Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/6H9x4kzdpqZ_hw8xQVAwzoLS-gc.roa
File: 6H9x4kzdpqZ_hw8xQVAwzoLS-gc.roa (raw, json)
Hash identifier: Fp34PElny3m35dyM+MNLqno1IW+fDqE/iHO22in9eeQ=
Subject key identifier: E8:7F:71:E2:4C:DD:A6:A6:7F:87:0F:31:41:50:30:CE:82:D2:FA:07
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 01856BCA35E77884C056927311B7689719DE
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/6H9x4kzdpqZ_hw8xQVAwzoLS-gc.roa
Signing time: Sun 01 Jan 2023 05:24:52 +0000
ROA not before: Sun 01 Jan 2023 05:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202306
IP address blocks: 109.237.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:35:e7:78:84:c0:56:92:73:11:b7:68:97:19:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Jan 1 05:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e87f71e24cdda6a67f870f31415030ce82d2fa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:a5:b6:04:39:f6:21:64:8f:da:db:b4:7f:
95:27:86:07:73:0a:e6:a4:13:41:9f:dc:37:5e:8c:
f2:50:6b:1b:ac:86:81:a7:c4:d4:68:ba:c9:fc:c5:
a3:1a:b5:67:2f:36:d6:40:02:a8:25:39:4c:00:a4:
77:06:a7:bd:0d:fe:b4:87:5f:e7:86:43:cc:23:fc:
68:02:0e:fe:f3:45:5f:aa:37:b5:aa:a3:2b:52:d4:
1c:95:a5:94:9e:fa:54:fa:3d:4a:a5:7e:88:e2:3a:
38:51:ca:4f:12:a0:14:1b:58:de:34:6a:2f:84:2c:
50:30:52:69:ee:d6:b0:ba:6b:e1:07:3d:c7:52:15:
bb:8d:9f:0a:08:b5:99:12:9f:38:01:0f:7d:56:4b:
b8:34:9d:dd:38:45:75:b6:b4:48:5b:94:86:ab:fe:
d4:0e:e5:6a:49:cd:8d:79:1a:55:9d:84:30:58:eb:
c4:34:05:27:60:40:64:3c:0e:34:63:ee:1d:e9:01:
8c:44:20:ce:f8:25:91:83:a0:ca:4b:f0:e3:45:c2:
97:9d:4d:e1:7d:27:bc:72:bc:85:03:7a:0a:b7:34:
7a:d3:ab:ba:08:3a:f7:6e:99:3b:ba:35:40:16:8b:
74:d5:ca:24:79:0c:33:04:10:1c:43:21:9a:e8:69:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:71:E2:4C:DD:A6:A6:7F:87:0F:31:41:50:30:CE:82:D2:FA:07
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/6H9x4kzdpqZ_hw8xQVAwzoLS-gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.96.0/22
Signature Algorithm: sha256WithRSAEncryption
66:47:09:fd:dc:a7:b8:85:31:21:13:0e:90:14:11:73:7d:22:
0f:e6:cb:e8:43:c8:d4:88:df:86:c5:fb:83:10:f8:3a:29:78:
66:8a:50:a5:9e:e1:dc:d1:ff:c0:a9:27:a0:b2:6f:4c:b2:00:
97:2d:f1:93:d4:85:1e:69:69:b3:0f:fa:30:ff:e6:c6:33:3e:
f7:70:a0:41:38:9f:5f:c6:a6:19:7f:c4:12:54:88:1f:b6:99:
1a:bd:42:9f:33:d5:6e:e8:6d:e3:c3:aa:6f:49:3e:a2:ee:2d:
41:83:20:96:9e:04:90:ca:94:bd:82:1b:4a:c9:43:73:ec:ab:
d7:a3:f8:24:ba:fa:90:c1:9f:cb:a2:97:7d:3f:99:3e:ec:90:
9c:32:bd:50:ed:2b:70:5f:2b:86:d5:be:5c:98:86:34:e6:74:
c1:4c:53:b1:ef:de:94:00:2b:71:d9:26:a8:73:f5:64:0f:55:
b9:45:97:0d:14:3f:5b:77:e5:49:29:c3:e3:31:db:0f:ba:07:
81:8f:09:63:66:aa:b4:7a:08:b3:9b:f7:5c:1b:d5:f8:da:b1:
c9:7b:82:16:e2:07:66:4d:c6:fb:18:8f:5a:45:cf:37:70:29:
95:e3:4a:e7:5a:1a:17:76:5b:73:6d:bf:2f:22:66:fd:49:1c:
45:fb:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:14 2025 by rpki-client