Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/m8AV9zwmdDpt_2u6ZYNbkS6-Cqs.roa
File: m8AV9zwmdDpt_2u6ZYNbkS6-Cqs.roa (raw, json)
Hash identifier: eySmRigjDyI2NWP//VRdFgrMum3IwEFUvvHKQifYtmc=
Subject key identifier: 9B:C0:15:F7:3C:26:74:3A:6D:FF:6B:BA:65:83:5B:91:2E:BE:0A:AB
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 03D1D358
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/m8AV9zwmdDpt_2u6ZYNbkS6-Cqs.roa
Signing time: Sat 01 Jan 2022 13:55:03 +0000
ROA not before: Sat 01 Jan 2022 13:55:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203968
IP address blocks: 109.109.192.0/21 maxlen: 24
185.114.212.0/22 maxlen: 24
2a06:71c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64082776 (0x3d1d358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Jan 1 13:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bc015f73c26743a6dff6bba65835b912ebe0aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:bb:b1:08:67:cc:ac:21:e9:d7:64:24:9e:
7a:94:a1:d8:b3:c1:0e:87:d7:b3:3e:e3:8b:33:b3:
bd:91:05:12:ab:68:a6:90:7a:c1:ee:da:11:41:f7:
79:f5:c5:f2:27:94:78:aa:79:f7:73:c2:9a:db:3d:
bd:79:a7:f2:2e:0a:a9:d1:d3:77:3f:93:1d:3c:c4:
6f:31:2e:31:27:28:74:97:11:3e:b6:a2:81:7b:00:
ca:e6:82:6c:95:56:3a:e0:14:18:6c:ed:22:15:43:
89:28:b5:cc:72:c7:4e:7e:6e:4f:ea:d6:fb:35:3e:
26:19:64:b9:76:32:26:bd:e4:e5:81:88:b6:68:14:
ab:5d:27:73:47:60:5a:f5:7b:aa:68:9d:ae:e6:98:
d7:9c:ad:0f:a4:30:86:35:e5:16:6e:11:28:91:a3:
cf:1e:67:68:fc:af:9f:a3:ec:f9:27:27:5e:bf:d4:
b0:3f:25:cf:60:d3:a3:9b:f2:33:07:61:a0:7d:c1:
0a:55:06:24:80:c4:02:97:37:79:4a:11:d0:ab:07:
8a:a7:99:62:a3:f5:4a:41:89:ba:15:65:4b:30:b1:
dc:e8:0b:51:53:19:68:a1:bc:af:57:7f:af:6c:16:
79:5f:cf:00:86:f2:83:31:ca:83:1a:4c:00:87:76:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:15:F7:3C:26:74:3A:6D:FF:6B:BA:65:83:5B:91:2E:BE:0A:AB
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/m8AV9zwmdDpt_2u6ZYNbkS6-Cqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.109.192.0/21
185.114.212.0/22
IPv6:
2a06:71c0::/29
Signature Algorithm: sha256WithRSAEncryption
17:3d:04:f9:b9:f5:92:1e:e9:9c:b0:6a:19:7d:6a:09:5d:dd:
ea:b2:27:46:eb:21:1f:cf:28:d6:db:0d:d3:02:00:a6:20:cc:
89:4e:a0:24:ad:eb:bc:9f:2d:88:09:e6:c0:dd:c8:4d:f5:6d:
19:26:c8:ff:52:27:1e:78:cb:b6:f2:28:d2:71:57:6e:e5:0a:
e5:01:65:29:04:6c:3e:b3:72:15:1c:b1:a9:83:35:d0:4b:1a:
b2:19:0c:68:78:54:7c:d8:d6:9a:1e:3d:8b:93:b9:78:0f:ec:
cc:08:cb:7a:1e:9e:ee:01:7c:27:8a:73:1b:eb:e8:c1:0d:ca:
2e:bc:d2:b7:1c:cc:46:5f:81:00:77:77:12:2c:62:b0:9c:f7:
8a:6c:59:32:da:50:3b:6f:ea:8a:5e:3f:66:58:df:ab:3c:bc:
89:01:66:86:b7:50:e0:6e:94:7f:ec:c1:d8:24:29:20:e1:d0:
9a:63:37:73:24:10:4d:86:9d:6f:e5:7b:5c:69:6e:c1:64:e6:
70:66:6a:b5:25:87:9a:51:34:48:d3:45:35:6c:0d:58:3a:e8:
a5:f5:90:94:ff:11:d7:77:a0:e0:4b:6e:bd:0e:04:de:52:1d:
0c:15:a1:86:af:70:b0:46:23:81:86:74:19:9b:ae:91:ea:c6:
ca:c5:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:40 2024 by rpki-client on console-ams.rpki-client.org