Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/BlVRIu5OL71xZGARo_ZlVFNuMig.roa
File: BlVRIu5OL71xZGARo_ZlVFNuMig.roa (raw, json)
Hash identifier: iPXnQduPySXDirnWKGoAQYmHCh87O4vkjtVD6VYFqA0=
Subject key identifier: 06:55:51:22:EE:4E:2F:BD:71:64:60:11:A3:F6:65:54:53:6E:32:28
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0E3F5A3F
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/BlVRIu5OL71xZGARo_ZlVFNuMig.roa
Signing time: Wed 20 Apr 2022 06:37:55 +0000
ROA not before: Wed 20 Apr 2022 06:37:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60513
IP address blocks: 109.236.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239032895 (0xe3f5a3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Apr 20 06:37:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06555122ee4e2fbd71646011a3f66554536e3228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:0a:9a:cf:d6:d8:06:dd:77:8e:1e:4e:6f:
72:c7:55:e7:8b:be:f2:87:a1:0d:af:d9:ca:b1:02:
e3:5c:b4:d3:79:5a:fc:b7:8a:d4:e4:fb:6a:30:f5:
37:d7:45:6d:12:35:ea:6e:1d:88:7d:7a:ab:9c:dd:
47:84:9e:13:0e:1e:5a:a1:eb:1b:c3:fd:79:f7:f2:
b5:b8:10:15:05:16:03:ef:46:6a:37:ca:f3:3a:27:
94:28:f4:1e:a2:c4:0a:d5:46:f0:4e:91:3b:0b:c4:
7c:de:af:07:6b:88:78:3b:04:ff:46:7a:18:f4:9b:
27:57:69:d6:21:1b:9e:22:15:c2:3e:fe:e6:af:83:
4d:1e:67:7d:13:93:d2:e6:47:42:41:76:f1:1a:bd:
51:c1:de:44:ee:4d:6a:ce:5d:ae:e3:66:3e:20:ff:
61:6c:ef:00:6a:f7:38:02:e9:60:4a:82:14:dd:e6:
3d:72:ab:bd:5c:ee:ce:d2:92:e8:80:63:1b:a2:0d:
af:14:36:76:4b:42:80:f3:31:67:42:1d:71:e0:ee:
09:b8:21:e5:c9:14:4b:97:4f:3b:6e:79:3c:d4:d6:
f7:d9:dc:31:9f:e5:81:95:43:5c:95:89:bb:75:a0:
a6:52:e0:6f:99:ae:25:0d:36:86:81:5f:6c:4a:e8:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:55:51:22:EE:4E:2F:BD:71:64:60:11:A3:F6:65:54:53:6E:32:28
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/BlVRIu5OL71xZGARo_ZlVFNuMig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.253.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7c:33:43:33:93:a5:53:24:13:02:42:f5:f4:6f:96:bf:1e:
2b:24:b5:4c:28:2d:db:cc:41:7e:5c:b9:70:b0:48:5c:79:47:
80:5d:bc:c6:e3:5d:73:da:5e:3f:0c:93:0b:75:4b:b4:2d:87:
9f:cc:74:b4:a2:fd:bc:8c:5d:68:27:4a:75:93:b3:94:af:9d:
08:87:3f:70:fa:e9:ca:1b:b6:2b:2b:09:f4:e4:f2:cd:2f:7d:
8d:e8:e9:7a:6a:c5:91:6d:a0:a9:f4:00:e7:85:f9:fb:b4:50:
7e:ae:1c:7c:20:63:45:e7:bd:c8:3d:36:b3:ee:39:4f:05:4a:
b5:29:14:99:93:56:c3:67:36:a2:1e:35:90:69:fe:a4:a3:43:
87:70:6a:5d:9c:8b:a0:35:3a:bf:4f:31:17:b3:51:e4:90:98:
a0:4a:6d:4b:c3:9a:bd:f8:d6:5c:80:02:a4:aa:17:99:f5:f6:
bd:5a:f1:ff:60:c8:fb:2a:43:4f:9d:b4:bc:c0:7c:c0:39:7f:
37:8a:a2:e2:b5:de:1d:f9:75:21:33:52:0d:c8:05:4d:d5:f2:
97:f2:20:c2:a6:27:1e:d7:96:31:b9:63:08:97:24:b9:6b:8a:
ff:ed:44:8d:ed:3e:11:35:c7:dd:cc:f1:4d:57:c7:e0:fa:f2:
c7:82:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org