Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/KxJCN7XFJ1FoteqaoRlTjqmBEJc.roa
File: KxJCN7XFJ1FoteqaoRlTjqmBEJc.roa (raw, json)
Hash identifier: PryPb6zn62k3UQzzvVvCoFnB63e9dpLrCLvp5UrhYS4=
Subject key identifier: 2B:12:42:37:B5:C5:27:51:68:B5:EA:9A:A1:19:53:8E:A9:81:10:97
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01833D41EBCB91077DA99FAAB298D6AF70DD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/KxJCN7XFJ1FoteqaoRlTjqmBEJc.roa
Signing time: Wed 14 Sep 2022 18:27:53 +0000
ROA not before: Wed 14 Sep 2022 18:27:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 11402
IP address blocks: 109.122.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:41:eb:cb:91:07:7d:a9:9f:aa:b2:98:d6:af:70:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 14 18:27:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b124237b5c5275168b5ea9aa119538ea9811097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:ec:fa:a4:7c:7b:2e:e7:19:88:7b:c0:3a:
d0:86:2c:e2:5f:43:08:c9:04:5b:b6:40:29:de:1e:
a8:ae:05:d2:b6:0c:d4:2c:38:89:85:21:42:6b:f5:
df:ab:75:c9:39:b4:97:7f:15:80:96:7c:95:31:3d:
20:6b:08:b6:ed:0c:81:11:4d:d7:f4:0a:1c:14:ad:
1a:60:93:88:54:64:9d:5c:a7:7e:e0:9e:a5:5b:ae:
e0:9f:fa:81:aa:07:5f:73:aa:f8:0f:6a:e8:7e:2d:
44:88:9d:5e:c9:11:de:32:b1:4e:3d:0d:72:65:20:
f9:ec:92:3a:79:20:e2:29:9a:c2:84:84:d4:30:8b:
ee:9a:d8:74:2e:67:29:0a:28:fd:fd:b4:37:88:d2:
28:7a:73:b1:01:ea:dc:83:20:63:47:98:7a:22:31:
53:8a:e5:fe:31:b6:7f:6d:bb:7c:f0:80:8d:f0:96:
5a:41:58:f0:a1:a7:7f:b4:7d:7b:fa:26:0a:93:41:
3d:d9:7c:b7:1a:3c:37:58:55:23:38:03:c7:89:d5:
d3:77:2f:ec:03:a6:38:f5:a2:54:54:5c:83:ea:57:
20:f9:76:c7:17:fc:86:94:c5:e0:8e:97:30:5e:7a:
71:24:6d:29:85:f3:f6:82:71:81:fe:66:db:28:e1:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:12:42:37:B5:C5:27:51:68:B5:EA:9A:A1:19:53:8E:A9:81:10:97
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/KxJCN7XFJ1FoteqaoRlTjqmBEJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5b:a3:cf:58:d0:33:07:59:cc:10:43:7e:e6:33:e2:5d:ff:
d3:0b:94:ed:01:24:16:1d:5e:7c:35:8e:2e:43:47:23:3b:76:
06:98:f5:ec:5b:e9:69:1d:99:bf:37:58:1c:25:0c:60:1f:15:
7b:ea:28:c0:a4:42:66:50:d9:a2:8c:e6:7e:92:b1:75:b5:25:
d9:7c:a2:dc:0f:52:b0:87:7d:d0:6c:6c:07:bc:0c:57:79:66:
b9:dd:c2:67:f3:4a:df:23:8e:24:d2:92:a1:33:64:85:9d:4d:
11:ee:54:eb:0b:a4:a2:af:4c:75:41:b1:a4:b9:d0:4c:d0:d8:
2d:08:88:69:c6:35:e5:5d:5f:6e:7f:61:34:18:1c:24:92:12:
1e:d8:80:43:83:ca:29:c0:8c:84:06:97:78:6d:4c:1b:ef:79:
0b:35:a0:53:ff:8b:bf:6a:50:4b:74:ac:c7:50:2d:e9:60:66:
17:06:c7:5c:ab:69:ae:7e:20:71:41:b0:fa:6a:36:0d:ec:d6:
45:02:33:21:ca:45:7c:f7:db:78:a3:74:18:cc:f5:55:ea:af:
58:5f:43:3c:b1:8d:a5:d5:76:48:ab:7b:a3:13:b9:9e:a5:77:
65:16:61:b0:89:b4:fc:52:d9:ed:16:5b:fb:dd:08:99:d3:1c:
f4:23:48:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org