Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/B49F7CTyqxhbybPIjm1Q6EPeqQM.roa
File: B49F7CTyqxhbybPIjm1Q6EPeqQM.roa (raw, json)
Hash identifier: mZmxGxsOAkBP8PrnsreqbYwEnda8tG8Kq6n858DB+Jw=
Subject key identifier: 07:8F:45:EC:24:F2:AB:18:5B:C9:B3:C8:8E:6D:50:E8:43:DE:A9:03
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0184F80C814A8230594C8BD184F0DB311FF3
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/B49F7CTyqxhbybPIjm1Q6EPeqQM.roa
Signing time: Fri 09 Dec 2022 18:01:19 +0000
ROA not before: Fri 09 Dec 2022 18:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 109.105.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f8:0c:81:4a:82:30:59:4c:8b:d1:84:f0:db:31:1f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Dec 9 18:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=078f45ec24f2ab185bc9b3c88e6d50e843dea903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:9e:4e:b5:fd:07:0b:92:2b:4e:1f:37:ac:
30:ec:33:a2:84:03:46:a4:d3:03:0e:3b:f3:19:14:
c8:ba:6d:67:7d:a9:16:53:7d:b6:fa:cf:2f:b5:84:
0e:1c:4f:01:f9:1c:79:79:0a:41:cd:23:8b:0e:08:
cc:ca:f3:56:8d:35:79:b4:eb:da:48:98:82:a2:f4:
ac:3c:85:bd:92:9e:81:4d:4a:e8:b9:34:45:a1:b6:
21:44:e1:a9:f3:b1:fb:a0:b9:4f:f1:46:fa:e5:9b:
0b:42:e3:5d:8c:96:9d:34:d5:67:7d:15:52:ea:75:
e2:ca:2b:b6:c2:5d:a7:b5:b9:32:e1:6b:ed:83:71:
f2:9d:b2:20:c6:d4:91:73:44:ef:0e:8e:04:aa:42:
6a:af:9d:02:e4:e5:dc:df:50:36:fb:71:4d:68:52:
44:86:78:6c:cf:02:e4:76:4d:19:ab:b7:ff:e3:01:
11:94:89:dc:eb:2b:f7:28:85:54:59:a0:8d:27:62:
95:f4:f7:9b:80:ff:b3:cb:98:91:47:26:f2:ed:50:
e7:ed:8f:37:64:bb:e2:25:27:e0:e0:76:cd:a2:c9:
37:15:03:62:27:32:8f:cd:05:1f:e8:7e:84:41:16:
44:aa:b5:e8:7e:21:f0:96:8f:d4:76:e4:fa:21:88:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8F:45:EC:24:F2:AB:18:5B:C9:B3:C8:8E:6D:50:E8:43:DE:A9:03
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/B49F7CTyqxhbybPIjm1Q6EPeqQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.193.0/24
Signature Algorithm: sha256WithRSAEncryption
60:75:bb:d4:f5:a3:ef:0b:14:a9:92:72:de:e8:4f:96:80:78:
1d:25:5b:91:7f:9f:c5:b4:e2:02:7b:9f:15:fa:57:38:10:87:
cc:f3:4f:38:ec:79:5f:9c:de:ef:25:0e:79:29:27:20:35:e9:
f3:a7:ca:24:25:6f:22:c3:e0:83:7a:c7:e5:05:66:19:60:54:
6c:19:c0:03:64:aa:a2:9e:f0:67:4a:ed:eb:9b:85:9d:0a:89:
f0:1e:c0:ff:92:b8:72:7f:bf:88:11:8e:1e:62:da:6e:49:ed:
0c:67:95:f9:76:b5:75:57:51:03:f3:fe:25:58:f3:39:ef:c0:
11:4f:2c:ef:45:d2:09:cd:94:04:48:b6:1e:f1:cd:be:e3:5a:
9c:b7:28:ba:ce:1a:7f:44:72:2d:b2:f5:d4:38:db:f7:ef:52:
59:b2:a5:3a:b8:9b:76:c7:72:08:6b:b7:1a:5e:47:81:6e:99:
f4:c3:e0:5e:0f:00:d8:5b:ea:7d:dd:62:c3:07:2e:e0:a6:8c:
ad:af:00:0c:15:63:23:aa:25:68:f5:40:2a:b3:18:3f:4b:95:
c6:3b:8e:fd:b3:f9:a8:ea:38:00:86:c6:b2:33:9b:74:bc:be:
7d:71:a9:51:12:cd:6d:c3:b9:fd:df:7d:a7:87:62:97:ff:02:
d4:7e:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org