Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/HzXqGy1oKN2I2cS_ipwbKT-08vU.roa
File: HzXqGy1oKN2I2cS_ipwbKT-08vU.roa (raw, json)
Hash identifier: jsfCZcgnXL81W0xrdYECBiqMSKHir+Ch2yY2DiZLJsQ=
Subject key identifier: 1F:35:EA:1B:2D:68:28:DD:88:D9:C4:BF:8A:9C:1B:29:3F:B4:F2:F5
Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Certificate serial: 0DC4D3B1
Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/HzXqGy1oKN2I2cS_ipwbKT-08vU.roa
Signing time: Tue 15 Mar 2022 16:39:16 +0000
ROA not before: Tue 15 Mar 2022 16:39:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206874
IP address blocks: 109.74.82.0/23 maxlen: 23
109.74.82.0/24 maxlen: 24
109.74.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231003057 (0xdc4d3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Validity
Not Before: Mar 15 16:39:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f35ea1b2d6828dd88d9c4bf8a9c1b293fb4f2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:30:8d:63:60:1c:73:d5:37:ef:be:8c:09:
b5:66:8b:f6:ca:a0:e6:f0:07:02:0e:bc:e8:99:02:
5a:c8:a5:50:d6:9c:89:42:ea:bb:07:f1:d3:aa:80:
7e:b1:c7:d7:cf:fc:e5:40:ca:fe:e9:23:7a:9c:3b:
94:26:85:2b:de:e6:be:ae:c7:76:8b:a4:30:18:42:
59:0d:3c:0e:ac:1d:6a:b6:28:09:36:6e:a2:ec:df:
db:d6:19:dc:89:2d:ca:bc:96:a4:93:91:d7:88:e3:
bd:8c:46:5c:bc:bc:b5:88:55:c2:c2:71:3c:c5:fd:
6e:68:28:c8:9d:e5:71:96:bb:6b:83:93:a3:59:fc:
58:29:ae:1e:35:19:96:cd:de:fa:21:b4:08:e7:5c:
e9:b9:cb:9c:23:7a:06:b8:85:f5:65:d0:74:b7:8d:
ec:85:f2:51:c6:89:ad:f0:39:a2:fe:19:cf:95:34:
d7:a1:a0:8a:00:12:1c:33:aa:60:c1:a9:e7:80:14:
b3:9a:4d:4e:ac:2f:8a:ca:40:2c:f9:43:06:3d:07:
27:84:33:2a:a9:e9:e2:f0:58:2e:ab:27:a4:8c:fa:
2c:d9:4d:3f:29:be:25:1d:13:2c:87:46:e5:73:68:
db:2e:71:f0:ae:80:3b:6f:43:f2:98:cd:f4:f3:c7:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:35:EA:1B:2D:68:28:DD:88:D9:C4:BF:8A:9C:1B:29:3F:B4:F2:F5
X509v3 Authority Key Identifier:
keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/HzXqGy1oKN2I2cS_ipwbKT-08vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.82.0/23
Signature Algorithm: sha256WithRSAEncryption
01:32:9e:0c:c2:71:f2:b5:8c:34:c6:ac:f1:24:af:c4:9b:eb:
b5:48:9c:0c:89:73:40:2c:5a:c5:58:64:5f:3b:e7:3a:ad:2c:
7e:6f:c3:6b:59:13:3c:64:78:d0:fa:d6:7c:04:bc:ea:ed:b7:
80:17:22:dd:1d:37:52:60:43:9d:44:91:cf:74:95:25:31:1d:
e3:32:fc:38:1a:6d:0d:a1:ea:2f:d8:31:9e:a2:24:3a:a6:39:
d1:59:dc:21:d3:ab:f9:d3:65:ec:a3:28:50:30:ef:31:e0:ca:
39:cf:14:9b:24:09:0f:ad:dd:72:ce:a7:71:99:3d:f3:66:82:
10:b0:58:b9:73:3a:45:6e:b1:f2:54:02:eb:07:de:00:3b:22:
01:93:2e:8d:c2:4b:24:a7:71:b3:80:2b:ca:2f:96:79:19:31:
67:c9:0a:e8:25:86:32:80:bc:34:9c:8d:4f:0b:52:51:b1:31:
43:44:e8:fd:e8:ff:fe:eb:77:6b:d5:ed:2e:24:2b:00:dd:33:
b8:1c:c0:34:cb:50:48:35:d3:01:7f:d2:c1:3e:6e:cb:14:0f:
8f:77:27:ff:9d:9b:74:c0:cf:9b:41:c6:32:6a:21:7c:23:39:
14:24:7f:00:7b:cd:3d:65:aa:4f:a2:dd:89:0e:5e:1a:be:f1:
76:51:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:04 2024 by rpki-client on console-ams.rpki-client.org