Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/I9WIjaOny4VXm8TaJYVXkWd_HtE.roa
File: I9WIjaOny4VXm8TaJYVXkWd_HtE.roa (raw, json)
Hash identifier: WOARrkBxv6Tdmw/CRnMfqchOeIT1UuWaiyrjeQEBgvs=
Subject key identifier: 23:D5:88:8D:A3:A7:CB:85:57:9B:C4:DA:25:85:57:91:67:7F:1E:D1
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 04A53F1C
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/I9WIjaOny4VXm8TaJYVXkWd_HtE.roa
Signing time: Thu 30 Jun 2022 11:25:02 +0000
ROA not before: Thu 30 Jun 2022 11:25:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204807
IP address blocks: 185.189.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77938460 (0x4a53f1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Jun 30 11:25:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23d5888da3a7cb85579bc4da25855791677f1ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:01:4d:6d:3a:b8:84:0b:6a:15:e1:b1:10:
92:8a:d5:9f:30:fa:88:6c:87:8d:51:c2:20:3c:51:
66:7d:d5:14:12:93:2a:fe:de:0e:86:ac:b4:dc:f8:
8a:15:48:7c:f4:2f:8a:16:81:d2:c2:ff:c5:41:df:
62:ee:16:43:e2:67:27:e1:8f:3f:f4:f5:58:43:80:
63:6b:fe:a3:03:99:89:d6:a9:89:7f:87:e7:03:1e:
11:50:64:08:af:c5:28:d7:c5:cd:54:4c:ab:58:09:
a1:00:b2:b9:d8:2f:31:56:a0:78:ca:3d:38:cb:f7:
10:54:9f:ae:0f:9c:7a:4d:f7:0d:e0:cf:df:ed:9d:
88:d1:93:d5:f2:f1:c6:26:2b:b7:e2:d2:46:b5:16:
19:ea:60:7c:92:db:96:81:7d:22:80:49:46:0c:8c:
52:4d:2d:92:23:6f:fd:dd:a8:76:26:7a:22:e6:3f:
43:69:82:3c:38:77:91:89:73:42:0a:6b:a5:82:0c:
dc:cb:ab:56:8b:32:13:f9:22:21:d6:2d:e4:7c:0e:
8c:40:99:ca:b0:d3:40:ad:6b:58:64:94:fe:6e:d9:
8f:e1:bf:14:a3:4c:18:3a:ae:81:7b:62:fa:80:5e:
db:f2:2c:6d:78:c7:3c:57:f8:1c:78:2f:dd:75:45:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:88:8D:A3:A7:CB:85:57:9B:C4:DA:25:85:57:91:67:7F:1E:D1
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/I9WIjaOny4VXm8TaJYVXkWd_HtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b6:bd:c8:c1:74:e0:59:f7:b4:38:3a:51:b5:68:e5:e8:49:
02:63:44:eb:b4:6d:7b:21:fb:e9:89:99:ef:4c:ea:c8:f8:0a:
93:c3:19:bc:41:ae:ea:06:bd:eb:7c:38:83:cc:5b:bd:0e:4a:
8f:36:51:b7:9c:cc:d4:e9:ac:41:1a:0e:44:33:69:eb:03:9b:
fd:70:46:be:d2:ba:53:c1:36:ed:25:f1:fe:cf:32:bc:eb:10:
ad:d2:c5:16:a2:15:cb:a3:5f:ee:e5:2e:dd:fe:36:44:7f:5b:
ca:67:9e:ab:7e:ce:43:a5:2d:c2:3f:b4:65:ab:12:64:d2:f9:
b4:3a:e6:43:9e:85:4b:06:20:d0:77:60:fe:21:e3:56:83:f2:
ee:3f:9e:ca:5f:95:52:57:3c:23:eb:4c:74:3b:b6:e7:ab:d3:
9f:f8:36:a7:36:b5:cf:13:0d:52:2c:5a:87:bf:fa:ca:86:0e:
9a:70:dd:e3:24:d2:c8:c0:71:35:c3:f7:ee:a3:48:76:a8:ec:
1f:94:da:1e:1b:47:d8:e4:c0:56:7d:c7:5a:78:0a:3c:c4:97:
12:cc:60:31:0b:c7:a7:44:c1:c3:80:02:c1:6a:09:3d:52:bf:
58:15:f8:6d:89:7b:9d:b8:96:f1:70:e0:bb:fa:6a:e9:8d:86:
41:05:ce:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:40 2023 by rpki-client on console-fra.rpki-client.org