Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/IhPtqi_D3J4nmwv0i56aWCJHnYM.roa
File: IhPtqi_D3J4nmwv0i56aWCJHnYM.roa (raw, json)
Hash identifier: F793GjC9fp/Mn8sc4QveygOFluzGOou3NhVEySCM58A=
Subject key identifier: 22:13:ED:AA:2F:C3:DC:9E:27:9B:0B:F4:8B:9E:9A:58:22:47:9D:83
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 087AB499
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/IhPtqi_D3J4nmwv0i56aWCJHnYM.roa
Signing time: Sat 01 Jan 2022 07:04:18 +0000
ROA not before: Sat 01 Jan 2022 07:04:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.118.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142259353 (0x87ab499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Jan 1 07:04:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2213edaa2fc3dc9e279b0bf48b9e9a5822479d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:5f:36:ce:6c:25:34:42:23:11:c4:4d:f1:
99:c6:4e:2a:53:a6:ac:56:d3:89:ff:d7:0e:91:4e:
db:3f:76:f4:f0:ef:e6:bb:8a:33:f3:c2:3b:9b:c3:
2e:07:21:44:eb:65:9b:c3:40:81:d6:8d:40:fa:69:
d1:8b:74:96:08:f0:d8:3e:1f:98:98:70:7f:6e:7d:
da:40:ac:f8:cb:31:fd:29:e5:5c:d1:49:e3:44:6d:
b0:69:d1:c9:9b:ae:4f:ef:57:02:14:7f:c9:a8:bb:
57:be:23:e2:00:89:20:37:f7:58:5e:f7:95:13:6b:
5d:dc:ae:7e:36:bb:71:99:ba:9f:51:5f:ba:28:2b:
a5:ad:7a:88:c0:8c:00:1f:83:7a:ea:d4:e9:74:73:
f2:53:92:cf:92:f3:8e:53:d4:e7:1f:95:93:f4:ed:
64:71:42:8b:5c:3c:03:5f:29:91:3a:bb:8d:33:6b:
a1:17:bc:dc:57:ef:a0:4d:d1:30:01:73:a6:a4:93:
20:af:dc:b4:a3:9a:6c:0e:61:bf:53:eb:3d:00:c2:
66:77:4e:8d:5b:52:2e:f1:4b:e9:6a:fe:da:2e:ec:
d5:6f:ce:e8:b9:d4:e5:bb:62:1e:2f:a0:88:7f:b8:
fb:46:4a:6a:52:30:a8:9e:c8:02:d4:78:ed:3f:41:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:ED:AA:2F:C3:DC:9E:27:9B:0B:F4:8B:9E:9A:58:22:47:9D:83
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/IhPtqi_D3J4nmwv0i56aWCJHnYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:59:49:d1:51:b1:10:7b:41:47:11:ba:50:3f:2d:b1:63:62:
29:23:93:c8:b6:29:71:a4:7f:44:f7:56:2b:1b:95:5c:0c:66:
9f:03:1a:49:7b:48:cb:d6:0d:42:1f:da:59:28:a0:8c:fc:1f:
ae:da:08:c8:08:ab:40:f1:bc:72:56:3c:1d:8b:d0:c3:ed:61:
80:d7:78:90:d7:ec:f0:1a:01:95:1e:97:73:c2:c0:ef:6f:e3:
17:bb:de:99:f4:0e:cb:16:fe:3e:24:f1:06:ea:21:5a:b3:ab:
06:d9:88:ee:e6:f0:eb:14:43:02:05:90:ae:ac:5f:ae:99:b8:
5d:a2:5a:3a:de:ac:a5:ad:55:00:c2:46:ab:94:65:de:73:cd:
51:fd:8e:04:6e:d2:f2:3c:ff:d3:4b:85:58:0f:8e:76:44:61:
11:e3:c3:e5:c8:26:af:c7:f1:f2:05:65:e8:f2:ed:4b:c7:9c:
72:0e:9e:d8:e7:e4:a8:57:78:33:19:3b:76:9f:86:af:b8:ee:
10:57:56:ad:37:47:37:bf:6c:a2:8e:e9:82:8b:50:ad:57:17:
83:eb:4c:a5:d4:d4:1b:8e:fa:68:41:35:fe:f0:59:da:c9:81:
8b:07:d7:8c:1f:fa:41:20:d5:9e:ea:5f:92:4b:28:23:17:26:
8e:ac:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:07 2024 by rpki-client on console-ams.rpki-client.org