Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/WAsVEb6jX1_BzLMWZ7N1eVu2M1g.roa
File: WAsVEb6jX1_BzLMWZ7N1eVu2M1g.roa (raw, json)
Hash identifier: PlQDy3q51dRuhA+jvvVW2aHrrxO3d/leJJGunW8S2Zc=
Subject key identifier: 58:0B:15:11:BE:A3:5F:5F:C1:CC:B3:16:67:B3:75:79:5B:B6:33:58
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 014C2BE2
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/WAsVEb6jX1_BzLMWZ7N1eVu2M1g.roa
Signing time: Sat 01 Jan 2022 07:57:43 +0000
ROA not before: Sat 01 Jan 2022 07:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60588
IP address blocks: 109.105.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21769186 (0x14c2be2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 07:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=580b1511bea35f5fc1ccb31667b375795bb63358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:c3:9d:60:a5:2e:2c:e2:dc:33:fb:87:9b:
13:7b:1c:d3:be:ad:81:03:1c:88:e1:2a:08:a7:8c:
25:a3:bc:da:06:33:23:a2:4a:0a:cd:3c:39:a7:47:
ba:d5:ff:e9:50:23:6e:9a:4d:4c:49:b6:06:f5:93:
2d:41:3c:85:9e:69:57:b0:65:02:3c:cf:c8:96:7b:
f9:93:a0:a7:ca:3b:42:e0:e3:3e:98:5a:b4:4b:22:
ce:61:93:cc:cf:ce:9c:c8:88:a8:d7:68:58:0a:6e:
c3:15:eb:19:d6:e7:9d:6c:c6:5f:d9:1d:c6:80:b5:
0d:4e:9d:97:67:8b:24:af:5a:63:11:4f:65:cc:5e:
e9:ac:12:e2:1a:21:21:9b:ec:e2:be:58:45:1d:cd:
95:c9:7e:a9:8e:d8:68:3f:83:90:f7:2f:47:0c:cc:
9d:81:50:4c:6a:13:82:e9:29:b2:52:27:1a:79:00:
df:0a:f0:64:6e:47:c2:0e:b3:b7:a0:97:ac:c1:2b:
b6:cf:a4:33:88:88:c1:af:7a:2b:de:84:3e:c7:0f:
cf:6d:c0:79:3a:0e:b6:a0:8f:27:c9:62:72:51:4b:
b3:c8:48:bf:af:0d:15:a4:e6:b3:69:69:03:3b:52:
e8:bc:0c:be:a9:c5:fe:de:20:a0:64:e3:06:c5:cb:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0B:15:11:BE:A3:5F:5F:C1:CC:B3:16:67:B3:75:79:5B:B6:33:58
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/WAsVEb6jX1_BzLMWZ7N1eVu2M1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.192.0/24
Signature Algorithm: sha256WithRSAEncryption
73:08:8b:27:3f:62:42:1b:be:7f:6e:5f:08:53:d4:72:b7:95:
cf:da:78:32:6f:2b:71:27:24:6a:a1:bc:37:07:84:e9:01:65:
28:74:66:60:df:88:b5:b7:fc:1f:93:b0:b7:9a:8e:64:d3:1b:
d7:39:e1:80:b8:13:97:e7:3c:7f:2d:58:a0:db:f2:9b:13:3d:
c5:15:3f:c8:0b:b8:fb:79:3d:42:d7:bb:f6:ab:64:fe:5e:10:
0f:e5:11:79:fa:91:28:dc:8b:cd:33:48:6a:28:b5:b6:86:b7:
55:c0:69:c0:2e:88:5b:04:5d:78:b4:43:ee:ca:19:0b:dd:62:
ad:7e:22:24:b8:77:80:20:7a:ac:ab:d1:eb:e2:a6:f9:b2:28:
cb:89:17:9d:c7:15:8b:dd:23:08:b7:6d:04:2f:59:5c:0e:90:
71:4a:48:88:ed:1f:0b:c6:73:44:d9:33:2c:89:61:37:e2:fb:
fa:50:6d:79:6c:7c:36:78:c1:e4:57:fd:4a:9a:35:42:be:45:
ef:be:2e:51:8c:2d:2d:ac:cd:c5:be:7c:67:b4:6d:f3:c2:39:
68:d7:ad:37:c1:89:39:55:7f:7f:f3:e6:64:d8:b6:5e:1f:ad:
f0:fa:19:99:7d:74:f9:b9:30:15:9b:c1:83:f8:9e:54:42:03:
f7:7b:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org