Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/jdv4eFoK7UQUUmnjusN0AeRCrRA.roa
File: jdv4eFoK7UQUUmnjusN0AeRCrRA.roa (raw, json)
Hash identifier: Uxl+nK0AEApefpjJ3/oGV3KuMO65Pd4RvMaW87XRgnI=
Subject key identifier: 8D:DB:F8:78:5A:0A:ED:44:14:52:69:E3:BA:C3:74:01:E4:42:AD:10
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 040690AC
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/jdv4eFoK7UQUUmnjusN0AeRCrRA.roa
Signing time: Mon 21 Feb 2022 09:09:00 +0000
ROA not before: Mon 21 Feb 2022 09:09:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20877
IP address blocks: 109.205.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67539116 (0x40690ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Feb 21 09:09:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ddbf8785a0aed44145269e3bac37401e442ad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:e7:ce:d0:ef:c7:03:d5:5d:33:ac:5b:a2:
28:3e:5a:53:1c:81:a6:3e:a4:3a:df:c3:64:0b:b1:
44:05:56:1c:c2:41:39:51:98:f4:a9:ef:47:bd:04:
c5:02:b8:92:3e:8a:d5:c7:74:aa:79:5d:38:cc:4e:
90:f7:75:2b:fb:7e:8c:89:a2:3b:e1:e2:65:5c:cc:
7d:e7:0c:36:a7:3d:fe:8e:14:3d:18:61:ce:c0:e4:
11:76:1d:c6:44:47:0b:c8:94:21:6d:63:53:b7:89:
d0:41:97:4c:2d:dd:70:cb:1c:30:fb:6d:4a:4e:0a:
4e:3f:91:68:fb:e8:e5:51:bd:59:8d:a5:87:73:44:
6d:d5:8b:a6:88:61:33:39:be:93:1a:af:b4:30:bc:
e5:b1:85:8e:1e:44:4b:03:99:89:da:c7:48:f1:b6:
39:8f:32:2e:9f:f5:25:c8:1f:60:96:af:b7:ff:09:
d0:48:c2:6e:3b:dc:8e:ba:a1:6c:b0:f3:3b:57:59:
bb:31:d1:f9:75:5f:86:90:ed:16:a4:4c:83:b8:83:
cf:19:ae:36:40:04:81:aa:4f:23:96:b8:4d:0b:a5:
80:9c:6e:52:de:2b:54:3b:a9:76:0e:f5:26:ef:f2:
f0:53:98:67:7e:a2:2b:e6:15:d2:a7:ff:62:4a:f3:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DB:F8:78:5A:0A:ED:44:14:52:69:E3:BA:C3:74:01:E4:42:AD:10
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/jdv4eFoK7UQUUmnjusN0AeRCrRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.91.0/24
Signature Algorithm: sha256WithRSAEncryption
86:94:ea:94:9f:d6:c8:42:d0:10:1b:cc:5d:0b:98:32:31:9a:
eb:b2:e9:d3:5d:fd:4d:85:61:97:73:83:ac:f6:89:b6:1a:31:
97:f6:11:f6:6e:94:55:5e:5d:ce:cc:e9:52:98:48:20:16:fb:
04:7b:71:da:f4:f3:cf:bc:4f:9c:76:04:4d:a5:50:60:a3:89:
65:fd:42:84:39:86:b6:e0:db:0f:04:bc:1f:cf:39:00:21:7f:
92:9f:ed:2a:cb:eb:ed:fc:9e:32:eb:0d:d9:ee:39:2b:f0:a4:
5a:9a:f9:9d:1f:a2:6e:1c:82:ec:b6:6e:2f:00:c6:c4:36:2b:
66:bd:87:45:ed:ea:d1:99:35:ef:72:2d:0c:8d:3a:d0:b8:7e:
dd:65:0e:83:e7:e3:c1:9d:9b:0f:50:bc:b7:0c:29:32:31:bb:
03:62:70:78:ea:95:20:36:5c:1f:cc:50:72:9e:2b:ab:a4:15:
ac:8e:de:dd:03:41:f4:c3:3b:2f:7d:76:3a:af:c5:ef:33:fe:
b3:d6:cb:8e:bd:9e:d4:c1:95:7d:9e:60:4c:71:f0:44:02:58:
6c:15:7a:a2:c3:8c:8c:71:42:86:c6:ba:61:bc:94:2f:de:bb:
7c:df:0b:16:ef:3b:a3:ad:e2:fe:56:8c:53:a3:df:c9:40:73:
fe:a2:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:34 2023 by rpki-client on console-ams.rpki-client.org