Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6yWQ-AsPIaWVncMXPO4U82LFslY.roa
File: 6yWQ-AsPIaWVncMXPO4U82LFslY.roa (raw, json)
Hash identifier: c7Dk2lwIaBbjhbxenlHj4QRSLoqClJT6mnR7GTAPwy0=
Subject key identifier: EB:25:90:F8:0B:0F:21:A5:95:9D:C3:17:3C:EE:14:F3:62:C5:B2:56
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018349B64AC0997CE05BD215BB97F12E6B3E
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6yWQ-AsPIaWVncMXPO4U82LFslY.roa
Signing time: Sat 17 Sep 2022 04:30:26 +0000
ROA not before: Sat 17 Sep 2022 04:30:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:49:b6:4a:c0:99:7c:e0:5b:d2:15:bb:97:f1:2e:6b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 17 04:30:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb2590f80b0f21a5959dc3173cee14f362c5b256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:8c:8c:99:d8:84:74:b0:db:55:b2:d5:a2:
e1:9c:11:e0:94:d5:06:e1:dc:0a:da:e2:6a:a9:04:
c7:15:93:07:cc:48:31:0d:13:fd:0a:40:b1:82:7e:
e0:56:87:7b:1c:c4:ee:62:a5:9a:12:48:94:e0:08:
69:d5:22:0e:8e:b1:c3:55:95:b3:05:88:26:2e:a5:
72:ac:53:cd:fd:c7:73:1d:e0:26:9e:fb:37:47:4e:
ec:a9:b4:ab:52:c6:83:c8:69:aa:a7:12:7b:6e:bb:
47:8b:f9:7e:da:1f:59:71:b1:b2:46:61:58:b5:cd:
8a:c7:13:fd:2c:ab:60:78:c7:f5:89:c5:73:3d:b1:
33:f6:b6:6f:dc:97:70:72:8e:cf:65:e8:c7:f0:59:
41:7f:d1:4a:18:b6:26:38:56:fd:10:8f:dd:a5:72:
9a:03:28:96:03:b5:12:e6:96:31:0c:34:ff:74:29:
cc:8c:09:ef:96:67:3c:9a:0c:0b:ea:fd:a1:98:9b:
02:4a:0d:99:de:de:00:e4:11:11:9b:ec:fc:6b:fb:
af:51:f2:11:36:06:45:f3:95:97:cc:b5:22:1a:fa:
26:30:0c:87:5a:56:bc:60:32:d8:49:c1:16:a2:dc:
23:d6:4a:c6:a6:1c:92:33:d0:84:e5:dd:33:95:47:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:90:F8:0B:0F:21:A5:95:9D:C3:17:3C:EE:14:F3:62:C5:B2:56
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6yWQ-AsPIaWVncMXPO4U82LFslY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.45.0-109.122.46.255
Signature Algorithm: sha256WithRSAEncryption
2b:bb:24:94:a2:32:3c:41:29:f4:bb:7f:85:1d:38:aa:91:55:
ae:18:1d:bc:c5:4a:93:9a:0e:18:03:ef:5e:7a:f1:1b:70:05:
44:40:06:37:30:6c:04:f4:c0:36:28:29:2c:d3:08:f0:e1:47:
5c:cd:d8:f8:75:8a:33:bc:03:b1:18:45:93:dd:67:14:fe:aa:
18:3f:11:10:92:18:ca:ab:4b:9c:99:ad:01:db:94:d0:0b:b0:
0f:55:3f:08:ef:a1:50:a6:63:a1:61:ab:ec:c1:0f:a8:72:9c:
8b:8e:82:d5:99:4b:67:b2:99:94:89:96:0d:b4:32:c0:fe:c0:
c9:94:c3:3f:be:46:b7:db:7b:9c:0a:90:a6:17:06:c9:dd:99:
f2:8a:41:76:b3:2f:82:51:a3:49:86:ae:4d:a1:19:b3:9a:a3:
03:06:34:0f:2f:02:da:10:35:37:4b:98:fa:c1:a7:51:6f:44:
05:83:f8:af:30:59:05:19:f7:c9:7b:f2:f4:76:ad:8e:b4:f8:
45:4f:ae:f6:79:b0:e0:19:4c:a7:40:0e:f3:e5:10:93:2b:ed:
e5:6f:f7:26:3d:35:1c:b7:9c:e2:5a:86:72:ae:fa:bc:07:cd:
35:ad:6b:bd:9e:02:8a:5f:82:24:83:9b:4e:89:17:a5:e0:36:
ba:40:fb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org