Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/eVtzZXS263SsmgYkHWtAItGXf70.roa
File: eVtzZXS263SsmgYkHWtAItGXf70.roa (raw, json)
Hash identifier: pzU08RohAn/W6bhJeG1vQY8MHqzNbcQqSFviQXd1BjY=
Subject key identifier: 79:5B:73:65:74:B6:EB:74:AC:9A:06:24:1D:6B:40:22:D1:97:7F:BD
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01833BA422FD69CA2936A96437834B9CA4C4
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/eVtzZXS263SsmgYkHWtAItGXf70.roa
Signing time: Wed 14 Sep 2022 10:55:56 +0000
ROA not before: Wed 14 Sep 2022 10:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35758
IP address blocks: 109.122.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:a4:22:fd:69:ca:29:36:a9:64:37:83:4b:9c:a4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 14 10:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=795b736574b6eb74ac9a06241d6b4022d1977fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f1:3a:84:e9:59:71:c8:42:40:6b:ab:7f:52:
e3:0e:dc:3a:d8:44:0b:81:13:12:a4:57:84:52:03:
f6:55:2f:e7:8d:21:ea:31:98:58:1c:85:48:aa:53:
b8:93:22:48:5d:d1:3a:74:3f:4e:24:0a:b1:9e:da:
57:4a:15:cc:ae:3f:af:11:92:9c:95:0b:3a:7d:de:
6b:dc:69:bf:2d:ec:63:98:b2:25:56:7f:94:3d:2d:
ca:cb:a7:c5:a2:f8:33:75:32:c3:f7:78:44:04:e4:
26:cf:a7:43:17:37:c1:e7:07:93:19:82:a9:00:9f:
d8:cf:bf:e8:d7:2f:c7:ac:f0:67:48:7b:55:79:bc:
fd:64:32:ff:c0:3a:da:6a:4c:ab:e3:c3:ed:7f:c7:
6c:7c:ba:63:05:b6:06:87:50:8a:8c:87:c1:9a:dd:
c3:ca:ec:e4:c7:e7:9d:51:0d:3e:8e:14:71:85:5f:
5e:20:73:39:ff:43:54:a5:41:02:75:b5:71:ee:0f:
c9:4e:50:9a:06:90:4d:6e:ab:ab:5f:09:21:8d:66:
98:97:a8:3c:2e:bb:fc:ca:a5:c5:dd:e5:8b:c5:e0:
ea:53:39:5e:dc:48:63:49:6e:1a:1b:93:d6:f0:ce:
56:b5:98:2c:17:d4:ea:a5:8d:3b:4b:1d:1b:f4:9b:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:73:65:74:B6:EB:74:AC:9A:06:24:1D:6B:40:22:D1:97:7F:BD
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/eVtzZXS263SsmgYkHWtAItGXf70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/24
Signature Algorithm: sha256WithRSAEncryption
77:16:c5:d3:ff:07:72:0a:4d:90:ab:e9:9c:30:8a:cb:37:37:
4f:b3:ff:d6:ee:c4:32:59:7f:95:e4:74:67:22:d8:b4:7f:4f:
9c:c0:1d:08:43:9a:3b:0e:f5:c6:99:3c:e3:12:9c:fc:1a:a0:
c4:63:b4:e7:03:cd:26:0f:0c:52:81:11:bc:11:72:75:cc:22:
5a:43:27:f4:be:d2:ed:2e:71:8b:2f:97:d2:44:55:4c:2a:96:
82:bd:62:b7:d1:2c:e1:fe:85:da:43:97:53:1f:74:63:a6:84:
06:81:df:8e:21:67:14:d9:ae:c5:8d:77:b9:15:d6:10:8f:ff:
b0:80:d8:29:87:a3:3b:a5:18:a4:d3:e9:39:91:13:c3:8b:15:
db:42:51:00:e1:0d:e4:4d:30:8d:32:34:22:21:30:a1:41:ed:
9f:c7:0b:55:0d:cf:ee:68:b1:71:42:9e:69:2b:ca:18:d3:b0:
23:9e:11:70:27:b3:c4:5a:a5:ba:af:66:0e:58:00:2f:89:f0:
fd:f2:d2:ac:a1:ca:ab:b6:db:71:4e:7b:92:b3:ac:76:7f:62:
bb:59:29:7b:01:b9:8a:01:12:cd:7f:e1:59:51:d1:c7:f5:ec:
4a:5d:a8:ff:d5:41:1d:b2:d0:b1:b3:57:9b:1c:13:fd:41:2a:
b1:f8:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org