Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lOI1utAAGO7M0bH_simfTR0iHEg.roa
File: lOI1utAAGO7M0bH_simfTR0iHEg.roa (raw, json)
Hash identifier: MBNw6UkMoyneF/eV2ULt7QnW/3fVpVH9MUzn6q+eKH8=
Subject key identifier: 94:E2:35:BA:D0:00:18:EE:CC:D1:B1:FF:B2:29:9F:4D:1D:22:1C:48
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0184018A9DEB362DD6D0A21581D2D7CFF399
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lOI1utAAGO7M0bH_simfTR0iHEg.roa
Signing time: Sat 22 Oct 2022 21:12:52 +0000
ROA not before: Sat 22 Oct 2022 21:12:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.41.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:01:8a:9d:eb:36:2d:d6:d0:a2:15:81:d2:d7:cf:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 22 21:12:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94e235bad00018eeccd1b1ffb2299f4d1d221c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:67:b5:34:0f:69:c2:8d:82:28:b6:a8:ab:
8e:9c:bf:d9:70:7a:ea:ad:bf:94:90:ec:21:79:db:
c9:f1:f4:f8:f3:56:4e:c2:16:d1:c2:da:aa:83:a3:
88:24:9b:70:77:9f:c9:57:85:41:93:12:74:44:1e:
b3:f6:c4:b5:e1:12:60:f9:39:44:9d:6e:da:54:94:
79:1b:8c:e3:c7:48:e8:c9:db:68:00:67:d0:11:bc:
32:37:35:48:b5:bd:d4:cd:bc:88:7e:f3:70:71:06:
9e:2e:3d:4d:bb:a5:3f:91:df:e7:ed:04:94:5e:95:
23:48:65:17:5c:c9:3f:90:58:9b:80:16:5d:d7:25:
44:e0:c8:57:bd:cc:81:e7:7d:c6:2e:48:68:7d:b0:
10:69:a2:2e:0a:b3:ad:aa:b4:3f:8d:52:22:63:af:
3f:1d:84:48:5e:09:4f:8c:06:b8:b9:88:7d:de:6e:
70:89:cf:0a:7f:9b:15:e5:cd:2c:2b:88:3e:33:cb:
7f:74:40:21:d3:01:e1:75:76:9b:48:83:2d:7e:f6:
c6:9f:27:7d:06:7f:0c:11:47:67:59:89:9d:4b:ea:
fb:db:e4:95:65:02:58:c7:6e:eb:0b:34:2a:1b:39:
3b:6e:07:a7:05:9e:b5:f6:a1:c0:91:23:76:6f:eb:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:35:BA:D0:00:18:EE:CC:D1:B1:FF:B2:29:9F:4D:1D:22:1C:48
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lOI1utAAGO7M0bH_simfTR0iHEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.40.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:af:17:2b:63:40:78:19:85:14:b6:02:e8:72:48:7e:08:f1:
98:46:54:c2:b6:9d:38:c6:84:14:45:5c:a2:9f:02:ed:11:f8:
aa:af:a2:85:af:66:59:9c:4a:29:c7:40:8c:5f:83:53:19:d5:
86:aa:f6:05:fe:f5:68:db:dd:26:e1:32:6a:c5:a6:0e:b8:d2:
62:34:7b:1d:fc:02:ef:b8:95:64:99:e6:bf:1d:ea:76:6e:09:
a8:22:82:b6:eb:e8:28:1f:10:41:00:ed:87:e9:f0:86:cd:27:
af:4d:59:fd:83:9d:85:d9:14:9b:d7:6f:b9:20:6d:a9:9c:28:
ac:4b:fd:16:5e:74:7e:45:09:d1:d2:25:3e:1c:71:fc:6a:15:
53:ce:b7:2e:c7:f4:ca:d0:6d:0c:1a:54:e7:a9:6c:51:16:62:
f6:39:4e:46:1b:c5:6b:cb:af:51:46:b2:4e:22:eb:8d:ba:ca:
36:5d:29:19:44:6b:8a:5d:ea:79:03:05:c1:3d:e3:b5:bc:e3:
4e:8a:3a:21:16:25:73:d9:f9:2f:50:a9:3a:c7:8b:5c:c9:bc:
d2:cf:35:7d:d8:ee:14:e6:5f:9a:d5:91:e2:54:53:99:d4:17:
e8:f4:48:62:f7:12:b0:e9:9d:c2:2f:b9:37:33:97:da:7f:e4:
4c:22:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org