Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/toi6s-AHD2yIXBZMpoFZGQpXOzU.roa
File: toi6s-AHD2yIXBZMpoFZGQpXOzU.roa (raw, json)
Hash identifier: l8+QgZXDTQtl7tuzmGCAJOz27atbUiTxQVMswVpYmSc=
Subject key identifier: B6:88:BA:B3:E0:07:0F:6C:88:5C:16:4C:A6:81:59:19:0A:57:3B:35
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1F295EA9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/toi6s-AHD2yIXBZMpoFZGQpXOzU.roa
Signing time: Wed 22 Jun 2022 06:58:45 +0000
ROA not before: Wed 22 Jun 2022 06:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136923
IP address blocks: 109.206.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522804905 (0x1f295ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 22 06:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b688bab3e0070f6c885c164ca68159190a573b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:4b:61:66:10:87:7f:b0:48:49:82:2e:da:
68:99:1b:49:1f:93:a6:c5:bd:82:c3:b3:cf:71:f5:
16:0b:2c:10:08:a0:91:22:82:2f:70:4f:2a:f2:62:
8a:68:26:e6:dd:51:d0:83:8f:3a:ed:a6:53:bb:95:
9f:ea:02:33:cd:ab:5a:a8:27:6f:ac:91:ca:84:70:
46:90:18:c2:fa:3e:6b:8a:f0:53:5c:0b:61:5d:f4:
33:cf:d1:63:a0:37:75:1a:85:94:b1:87:7d:92:18:
4f:ab:3d:5b:64:42:01:af:94:41:d7:70:64:49:6f:
f0:07:20:00:20:82:e3:13:2f:a7:34:59:94:e7:00:
9c:29:14:4d:bf:f5:0f:8e:eb:d6:07:1e:f8:d6:e9:
bb:58:72:bd:ae:3b:a6:46:d7:09:a9:8b:b9:bd:d9:
d5:22:1f:39:64:5d:35:83:52:7f:6c:a3:a1:14:e9:
e6:94:6c:22:83:42:84:81:0e:ad:e8:3b:51:d1:cf:
f5:31:ea:98:ac:ad:2f:d9:a3:78:0f:36:de:b0:37:
ac:5f:5e:31:0b:63:72:7d:1b:ac:af:57:e8:40:58:
64:c9:29:93:99:1f:4f:1c:1b:52:c4:e1:f2:62:cb:
7c:26:08:2a:2a:e0:7d:29:80:45:ae:bc:1d:e0:c2:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:88:BA:B3:E0:07:0F:6C:88:5C:16:4C:A6:81:59:19:0A:57:3B:35
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/toi6s-AHD2yIXBZMpoFZGQpXOzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.240.0/24
Signature Algorithm: sha256WithRSAEncryption
03:67:c7:5d:f7:49:a3:75:dc:5b:a4:bb:86:37:83:c0:31:07:
76:fe:c6:91:36:94:c0:d8:02:91:ad:ad:e5:2a:26:a7:70:a6:
0a:72:2a:f0:c4:36:10:0e:eb:fd:5e:43:36:f9:75:2a:1b:2e:
da:0d:98:05:36:3b:53:40:67:3f:69:98:60:76:6e:ea:51:19:
52:e9:f2:93:ee:28:58:47:59:88:fe:a5:33:b5:e5:26:77:52:
18:02:52:52:1d:59:d1:7f:ab:a9:86:86:d8:7f:0b:9c:23:ca:
fb:cf:92:fb:b8:45:8a:ec:31:77:1d:3f:55:c0:3d:3f:20:72:
5f:0b:a7:99:eb:11:cc:ed:18:5f:4b:25:9c:8e:76:f5:f6:72:
02:50:79:c5:98:83:bd:19:2b:a6:49:ac:71:10:59:bd:58:57:
21:a2:33:4c:95:ec:23:79:19:af:9a:ad:75:67:0d:9b:8d:d1:
d8:36:54:17:91:bd:bf:90:da:2d:f7:59:95:1e:eb:5d:23:f7:
1f:16:05:7f:b8:5a:31:a7:a2:3e:4e:5f:e5:e1:bd:7a:25:18:
7a:cd:47:21:2a:83:23:b4:fc:da:d4:71:56:6b:20:6e:c2:76:
62:bf:0c:68:d8:a7:86:e9:75:2c:aa:0b:48:51:28:73:7b:1f:
65:77:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:49 2023 by rpki-client on console-fra.rpki-client.org