Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/5uS30L6qUTbje9mGfYVi3HgR0lE.roa
File: 5uS30L6qUTbje9mGfYVi3HgR0lE.roa (raw, json)
Hash identifier: dfk84ZoXWawjh6/1Ip6lZ7YTBFle53H2lCwO7YDqv8o=
Subject key identifier: E6:E4:B7:D0:BE:AA:51:36:E3:7B:D9:86:7D:85:62:DC:78:11:D2:51
Certificate issuer: /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial: 236B093F
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/5uS30L6qUTbje9mGfYVi3HgR0lE.roa
Signing time: Sat 01 Jan 2022 06:05:16 +0000
ROA not before: Sat 01 Jan 2022 06:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47575
IP address blocks: 109.205.44.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594217279 (0x236b093f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Validity
Not Before: Jan 1 06:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6e4b7d0beaa5136e37bd9867d8562dc7811d251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:41:3c:7a:2e:8f:fc:ff:af:b8:fe:c9:6a:
fd:2c:8a:e4:14:f8:d7:f8:fb:5f:9a:e8:c3:43:68:
f9:06:31:ca:cb:72:a6:1e:aa:51:30:88:e6:7a:cc:
fb:3b:f7:f3:eb:e3:eb:31:92:30:7c:31:b4:57:d3:
ab:5f:63:87:0a:b8:d3:25:7b:6c:a1:1c:6e:47:50:
d3:d6:f8:11:ce:ed:84:58:e0:5c:71:d7:6f:e7:0d:
23:35:e5:f4:53:dd:05:7f:8f:12:a9:5f:ab:ec:53:
3f:f8:45:ef:05:40:4c:27:b9:50:a9:89:db:2e:03:
50:3f:34:52:fc:6a:17:54:27:f3:79:0a:12:3c:9a:
4b:b7:36:1c:47:3f:d7:84:27:a5:b6:33:1d:85:1f:
dc:4a:d8:42:0a:5e:08:ce:cf:f4:c1:ad:9d:b6:71:
78:b9:32:e6:ef:9f:04:7b:bd:1c:b7:13:3d:78:7d:
84:e1:a8:f6:ff:c0:59:66:cc:ea:89:0a:80:6a:e4:
1f:2f:8c:6b:ff:4d:50:8a:6f:59:a6:98:bf:7c:fa:
da:05:dc:ed:c6:bd:5d:f1:58:9b:ba:38:b7:18:9e:
32:53:aa:2d:b6:7f:1e:f6:86:e3:4b:b2:81:68:2b:
70:96:17:8b:54:b4:43:7e:34:6f:00:c4:ef:bc:ee:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E4:B7:D0:BE:AA:51:36:E3:7B:D9:86:7D:85:62:DC:78:11:D2:51
X509v3 Authority Key Identifier:
keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/5uS30L6qUTbje9mGfYVi3HgR0lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.44.0/23
Signature Algorithm: sha256WithRSAEncryption
22:94:b1:0e:9e:5f:6a:61:73:d6:35:6b:f8:4e:6c:bd:ba:63:
fd:b6:63:9c:21:b4:5b:52:d9:25:65:9f:ce:32:2b:78:79:16:
b4:64:f3:24:14:7e:fc:49:52:89:ca:ab:39:7b:24:b0:b9:16:
70:f9:32:29:19:60:35:c6:9d:26:87:0f:b9:a0:c9:a1:dc:ae:
0b:42:28:77:2c:cf:d5:0b:78:b9:f8:0b:2c:18:ce:63:15:aa:
a6:75:24:55:74:00:92:0e:92:27:ea:0c:59:a2:bf:cb:ef:f9:
e3:ad:c5:9f:85:22:b2:0d:25:a5:ec:44:a5:9a:00:9c:93:e8:
9f:3c:26:32:c3:5b:e8:a9:9c:37:66:01:91:fa:c2:18:fc:08:
3f:af:09:d2:f4:24:07:88:aa:6f:bc:f6:06:4d:7f:d7:ff:35:
07:02:6e:1d:ff:e9:48:bd:99:58:9f:8b:49:bc:00:da:5e:72:
8d:9e:af:1c:81:c6:39:cf:18:f1:19:4e:59:0d:d9:f1:6b:8d:
0f:5d:1e:ee:21:2d:10:32:81:ed:de:10:6f:72:86:c9:4a:65:
1e:b0:4e:1d:bc:b0:03:3e:98:82:3d:8b:53:4c:2b:bf:7e:09:
2e:8c:59:2e:76:39:d0:d9:22:60:62:ee:c2:1b:95:ca:8b:80:
6a:6b:cc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:56 2024 by rpki-client on console-fra.rpki-client.org