Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Gj-ckuv0DUqKz2zwl0RId6SbYmw.roa
File: Gj-ckuv0DUqKz2zwl0RId6SbYmw.roa (raw, json)
Hash identifier: voUlGETD9OG9D16v8qGkC7o980xGSnp2IfZX/2PYR/0=
Subject key identifier: 1A:3F:9C:92:EB:F4:0D:4A:8A:CF:6C:F0:97:44:48:77:A4:9B:62:6C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018347E5345AB08FE6DDD8ADE73954773BA9
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Gj-ckuv0DUqKz2zwl0RId6SbYmw.roa
Signing time: Fri 16 Sep 2022 20:02:26 +0000
ROA not before: Fri 16 Sep 2022 20:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 109.122.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:47:e5:34:5a:b0:8f:e6:dd:d8:ad:e7:39:54:77:3b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 16 20:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a3f9c92ebf40d4a8acf6cf097444877a49b626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:9a:09:06:0f:48:10:79:c0:cd:5b:c0:a3:
4e:68:60:87:07:95:b3:4a:e5:56:34:40:e6:e6:98:
15:c0:2a:68:36:15:f0:cb:d9:13:7d:6d:4d:28:45:
f2:d3:2b:18:df:d0:8b:71:df:5e:91:53:02:de:7e:
3d:9b:71:11:9f:02:b3:07:60:82:b5:91:30:f9:b6:
61:65:0c:34:43:88:5e:4a:25:55:04:fe:1a:39:e6:
1c:48:4a:c6:a9:83:e1:54:a3:df:ff:d4:d8:24:bf:
a6:9d:18:29:7d:64:50:49:14:93:c5:45:f8:3e:e7:
a7:45:fc:d4:04:9d:e4:7f:d6:0c:7e:55:d1:21:6f:
05:61:0d:a8:c3:6c:7f:41:3b:26:24:9f:d1:b7:a3:
2d:37:bb:85:df:e6:78:bb:e1:46:f0:fc:b0:2d:5d:
5c:25:b7:61:b9:fd:25:36:89:a5:47:95:12:ef:fa:
5a:9a:5f:df:0f:81:d9:8d:86:b0:9b:32:21:48:fa:
3a:6a:a1:71:93:00:41:28:1c:5e:93:9e:64:c7:d4:
12:c5:ea:ce:7e:41:4f:3e:5d:37:83:d7:79:03:92:
be:89:e8:52:a1:06:53:b0:95:8b:d5:56:4b:d3:1b:
fd:f7:e6:c3:28:d2:b5:30:9c:bf:b5:b1:f2:61:6c:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:9C:92:EB:F4:0D:4A:8A:CF:6C:F0:97:44:48:77:A4:9B:62:6C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Gj-ckuv0DUqKz2zwl0RId6SbYmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d0:62:d1:0f:c9:dc:bc:15:a3:49:c4:67:09:27:74:f7:0a:
59:f8:6f:c1:0a:11:ff:e5:fe:1a:2b:b7:09:28:b2:fe:82:9a:
7e:6e:9b:f1:fa:95:23:fc:eb:80:8a:dd:11:76:08:c7:ef:58:
81:b4:8b:5e:43:ee:98:1f:4b:25:1e:10:b3:5c:a7:5a:e2:6b:
48:50:a6:88:c8:1e:6f:0a:11:d7:5a:d1:09:db:60:0b:95:31:
ed:e1:8d:6c:ed:26:b0:8c:c3:29:b3:d6:32:35:07:a8:ca:bf:
21:c2:41:ab:9b:79:98:14:10:2c:4f:42:78:21:9e:bd:d2:6c:
90:24:eb:f5:13:05:45:16:d4:d2:10:d8:8b:89:e5:22:1f:bc:
ce:6d:4c:1a:c8:e1:39:51:69:80:05:93:f1:39:f1:e2:fd:6f:
90:69:e8:b1:e0:af:63:1c:79:d0:8e:1b:95:51:53:e8:e1:58:
54:1e:13:ed:e2:78:63:1e:fd:27:3d:d4:7c:53:36:1a:d8:8e:
2f:4e:af:07:69:af:d9:d3:27:c6:90:96:50:8e:01:eb:30:fe:
47:8e:c8:18:a3:99:ef:42:19:2e:36:fe:4c:b7:bc:1c:e1:9c:
41:95:b5:52:15:2b:b8:67:b5:db:a8:7c:a3:02:5d:85:18:9e:
e6:af:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org