Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1I9IVcvMgbYM8UXANMz_Zqp24LM.roa
File: 1I9IVcvMgbYM8UXANMz_Zqp24LM.roa (raw, json)
Hash identifier: VAW++p15PR9cwZyvUuINg2j5/QcSJbbadFmI5vn5PaU=
Subject key identifier: D4:8F:48:55:CB:CC:81:B6:0C:F1:45:C0:34:CC:FF:66:AA:76:E0:B3
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0393A7B1
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1I9IVcvMgbYM8UXANMz_Zqp24LM.roa
Signing time: Sat 01 Jan 2022 06:06:46 +0000
ROA not before: Sat 01 Jan 2022 06:06:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203068
IP address blocks: 109.205.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60008369 (0x393a7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 06:06:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d48f4855cbcc81b60cf145c034ccff66aa76e0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:fc:fc:3d:a6:b8:11:d5:25:74:b8:01:c2:
64:0c:52:ec:2f:ae:fc:95:6e:59:c2:20:6d:6d:c1:
04:d9:dc:b1:bc:0e:3e:93:c5:ee:25:d3:ca:7f:0d:
6c:1a:5d:2e:c0:bd:30:af:0e:97:85:88:53:80:1a:
0e:b3:3b:95:c7:2b:2c:03:14:11:d4:3e:1f:02:ce:
b8:ea:dd:90:df:47:5a:d9:51:4f:c6:27:8c:85:12:
3a:96:f0:a1:76:84:c7:c1:5d:13:be:df:14:f6:ba:
c6:a6:a5:3f:12:8e:9f:27:8b:22:78:a6:27:2c:32:
5a:9d:e2:a7:79:57:06:e6:b4:ce:0c:f6:ad:73:32:
c7:b4:1e:3c:f8:00:60:d9:97:7f:23:e3:9f:20:48:
32:65:d6:b6:64:07:3f:fc:de:6b:b6:66:79:12:fb:
4e:69:98:7a:be:84:27:73:80:05:2b:95:a7:a9:d7:
97:73:9d:9a:57:96:54:74:11:a8:ec:82:ba:f6:92:
19:03:59:ff:16:df:c2:2b:90:3b:70:62:66:ff:36:
de:ce:7c:d9:7c:32:28:9b:64:10:49:a1:18:02:d5:
7e:2a:be:04:fa:de:d8:7b:6d:0f:b5:be:81:60:07:
64:67:c7:c1:b3:2a:e4:ba:81:67:18:93:5a:c8:82:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8F:48:55:CB:CC:81:B6:0C:F1:45:C0:34:CC:FF:66:AA:76:E0:B3
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1I9IVcvMgbYM8UXANMz_Zqp24LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.244.0/24
Signature Algorithm: sha256WithRSAEncryption
71:bd:f7:73:a3:0e:cc:08:94:2e:de:95:de:b4:32:1c:54:30:
21:50:1a:54:cb:3e:f5:35:04:cb:5f:2e:dd:d2:53:d9:53:a0:
9f:f2:97:31:fe:4d:c4:8e:03:c3:00:56:0d:02:88:32:73:37:
12:87:a2:ad:f3:83:49:51:98:b2:3c:c1:33:51:92:a5:d0:a5:
03:c6:ac:e7:51:43:42:ad:e5:59:a7:12:49:7c:34:91:e7:d1:
26:8e:75:55:30:ef:5c:0b:a3:06:7e:36:cf:8c:8a:da:d6:e2:
c0:6c:a9:23:f0:f7:f8:db:05:3e:3d:8b:d3:f8:23:45:28:19:
cf:13:d0:0d:00:2f:a1:36:11:1b:55:ef:bc:e9:88:34:77:ce:
2e:a3:7e:3d:4c:59:c0:5d:62:73:32:30:c9:1f:8d:8b:fb:cf:
c5:60:2d:a5:f5:1f:c5:82:ab:00:15:95:fd:90:28:67:f5:5f:
41:43:50:1c:37:3b:56:d5:79:b4:e8:de:f0:35:8a:d6:0b:bf:
1f:81:d9:fd:a4:b5:0b:4e:36:b2:8e:7b:44:e3:a9:17:fa:bf:
b0:9e:16:c3:43:65:d9:b5:8a:ca:c3:8f:97:9f:d4:3a:d1:fc:
a2:d4:c8:2e:a1:cc:9c:f9:71:0b:10:72:56:80:fc:d4:b5:6f:
7d:43:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org