Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PAd9qIXc82cuKQoRiEazdyqIKNs.roa
File: PAd9qIXc82cuKQoRiEazdyqIKNs.roa (raw, json)
Hash identifier: ygH+z4NO+bQ1FBey8pOUNF7MN0IFacu/VsWUhQOi/r0=
Subject key identifier: 3C:07:7D:A8:85:DC:F3:67:2E:29:0A:11:88:46:B3:77:2A:88:28:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01830E52CEDDAA2C2DBFE45F8DFB4003A8D7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PAd9qIXc82cuKQoRiEazdyqIKNs.roa
Signing time: Mon 05 Sep 2022 15:44:11 +0000
ROA not before: Mon 05 Sep 2022 15:44:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136923
IP address blocks: 109.206.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:52:ce:dd:aa:2c:2d:bf:e4:5f:8d:fb:40:03:a8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 15:44:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c077da885dcf3672e290a118846b3772a8828db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:52:e8:c0:f1:53:b2:2a:4e:1c:e7:dd:e4:
9c:fb:2b:3b:0d:a1:d1:04:9c:7f:34:90:e5:9c:ff:
af:69:c5:76:72:0f:64:8d:2b:11:12:e4:52:fc:8a:
d4:69:22:c8:2c:14:d0:c6:74:6a:11:89:d1:50:c5:
bf:d6:d1:87:fa:fb:c7:11:a4:9f:37:d3:dc:9c:9c:
4c:6a:73:c3:46:53:04:33:13:5f:4d:f7:ed:21:06:
e2:1e:4a:20:3e:f4:8d:7d:cd:ea:0f:45:a8:12:f3:
65:c2:ea:30:c2:1b:5c:b3:d0:14:da:d4:54:09:d0:
6f:0e:fc:94:13:65:1a:e0:9b:e6:5d:26:c7:7c:a8:
94:ce:d4:8b:5f:ed:94:5f:25:5b:fb:4d:4a:38:71:
5a:4a:3e:65:55:23:fb:3d:e6:72:06:8c:4d:d3:96:
38:48:45:4c:d8:c6:55:ed:a2:b3:c7:c0:e5:b8:01:
c7:af:0a:b2:30:72:26:1b:5b:49:51:b4:86:1a:57:
fa:63:1f:3e:4d:b8:69:d1:af:ce:a8:eb:b0:39:82:
38:3a:e4:c3:fb:34:48:6e:bb:71:49:97:11:d8:f8:
a5:9d:37:5c:a1:d5:b2:07:70:09:61:0a:48:3e:86:
12:a7:e5:4f:d4:35:99:0a:47:42:7a:33:96:9b:0b:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:7D:A8:85:DC:F3:67:2E:29:0A:11:88:46:B3:77:2A:88:28:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PAd9qIXc82cuKQoRiEazdyqIKNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.240.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a0:fc:30:c8:a6:02:0a:9a:eb:a8:e5:8b:5b:35:3b:6f:80:
2d:ee:2a:95:41:2f:de:29:4d:04:56:df:8f:d7:57:4f:2e:a3:
22:b1:03:3a:4a:52:0b:49:7a:11:b5:b9:76:c4:10:a6:81:a4:
2e:ed:c0:88:0d:b8:36:a5:01:a5:c6:03:bd:3d:e3:f1:40:24:
38:41:d2:c3:19:ce:5b:6f:7b:b2:24:08:26:7f:e0:7a:7f:d4:
a0:da:4d:c2:43:ff:b0:ac:6b:f4:38:7e:e5:82:a3:85:32:16:
c5:0f:7c:6a:9a:9b:d7:5d:3f:d8:5f:d7:00:d9:72:ed:3e:88:
4e:db:28:e9:79:12:ea:85:ef:ec:82:69:7f:89:a2:e8:d4:ca:
f7:32:59:10:75:a0:3f:12:93:e9:ad:9a:95:94:17:f3:39:31:
fb:dc:2a:51:7a:58:9d:d1:b8:58:dd:6e:de:b8:eb:51:05:81:
cd:2c:00:9d:1b:48:58:54:d3:7e:46:e7:00:86:bb:b7:08:5f:
79:63:5e:34:d2:b5:91:5f:e2:a5:1b:57:38:6f:16:12:bf:b4:
99:cf:6c:2b:78:22:10:59:fc:d4:3f:94:9a:82:eb:91:f8:79:
4b:3e:3d:9c:dc:9a:05:ce:39:7b:aa:3c:da:b4:31:c0:3c:17:
31:bc:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org