Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/0w8ux_8upccSeCNWDbU2aAv7sy0.roa
File: 0w8ux_8upccSeCNWDbU2aAv7sy0.roa (raw, json)
Hash identifier: AhujLFa3wxy1rqvQDjb3h6RJwHH4RlFaOt4EDoeiTTI=
Subject key identifier: D3:0F:2E:C7:FF:2E:A5:C7:12:78:23:56:0D:B5:36:68:0B:FB:B3:2D
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018544F7158463BAAAB9827051ECC15D27E9
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/0w8ux_8upccSeCNWDbU2aAv7sy0.roa
Signing time: Sat 24 Dec 2022 16:28:41 +0000
ROA not before: Sat 24 Dec 2022 16:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.105.197.0/24 maxlen: 24
109.105.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:44:f7:15:84:63:ba:aa:b9:82:70:51:ec:c1:5d:27:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Dec 24 16:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d30f2ec7ff2ea5c7127823560db536680bfbb32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:8c:0e:b7:74:d7:8e:40:b1:b2:b5:1e:99:
a2:f8:89:97:04:08:52:e8:a5:ea:20:2f:a1:59:5c:
0e:e7:27:65:42:dd:11:2b:5a:2c:b3:45:a7:51:1b:
ec:5c:ff:fd:e3:ab:00:62:41:f5:8f:fb:41:64:51:
28:81:79:35:b8:e5:c7:00:bc:10:2a:59:de:c6:dd:
96:df:2b:1a:de:b7:a7:2c:ba:08:b5:de:39:9c:22:
02:cc:1e:30:42:18:80:4f:f0:f0:e8:a8:c2:a7:e3:
95:3d:e1:bb:f7:7d:d8:be:83:3a:68:f1:2f:d5:0c:
79:8f:c3:19:29:dc:06:ef:c8:5f:82:53:ec:18:57:
d6:a2:8a:90:94:37:ef:6d:30:24:d4:98:95:b3:e0:
08:e1:e1:9d:7c:a3:35:cf:5d:90:1f:1b:c6:68:b4:
3b:8e:c9:5b:28:52:a2:7c:67:c2:89:75:1a:c9:86:
cf:ca:2f:61:d0:d0:fb:af:a2:0e:83:14:e4:68:e1:
a7:ea:54:7c:bb:ac:4d:fe:93:38:89:12:6b:34:cd:
44:32:5b:9a:a3:aa:f9:6a:b9:01:43:1e:36:f9:36:
93:e2:55:96:7c:23:73:ad:80:f2:3a:ed:52:82:df:
47:d6:0d:f4:d8:7f:d8:01:53:43:21:67:c2:38:00:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0F:2E:C7:FF:2E:A5:C7:12:78:23:56:0D:B5:36:68:0B:FB:B3:2D
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/0w8ux_8upccSeCNWDbU2aAv7sy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.197.0/24
109.105.199.0/24
Signature Algorithm: sha256WithRSAEncryption
14:26:77:24:3f:f1:8b:cc:e9:5e:76:5e:11:11:c4:64:a1:84:
9b:ed:92:42:30:cd:34:ef:a7:51:6f:67:d9:43:4d:8f:03:3f:
76:16:84:f2:87:8e:38:70:fe:65:30:28:54:77:4a:56:cd:6a:
73:75:44:4f:1c:56:31:4d:57:bd:4c:26:17:07:2a:81:a2:9d:
09:0f:41:cd:36:e4:9d:b5:75:0f:39:c6:38:c6:9e:ac:5b:c2:
c6:cc:bd:17:ba:8d:aa:b0:36:1f:6a:b7:b6:5a:c1:b6:2c:b6:
4a:d5:13:3f:07:70:a8:43:23:be:4c:e6:59:85:11:07:c4:16:
e6:04:87:f5:58:ed:35:a4:ee:0b:b5:d3:cf:a3:2a:c9:59:17:
a9:94:09:b4:1e:31:eb:59:1e:2b:f2:f3:fc:ad:c2:47:90:47:
fa:93:f2:ad:d6:2a:54:af:c2:c3:aa:94:28:b4:7f:60:ec:f7:
94:2f:76:d9:28:e3:ca:0a:fd:6b:a1:09:5a:72:96:bd:9f:5d:
91:72:ed:fd:63:8b:45:6d:09:b3:da:6a:9f:b5:78:62:64:cd:
60:d7:a7:b0:4e:fb:f0:08:91:e1:3f:4c:50:f1:41:18:90:f6:
aa:85:be:a8:e5:48:7f:93:27:bb:ae:da:94:90:31:1c:46:78:
b9:8e:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org