9:6b:2b:62:15:40:
43:c3:fd:4f:18:10:70:a2:9c:49:18:d2:6b:42:4c:e1:86:e0:
12:1a:48:7c:49:a0:1f:cc:83:d1:9d:e8:ab:e6:42:03:ad:a4:
c2:54:fc:2e:8c:46:7d:24:8c:dc:4f:19:13:97:0d:29:6b:d8:
29:14:81:f1:ed:03:bb:e4:fc:99:da:a7:d1:aa:80:66:05:f2:
c2:5a:12:cb:06:aa:89:c3:74:7c:69:68:13:4a:81:3a:cf:01:
47:94:dd:d8:88:10:de:cf:49:a8:5d:05:fb:34:15:2f:82:9b:
e7:e3:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:34 2024 by rpki-client on console-ams.rpki-client.org