Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Boy1pdxVnRCgwZtRopdFAvOHYP0.roa
File: Boy1pdxVnRCgwZtRopdFAvOHYP0.roa (raw, json)
Hash identifier: pDMOtQK7spcWwmeqLIigJr1OygV80VQJQyNmVldFErQ=
Subject key identifier: 06:8C:B5:A5:DC:55:9D:10:A0:C1:9B:51:A2:97:45:02:F3:87:60:FD
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01DC0945
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Boy1pdxVnRCgwZtRopdFAvOHYP0.roa
Signing time: Tue 22 Feb 2022 20:06:47 +0000
ROA not before: Tue 22 Feb 2022 20:06:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 109.105.192.0/24 maxlen: 24
109.105.199.0/24 maxlen: 24
109.105.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31197509 (0x1dc0945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Feb 22 20:06:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=068cb5a5dc559d10a0c19b51a2974502f38760fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:6d:84:3c:cd:14:c5:da:4e:8b:84:1d:96:
3b:f6:d9:70:e4:86:46:8c:3a:c2:33:c1:86:e3:e5:
de:20:33:1c:4a:1a:12:fa:44:2a:1c:56:fe:95:87:
08:55:27:a3:c6:f8:d8:39:d0:b0:ca:db:5d:75:dd:
07:52:84:f8:66:55:2c:fa:f4:80:61:45:13:81:89:
47:dc:a6:2c:63:df:47:db:7f:30:3c:a4:15:13:d0:
c9:b0:c0:62:56:3b:78:34:63:57:59:07:d5:7f:d4:
40:d7:fd:00:d8:d4:7c:af:d9:21:1e:99:4c:8c:1f:
3d:59:26:a7:0a:cb:dc:30:d5:8d:b0:7e:7a:4d:9d:
3c:a1:7b:f3:34:f1:c6:45:9c:2c:94:05:32:63:ca:
3c:27:ec:19:2a:ec:88:c3:55:dd:89:5f:e2:58:ab:
df:af:44:94:b3:fc:d4:1e:cc:08:cb:34:99:04:bb:
6b:3a:88:49:8b:fe:c0:ca:f1:4f:c3:cb:c3:ce:df:
e3:66:98:11:9a:71:0e:00:f7:df:83:af:5e:da:aa:
7b:fd:b0:2b:f9:aa:d0:f6:12:d2:58:cb:e3:a2:c1:
74:2a:dc:2c:4f:12:57:4f:33:47:eb:4c:58:ad:90:
bb:2d:81:11:7b:b0:75:39:b3:f8:b1:07:b0:42:53:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8C:B5:A5:DC:55:9D:10:A0:C1:9B:51:A2:97:45:02:F3:87:60:FD
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Boy1pdxVnRCgwZtRopdFAvOHYP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.192.0/24
109.105.197.0/24
109.105.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ad:b5:0e:75:3a:89:9d:6e:43:44:2f:18:61:02:bf:d4:06:
49:54:52:42:97:02:1a:f6:34:49:66:2b:c7:e3:33:5b:a3:16:
4d:df:ee:58:87:50:6c:9e:aa:79:55:77:39:f3:56:fb:f0:d8:
a7:15:18:b7:ba:95:6f:45:43:db:dd:b7:fe:49:4e:63:8c:48:
d5:fe:07:94:32:86:13:0c:f9:dc:e2:5e:e6:5c:35:7b:fd:90:
34:e5:36:2d:85:c7:da:9c:de:27:ce:ce:88:09:ec:62:88:23:
73:77:8d:f1:42:e7:98:6f:9e:9e:d9:b1:85:93:fe:31:0f:93:
65:b7:c3:e4:24:10:56:b9:24:6a:55:8e:53:57:53:25:cb:05:
dd:9b:c0:8c:fd:94:6e:34:ad:64:53:ed:1a:d8:c2:09:74:6a:
76:04:a5:8d:73:91:a9:6d:77:b6:0c:64:0f:59:d0:82:64:e3:
c5:99:81:29:2f:56:92:73:e5:5a:7d:64:7e:52:f8:47:90:db:
08:9d:bd:86:6a:ef:40:39:30:60:d4:70:eb:56:31:0e:71:19:
fd:5b:90:5a:6a:b2:66:11:ec:e7:6a:55:21:57:d5:44:e7:b6:
fb:c7:af:5b:84:b8:db:8b:f9:29:37:41:a5:07:3e:80:45:7f:
20:07:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org