Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/s6bm1bc3hYnJb4qJ1zInnuYMXyg.roa
File: s6bm1bc3hYnJb4qJ1zInnuYMXyg.roa (raw, json)
Hash identifier: ml2QduPKzZkr2EINP+RKmp7yBWwvPBDxQ52sLFN2Rac=
Subject key identifier: B3:A6:E6:D5:B7:37:85:89:C9:6F:8A:89:D7:32:27:9E:E6:0C:5F:28
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0E4224C0
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/s6bm1bc3hYnJb4qJ1zInnuYMXyg.roa
Signing time: Wed 20 Apr 2022 06:37:56 +0000
ROA not before: Wed 20 Apr 2022 06:37:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198973
IP address blocks: 109.236.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239215808 (0xe4224c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Apr 20 06:37:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3a6e6d5b7378589c96f8a89d732279ee60c5f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:de:7f:31:d9:ad:e3:4b:81:24:c2:5a:d8:
6f:26:14:f4:dc:00:9a:54:2d:68:81:7d:5a:eb:22:
a3:01:36:03:46:d3:ec:e3:cf:e0:43:16:c3:40:0b:
5f:48:48:82:82:53:94:30:82:46:43:3f:4b:49:3e:
20:60:ab:2e:50:72:5f:13:db:fe:fd:0a:81:14:76:
ca:04:5d:4a:ed:65:f6:40:b0:06:4e:ef:75:d9:c4:
6e:97:57:5d:c9:b0:ec:6c:ee:02:a5:a0:ad:91:55:
cc:8d:66:17:ea:0b:8a:2a:d1:1f:50:8d:c2:91:a5:
8d:6e:fc:8c:fb:54:2e:34:60:59:1b:54:49:25:12:
e4:f5:ca:2c:e3:e9:1e:37:0d:25:01:a7:81:30:c4:
e0:fc:49:23:6b:94:6f:26:91:b8:00:22:df:7c:94:
73:ff:0d:6e:f8:ce:fc:e6:31:b9:7f:3f:cc:5b:dd:
ad:62:06:f4:fa:8c:05:bb:db:2b:af:60:17:a6:8e:
e7:01:53:b9:8d:e0:82:0e:fc:55:87:97:3d:7f:bd:
51:23:34:40:56:55:20:93:34:16:78:11:a9:39:78:
45:10:34:02:77:43:f4:40:93:08:08:0e:5a:ce:59:
de:6a:cd:75:30:e2:c3:7e:e6:d4:4d:2c:65:36:0c:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:E6:D5:B7:37:85:89:C9:6F:8A:89:D7:32:27:9E:E6:0C:5F:28
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/s6bm1bc3hYnJb4qJ1zInnuYMXyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.244.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:58:bc:77:60:2f:78:fc:b7:c1:2e:f6:74:68:5f:fa:ed:31:
c1:b4:96:1d:a9:96:b4:9f:a3:f9:96:f3:09:67:00:4e:ae:39:
66:79:5e:92:b6:cb:b0:23:1c:9b:e1:ca:ee:77:0c:b1:3f:e8:
5d:5c:e1:fd:ea:10:86:48:22:b9:68:b1:9f:8b:7e:0f:f0:67:
f5:be:9a:75:0c:b1:7b:18:b4:bb:b2:ae:02:fc:de:aa:75:ae:
c2:0e:6d:e9:7f:fe:e2:b6:d5:e8:9b:81:83:35:c1:dd:06:b1:
9c:a5:96:b7:6f:e4:70:48:36:9c:f2:d4:6d:be:19:45:6c:3a:
71:c4:17:5e:ea:5f:0d:e1:82:81:f3:87:51:00:96:7e:27:e7:
bd:b1:c8:82:82:d7:ac:7b:66:51:1e:c7:81:d4:30:6e:7a:fb:
8e:05:7d:eb:96:87:3d:72:b6:48:0a:94:16:d0:54:3d:2a:ba:
ec:d0:a9:2f:64:2b:17:9e:35:9f:cf:e7:62:d3:77:cd:02:65:
8b:47:e2:e4:f5:18:24:5a:bb:42:b4:26:2a:f1:e6:61:dd:ae:
b5:4f:1b:bc:ce:84:23:b5:79:3b:20:e2:aa:3a:ae:1a:15:1e:
66:78:36:f8:05:0a:b2:a5:54:ce:11:4d:8f:b1:77:44:ba:f5:
95:ae:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org