Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/zMTyCCu2TayNy845PnQos8jsFps.roa
File: zMTyCCu2TayNy845PnQos8jsFps.roa (raw, json)
Hash identifier: Gvtyg4p2VltDZpl6eAIeSyEt7UCv645r3WzBLPHbYhU=
Subject key identifier: CC:C4:F2:08:2B:B6:4D:AC:8D:CB:CE:39:3E:74:28:B3:C8:EC:16:9B
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 0A9F37C0
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/zMTyCCu2TayNy845PnQos8jsFps.roa
Signing time: Mon 28 Feb 2022 23:30:36 +0000
ROA not before: Mon 28 Feb 2022 23:30:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50419
IP address blocks: 109.95.184.0/24 maxlen: 24
109.95.185.0/24 maxlen: 24
2001:67c:118::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178206656 (0xa9f37c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Feb 28 23:30:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccc4f2082bb64dac8dcbce393e7428b3c8ec169b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:30:c2:21:ca:90:8a:d9:06:97:12:0c:b7:
ca:62:9f:fc:75:0a:93:13:39:c9:3c:24:92:33:b1:
13:9d:65:c6:84:08:0d:fd:fb:a6:20:0e:31:42:c1:
5e:15:3e:53:1a:43:95:9d:b4:f3:9a:f0:52:2f:44:
32:78:4b:76:3f:e7:70:df:a5:00:63:06:b2:82:b2:
7f:55:9b:ef:52:c7:6c:6c:0c:96:7c:a5:a0:10:69:
e6:10:68:4d:b4:ae:f7:c4:f8:a1:36:cb:44:5f:f4:
10:a4:24:0b:97:09:b9:65:59:85:c4:cc:37:77:6b:
ff:0d:2e:75:50:ab:a2:cc:6a:7d:d4:69:61:7e:3a:
bf:b8:c8:84:f5:b4:eb:ee:db:bb:00:e4:92:63:c2:
54:de:20:2d:93:a5:1a:ee:26:19:98:f7:49:e9:32:
b7:58:91:d3:c2:68:d6:a4:d5:aa:bf:db:c7:7e:26:
a5:32:e6:7a:42:c1:6a:4a:f6:6b:f3:aa:38:5d:ee:
20:24:04:a7:55:78:11:c4:b5:ce:f4:e2:0c:88:01:
3f:15:76:28:26:c7:e4:26:c2:99:fd:ad:fb:73:bc:
a5:7f:35:0f:6c:1d:69:25:bb:a7:c7:66:e7:d2:47:
00:ef:00:f0:f9:23:8f:06:76:b0:ca:c6:a6:16:9b:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C4:F2:08:2B:B6:4D:AC:8D:CB:CE:39:3E:74:28:B3:C8:EC:16:9B
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/zMTyCCu2TayNy845PnQos8jsFps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.184.0/23
IPv6:
2001:67c:118::/48
Signature Algorithm: sha256WithRSAEncryption
88:50:42:98:96:4b:c8:25:83:5e:5f:84:a2:07:a3:39:b3:a6:
11:7c:b0:42:84:1e:02:9b:58:65:1c:8a:63:c1:97:8d:08:05:
b2:38:10:86:41:a8:09:a7:e5:84:a0:25:81:52:2f:a1:6d:1f:
85:a7:7f:e1:9a:25:df:f9:45:9b:4f:94:11:5c:32:f9:5f:55:
ed:3a:52:c0:35:b9:a2:c3:ef:41:46:f3:45:cd:11:4e:d1:b7:
2d:b9:14:e5:cd:46:69:ab:1a:1a:5a:7d:9d:59:41:e7:97:1c:
92:54:2a:d7:4d:db:4b:b4:96:be:ee:50:33:49:9e:76:00:07:
65:fc:b2:bf:2d:6e:d1:fb:86:d8:4b:ad:c9:c9:97:74:df:da:
42:fe:d3:27:8f:46:f9:8f:df:c9:d6:36:2f:13:04:2c:42:6d:
51:07:1a:20:eb:cd:51:1e:ef:6f:ba:a6:b6:a7:53:ac:e9:1a:
a4:0e:c5:e7:3d:fb:00:a2:1d:e7:f4:c7:ad:af:9d:1c:d4:64:
7b:6b:19:8e:a4:47:c6:16:97:dd:5d:37:ed:5e:24:14:dd:2c:
df:ac:43:a2:a8:32:98:e5:d6:4d:29:c3:58:f9:eb:56:59:2a:
b2:05:ca:26:de:04:9f:7d:12:e2:49:7b:d0:16:26:86:80:31:
86:b3:94:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:16 2024 by rpki-client on console-ams.rpki-client.org