Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/E2zFosoTLBvwlw1NR5sOiKoTV3k.roa
File: E2zFosoTLBvwlw1NR5sOiKoTV3k.roa (raw, json)
Hash identifier: O5DZ4oxa2+q6mTMoTySoTtLe4IfJaIftVB0A2+zsSbw=
Subject key identifier: 13:6C:C5:A2:CA:13:2C:1B:F0:97:0D:4D:47:9B:0E:88:AA:13:57:79
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01844282F8A134718F4C3A772561E0E5A163
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/E2zFosoTLBvwlw1NR5sOiKoTV3k.roa
Signing time: Fri 04 Nov 2022 11:59:50 +0000
ROA not before: Fri 04 Nov 2022 11:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 109.105.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:82:f8:a1:34:71:8f:4c:3a:77:25:61:e0:e5:a1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Nov 4 11:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=136cc5a2ca132c1bf0970d4d479b0e88aa135779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:4a:cd:07:bb:ac:e3:52:ed:03:17:ed:73:
40:82:c7:f7:9f:5c:37:c3:46:0f:85:bb:34:b3:91:
00:01:02:6f:8a:7d:83:b3:07:23:e9:b1:f7:04:7c:
30:86:75:8a:c4:11:bd:3c:6a:a8:cd:35:c0:2e:47:
ef:5f:b4:29:c8:4c:eb:8b:5e:87:e5:be:88:88:b9:
cd:90:4f:44:85:e3:c3:b8:5f:d6:7c:d5:f1:da:ed:
36:41:87:fc:6f:3e:ba:39:38:50:ef:6d:f6:8e:56:
12:cf:3a:82:d8:28:50:7c:7d:5e:ff:28:e5:0b:f5:
0d:34:4e:72:f0:2d:dc:27:5e:54:b6:49:81:1e:6d:
a1:25:68:4a:a2:c4:ca:45:38:85:13:08:d9:b8:5d:
bf:aa:dd:70:04:a9:f6:ec:e8:ce:b2:17:21:fe:7c:
0e:44:fa:0f:62:43:4b:9e:02:a0:f8:bd:a1:19:ce:
cc:12:7d:d5:8d:3c:19:4c:a7:51:35:4e:78:2b:6d:
50:29:7f:ce:e8:ad:07:34:7a:f1:36:b4:21:8f:0c:
21:00:82:43:87:ed:3e:2b:b0:e9:38:59:8c:7e:c3:
5d:90:75:8d:89:5c:cb:d6:89:af:74:10:eb:df:dd:
50:41:42:2f:48:7b:b3:dd:e1:59:e4:a7:9f:f0:99:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6C:C5:A2:CA:13:2C:1B:F0:97:0D:4D:47:9B:0E:88:AA:13:57:79
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/E2zFosoTLBvwlw1NR5sOiKoTV3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
28:52:df:03:ce:30:0d:ca:42:55:3a:09:4c:15:ed:08:43:77:
3c:67:83:ac:c4:c2:66:49:17:75:fe:c6:26:6d:d3:b8:44:f2:
f5:a7:72:93:b5:c7:2a:ab:6c:5b:49:63:ba:14:65:78:0d:c6:
b2:c9:c6:e8:5d:b6:ec:23:1e:73:a3:86:d5:15:7f:e9:ef:d6:
aa:10:c0:8c:fa:85:b4:81:55:16:a1:18:b3:c8:d5:da:e4:40:
e2:e4:19:25:e5:a3:31:a8:8b:08:91:1e:35:90:38:79:71:e4:
de:a8:53:36:06:2f:e0:65:9c:78:4d:63:27:79:0f:bc:53:9b:
15:66:e1:10:e5:01:6e:c1:8e:f3:ca:3a:ae:ff:66:07:2b:fd:
d2:cd:aa:57:60:b6:ed:a6:61:81:28:c5:ad:0e:8e:f1:66:6c:
12:bc:40:17:3f:19:cf:f6:c4:70:e6:b3:92:f4:9f:cd:e0:fe:
03:22:5f:8b:bb:f4:6f:6f:75:be:15:96:08:e4:8a:3a:02:5c:
86:80:6d:08:44:4f:ef:7c:96:46:e1:ae:e3:33:5c:c4:1b:55:
58:eb:b1:34:3c:6d:3c:0d:ba:2f:69:e1:40:64:cf:ce:49:d9:
21:c6:de:ae:62:1a:79:77:92:39:78:28:9d:9a:30:12:9f:5b:
be:cb:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org