Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/c92cGYc9xVxJCORf350925O9E8k.roa
File: c92cGYc9xVxJCORf350925O9E8k.roa (raw, json)
Hash identifier: vrBvsAD24pXhQhzG+LzvaJsbH1mXrGV/gUfp+L7QDZc=
Subject key identifier: 73:DD:9C:19:87:3D:C5:5C:49:08:E4:5F:DF:9D:3D:DB:93:BD:13:C9
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01E30BAC
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/c92cGYc9xVxJCORf350925O9E8k.roa
Signing time: Tue 22 Feb 2022 22:24:00 +0000
ROA not before: Tue 22 Feb 2022 22:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 109.105.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31656876 (0x1e30bac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Feb 22 22:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73dd9c19873dc55c4908e45fdf9d3ddb93bd13c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:ec:a6:57:34:5d:95:a1:bf:28:d9:7e:dc:
07:77:0c:5c:aa:51:28:f4:eb:c7:00:cf:c3:43:77:
81:3b:e0:b5:f5:b4:e3:5c:97:a1:40:64:4c:1f:83:
a7:e2:8e:72:56:5f:63:28:68:64:d8:96:86:de:39:
e8:67:bb:d0:c5:8b:d3:65:29:4b:96:72:45:22:d6:
14:93:a1:91:8f:82:0c:0b:a0:c8:74:dd:7f:da:10:
37:59:f8:12:f8:e0:9b:01:d6:71:2c:c6:b9:d1:10:
4c:56:1d:0b:72:d9:d7:cd:f9:dd:e9:d2:c6:93:d3:
d7:89:f1:45:9b:d4:62:49:b0:9a:c0:3c:9e:f3:ee:
32:8c:22:d2:32:99:6b:49:ed:b1:3f:f5:46:d3:9e:
ae:11:38:13:8d:b0:78:21:25:1f:fd:7b:41:fd:b9:
dc:ea:ce:b1:e1:f6:00:d8:7e:f9:46:bf:fb:e5:cb:
0a:c6:ec:8f:0a:d1:6e:65:04:6e:15:c5:1f:84:5e:
79:09:c6:19:86:26:a2:9b:ba:e4:40:3a:e5:9b:d2:
26:0e:5b:f8:cc:e6:c5:de:a4:71:27:6e:dc:3a:4f:
26:7a:69:3b:25:56:bf:ec:11:90:31:d9:b1:44:f4:
c9:f2:55:2e:83:95:62:8f:02:23:72:ae:4a:d1:2b:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DD:9C:19:87:3D:C5:5C:49:08:E4:5F:DF:9D:3D:DB:93:BD:13:C9
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/c92cGYc9xVxJCORf350925O9E8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d4:0e:c3:c5:2e:1c:2b:9f:37:f5:d5:48:43:b5:39:b3:d8:
74:36:7f:0e:9f:23:49:d7:7b:61:81:9d:29:18:49:e6:3f:86:
32:f8:2e:c0:49:51:7d:ca:bd:1a:a0:6d:34:e2:ec:13:bd:fc:
d1:1e:0f:ce:ea:73:f4:3b:ac:8d:74:af:94:d4:81:b2:94:88:
cb:f6:b0:94:8a:73:7a:77:51:f3:80:28:dd:6d:a3:8d:05:97:
18:69:47:0b:48:f1:6a:2b:56:af:52:f9:d6:4f:21:41:d1:ee:
64:e2:7c:9c:ec:13:94:f2:3e:6d:d2:c0:ea:ae:fb:81:2e:71:
da:8b:e9:61:13:58:7f:49:98:45:e5:79:c7:e3:78:45:3a:30:
8a:df:60:bf:d7:89:a1:4e:3d:95:d8:b5:56:2f:36:36:1b:87:
a7:04:24:a7:d5:c7:e0:ac:2c:7a:83:c6:4f:09:a3:02:34:3c:
09:6a:ab:16:fe:14:03:66:c8:93:a0:a6:64:da:fe:5e:a8:02:
99:0a:70:59:96:1d:7d:f8:5f:4f:d7:93:eb:6b:ef:b1:9a:8a:
b0:74:d0:c5:e7:4d:19:08:fb:32:6d:b5:53:f8:cf:49:07:6b:
ad:e5:b3:cf:58:4b:fa:f9:74:68:2f:1b:cd:f2:96:fd:c7:99:
1b:b7:ec:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org