Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/j-uo2tXDuu3HZa4bScnuo7jh8Oc.roa
File: j-uo2tXDuu3HZa4bScnuo7jh8Oc.roa (raw, json)
Hash identifier: +mQ08+jpMreCNuUztPcxW4D0y9DEiqFpERT/wAcnl1E=
Subject key identifier: 8F:EB:A8:DA:D5:C3:BA:ED:C7:65:AE:1B:49:C9:EE:A3:B8:E1:F0:E7
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01E14674
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/j-uo2tXDuu3HZa4bScnuo7jh8Oc.roa
Signing time: Tue 22 Feb 2022 21:33:59 +0000
ROA not before: Tue 22 Feb 2022 21:33:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 109.105.192.0/24 maxlen: 24
109.105.199.0/24 maxlen: 24
109.105.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31540852 (0x1e14674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Feb 22 21:33:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8feba8dad5c3baedc765ae1b49c9eea3b8e1f0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:61:48:8b:6e:98:27:7f:cb:de:e5:eb:0b:
58:13:77:1d:1c:ee:30:9a:b8:bb:c4:98:0d:d2:2e:
c8:cf:ba:d3:af:06:ae:5f:fc:b4:e9:cb:cf:03:6f:
fc:6e:03:2f:d8:e6:a1:0f:17:44:7f:33:a1:88:70:
2f:47:1d:8f:bb:ac:a1:ea:3b:bb:d2:88:a1:9c:29:
9b:25:d7:67:9d:f1:17:f9:ec:f5:28:fb:93:b1:fa:
eb:e0:ac:59:fb:7a:37:86:6a:96:a9:35:2e:c5:2b:
61:24:f5:b6:28:1e:4d:9c:03:65:96:43:50:22:75:
e2:0a:0a:96:8e:af:80:ae:e3:27:f4:84:f1:27:48:
db:d4:4e:83:28:69:4a:ca:f0:32:87:42:d1:54:72:
24:aa:06:c1:dd:8c:89:f0:39:25:ec:18:30:b0:94:
4b:3c:00:e1:36:5c:d7:83:cc:20:a6:3f:61:78:ac:
f8:52:37:1a:b2:43:c8:2a:2b:6f:2d:65:90:7f:d1:
ab:25:22:fb:ad:22:27:24:65:db:48:aa:fb:77:de:
9e:5d:9d:63:86:e0:a4:38:fd:df:b2:0a:9f:e5:0c:
5f:4b:ef:1c:20:35:61:90:98:7c:ff:f9:45:91:91:
23:ad:9d:6c:93:5d:ad:4f:86:f3:91:93:11:bb:f7:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:A8:DA:D5:C3:BA:ED:C7:65:AE:1B:49:C9:EE:A3:B8:E1:F0:E7
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/j-uo2tXDuu3HZa4bScnuo7jh8Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.192.0/24
109.105.197.0/24
109.105.199.0/24
Signature Algorithm: sha256WithRSAEncryption
60:30:65:29:88:de:4c:4f:f4:d0:5d:5a:c2:02:da:cd:88:0d:
63:8d:c6:31:3b:96:61:2e:2b:f0:95:7e:53:f8:15:48:7b:e0:
47:b9:8a:45:a8:4a:1f:cb:d8:5d:a6:b1:4c:62:3a:37:0f:a9:
73:9e:11:4e:ed:fd:cc:fd:60:17:97:a3:a9:97:af:82:20:fc:
72:5d:9d:c4:04:0d:75:43:b8:58:d0:a5:7c:f5:58:26:48:f7:
ac:4b:09:fe:3b:45:1a:0c:6e:16:13:ef:2b:35:32:0e:10:8f:
49:6d:22:57:a5:16:56:1b:84:71:c4:bd:63:f1:c6:d8:14:5c:
e2:03:2d:4a:a7:90:9f:58:5a:24:ea:3b:89:d4:96:e5:d2:e3:
08:08:a5:1d:fa:c9:65:5d:4d:4a:dc:10:aa:4a:83:03:2d:2c:
3e:d3:df:37:6c:5c:28:53:ac:55:93:fd:0b:6a:04:d9:2d:eb:
8b:c2:aa:4a:aa:85:46:eb:19:08:14:85:dc:2c:aa:8f:39:1e:
b2:ca:c0:19:b1:ac:6a:ef:3d:71:09:ca:79:8e:06:d2:a6:ca:
73:1d:d4:37:03:a8:86:db:4f:85:ca:a8:ba:12:5f:41:b9:d6:
61:6e:c8:10:c4:c5:9b:c6:12:62:7a:13:dd:c9:c3:8e:d7:3b:
1e:71:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org