Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wzxNOFGq7KDQXvVell1gO9J9G_4.roa
File: wzxNOFGq7KDQXvVell1gO9J9G_4.roa (raw, json)
Hash identifier: C8cwMp7GyJ2Qo7dvp1yWUN3UtsoVHJM4FIk5CQopUhI=
Subject key identifier: C3:3C:4D:38:51:AA:EC:A0:D0:5E:F5:5E:96:5D:60:3B:D2:7D:1B:FE
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 031CEF97
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wzxNOFGq7KDQXvVell1gO9J9G_4.roa
Signing time: Sat 02 Jul 2022 08:05:25 +0000
ROA not before: Sat 02 Jul 2022 08:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 109.105.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52227991 (0x31cef97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 2 08:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c33c4d3851aaeca0d05ef55e965d603bd27d1bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:f1:92:19:71:75:79:7e:94:f3:89:99:c0:
1f:fd:93:c9:9b:47:3a:3e:d9:34:cc:15:d3:27:61:
41:8f:30:e8:79:1b:51:c5:f2:08:3c:b4:b0:0c:76:
44:af:cc:d9:ec:d6:34:38:26:bd:2f:ab:34:21:e1:
85:a3:1c:b3:03:09:71:63:6e:e5:8d:e5:06:36:80:
bc:39:7b:5b:1f:82:cb:b9:8b:d6:bb:5e:cf:6e:19:
0e:35:cb:f1:aa:0f:91:16:19:34:c5:bf:79:2f:e3:
4f:16:9b:f2:a0:71:a1:0d:50:bb:e1:b7:59:86:4a:
c4:0f:e3:e4:46:94:4b:ff:50:70:f6:4e:18:84:4b:
26:1e:fa:be:f7:58:c2:92:79:78:5d:00:be:b5:67:
4e:95:d2:5e:8a:d6:8e:24:d5:31:35:ba:65:46:55:
a4:73:13:b4:e0:e6:70:25:7b:66:de:bf:d4:00:02:
b4:20:90:d2:43:be:74:08:0d:69:f7:2c:fe:2f:0b:
10:61:dc:ee:3c:5f:02:19:69:a4:c0:e6:32:3e:5e:
df:3c:55:db:41:99:da:f8:67:87:2c:d8:e1:74:d0:
b4:f5:f8:ee:37:09:b7:00:d3:b9:c7:7e:3b:c3:cc:
44:0e:1b:98:82:61:e9:41:55:88:63:6c:14:f3:08:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3C:4D:38:51:AA:EC:A0:D0:5E:F5:5E:96:5D:60:3B:D2:7D:1B:FE
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wzxNOFGq7KDQXvVell1gO9J9G_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.192.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0a:82:12:65:d8:84:d6:c2:45:80:d1:19:46:41:28:5e:99:
45:82:68:30:35:8c:a5:58:10:93:f8:05:88:75:64:65:48:80:
62:f9:56:ce:df:95:b3:3d:87:d2:f2:83:7f:b9:9b:9c:e9:13:
16:a0:03:5e:ba:bb:e2:88:85:82:45:8f:cd:75:ea:6b:69:11:
13:a2:e8:4f:3d:3c:1f:ed:f8:40:f6:73:f1:cc:0a:22:52:65:
6b:e6:0c:5b:f1:ef:28:2d:53:92:24:c2:7c:30:7e:a1:81:30:
a0:eb:68:db:8e:b2:0b:4b:f6:67:ba:02:59:52:92:ee:7c:78:
c3:83:35:dd:b3:08:fd:65:d8:ba:7f:b8:69:dd:ba:af:c5:a5:
59:c6:c9:7f:5a:d3:53:36:bd:be:e7:c6:f0:a7:8d:4f:fd:31:
3d:6c:88:6c:ba:2f:6c:26:5e:6f:38:b5:3a:30:15:71:87:fd:
a1:3c:b6:d3:a8:1c:ee:bc:2e:15:5a:66:52:42:e8:9a:0c:37:
df:57:69:b5:34:3b:60:0f:b5:6b:63:41:72:e9:1f:7e:99:c0:
bb:22:94:e8:78:4d:60:2b:db:99:47:79:16:6e:b1:d7:c1:ee:
06:42:60:fb:7e:c0:5b:d1:39:eb:fa:7a:89:71:df:e2:f1:b7:
d3:85:6b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org