Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IpLXZI5un3kQdaN5EEm647E-G2M.roa
File: IpLXZI5un3kQdaN5EEm647E-G2M.roa (raw, json)
Hash identifier: 1R66aHPYwfDxqEaGvGHKXalL3bNy92nRuEiqZcTTCnk=
Subject key identifier: 22:92:D7:64:8E:6E:9F:79:10:75:A3:79:10:49:BA:E3:B1:3E:1B:63
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018414088081EC9D95C6343B2EDB5A9460B6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IpLXZI5un3kQdaN5EEm647E-G2M.roa
Signing time: Wed 26 Oct 2022 11:23:32 +0000
ROA not before: Wed 26 Oct 2022 11:23:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 109.206.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:08:80:81:ec:9d:95:c6:34:3b:2e:db:5a:94:60:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 26 11:23:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2292d7648e6e9f791075a3791049bae3b13e1b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:86:76:d2:8a:5e:f8:3b:e6:16:5b:5b:cc:
d5:b8:17:17:f2:d3:50:5e:28:f0:90:51:f6:06:d9:
83:fd:ad:fa:16:c7:27:72:e9:e8:1c:fb:d0:35:26:
05:04:01:eb:e9:1f:b8:58:25:68:89:b6:f5:57:4f:
83:cd:a3:1a:c9:59:25:ca:82:6e:eb:22:59:37:13:
a9:d0:79:4f:7e:78:90:89:98:07:79:c1:55:29:a6:
ca:99:db:c0:2b:8c:68:6b:56:96:69:b7:3f:1e:00:
b8:fe:22:61:6b:a7:93:ac:1d:83:2d:5c:1e:e0:0f:
e6:34:c8:f8:e9:06:7b:cd:2f:da:20:dd:98:96:aa:
1e:74:99:05:9c:65:30:45:1c:45:6d:d6:05:56:09:
25:12:1b:3d:ab:c7:9d:02:53:5e:44:d1:a8:d1:3a:
1b:a5:23:6a:fc:f9:43:39:2a:bc:22:96:99:49:de:
b4:99:9f:e0:b5:d2:e5:da:0c:0e:c2:77:1e:cd:80:
62:0a:c1:11:20:e1:f7:40:e5:5b:2d:d5:ce:2b:a9:
9a:76:8d:fa:03:9a:38:b9:a4:16:0b:d1:13:6d:57:
3d:65:3e:2d:e8:28:93:42:c4:90:1e:45:be:5b:54:
90:8d:07:a4:5a:35:72:16:c4:a3:05:00:15:04:cf:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:D7:64:8E:6E:9F:79:10:75:A3:79:10:49:BA:E3:B1:3E:1B:63
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IpLXZI5un3kQdaN5EEm647E-G2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.239.0/24
Signature Algorithm: sha256WithRSAEncryption
56:fd:ce:69:ef:2f:00:64:e1:ef:ad:ad:4a:96:68:48:c6:c5:
57:cd:26:5c:a7:b5:a9:a6:8d:1d:f0:ca:59:a9:05:52:c2:8f:
34:1d:1f:18:bb:18:5e:79:20:41:f2:ec:03:23:2f:35:16:8b:
d0:27:24:f8:76:c6:48:c0:71:c9:fb:44:73:e7:c3:b3:1d:de:
00:55:3a:de:0e:8b:9b:97:75:7d:9c:20:24:6d:1c:32:e6:1d:
b6:a8:9b:f4:cc:b9:84:76:e3:31:ab:7a:72:e9:ff:c8:38:b5:
b6:a9:03:3d:09:d3:56:39:2d:6c:2e:9d:28:d0:05:c6:f1:25:
71:73:41:cb:54:1e:e1:2a:50:a1:d8:4e:d3:67:52:5f:a8:e6:
e7:72:7e:d7:ee:fc:77:72:6d:e8:52:bb:8b:93:f2:ce:5f:41:
fb:db:64:e4:cf:d4:b6:ba:03:37:3d:55:f7:57:15:e7:5f:b2:
fb:e3:83:cd:c2:87:db:09:24:bc:12:c1:0b:a7:3d:4a:3b:e2:
ca:c6:e1:e4:5f:81:9a:68:f5:3f:19:61:9b:d5:2f:c0:75:64:
ac:62:22:71:1b:7e:ad:24:cd:03:9c:5f:8b:c3:a8:39:7f:29:
85:a3:b4:f9:58:18:41:1b:5b:b0:73:53:a8:00:e0:de:8d:03:
ad:a7:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org