Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/RTncT-zaVLMd7tPvKDh-xIZnwCM.roa
File: RTncT-zaVLMd7tPvKDh-xIZnwCM.roa (raw, json)
Hash identifier: 0jxYveWp8hwKjSqSFadhOfaqxozO7i4On3QgpLUEJEM=
Subject key identifier: 45:39:DC:4F:EC:DA:54:B3:1D:EE:D3:EF:28:38:7E:C4:86:67:C0:23
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01845CDE4F48A231A3FD0DA2780557E113D7
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/RTncT-zaVLMd7tPvKDh-xIZnwCM.roa
Signing time: Wed 09 Nov 2022 14:49:43 +0000
ROA not before: Wed 09 Nov 2022 14:49:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 109.105.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:de:4f:48:a2:31:a3:fd:0d:a2:78:05:57:e1:13:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Nov 9 14:49:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4539dc4fecda54b31deed3ef28387ec48667c023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:05:80:b6:d7:06:1f:22:8e:c4:e4:63:93:
a6:68:7b:23:91:f6:3d:0d:77:81:b3:79:be:7d:24:
3b:c1:7c:37:55:8d:71:a1:a6:f2:a5:93:56:0a:eb:
55:c3:10:33:f1:ac:32:66:da:59:10:e7:97:e8:ac:
7b:a8:8b:b5:ea:0f:4e:66:0d:ea:63:f2:4f:29:2a:
7e:a8:79:5c:d2:e2:99:3f:32:0f:95:dd:f5:a0:d2:
17:19:1a:3f:2d:64:ad:a9:ab:14:0d:8a:54:8c:cc:
49:fe:e6:6e:f8:61:5a:ee:74:fc:8b:37:6a:2a:3b:
85:7e:18:8f:2c:8c:f3:20:c7:f1:7e:06:8e:b2:5a:
c2:77:d4:8b:72:f4:3f:f6:e2:f0:06:80:84:3e:a4:
37:82:5e:81:ba:9a:61:39:0d:c1:00:4e:7d:e0:a4:
91:99:17:21:62:2b:c3:e2:6b:33:1c:78:ac:11:71:
61:60:05:ae:f8:38:8d:54:ac:8a:87:15:73:ef:ff:
ad:16:0f:32:09:de:dc:c3:5a:83:f1:8d:28:b3:74:
2a:11:30:a1:45:37:08:d1:72:a2:08:04:6d:81:fe:
a5:f2:66:54:43:9f:cc:a0:63:0e:93:34:41:b8:65:
4a:5d:8d:50:0f:c7:65:fb:4c:af:09:d6:2f:34:4b:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:39:DC:4F:EC:DA:54:B3:1D:EE:D3:EF:28:38:7E:C4:86:67:C0:23
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/RTncT-zaVLMd7tPvKDh-xIZnwCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:65:53:bb:3d:28:d6:ee:db:3b:8c:d0:e0:5e:3e:af:12:e3:
7a:93:2d:97:23:e7:56:bb:ab:ab:40:55:97:d4:81:90:10:6c:
0a:6c:3d:04:99:7d:ff:46:d8:e2:56:7a:34:01:0e:ff:4c:dc:
a5:cd:e7:ed:04:b8:db:f2:54:88:47:e2:07:ed:f1:b7:57:d5:
20:24:e8:75:69:da:66:19:2b:95:1f:6a:ce:c7:8e:7d:1d:5c:
cc:0c:4a:f0:70:09:07:5f:1f:79:a3:58:85:09:f4:9c:e1:5d:
85:d9:74:d6:d9:d1:23:c0:48:79:e7:34:38:e2:3b:a6:b3:a9:
a3:44:11:be:2c:28:eb:cd:27:d6:9f:71:e0:b1:81:07:72:c3:
7a:5b:85:26:ed:a4:8d:31:98:7b:55:33:17:4b:62:09:1b:19:
ba:75:6c:51:70:94:4d:b9:9e:5f:d8:69:b8:41:67:1d:60:74:
5f:5e:3f:e1:4f:70:f3:6c:75:1d:5b:52:43:b3:e1:1f:2f:6c:
89:bb:93:70:b5:ff:10:c9:2c:e5:52:dd:f7:fa:47:cb:82:9f:
ee:1d:86:28:94:da:c8:a2:59:ba:31:7b:54:9f:2b:55:27:bb:
e7:72:d8:fd:da:38:ad:29:07:54:c9:0e:79:ae:64:19:71:5c:
b5:41:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org