Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/Go674vJeTEMkLm6hJDG8sqKSSRQ.roa
File: Go674vJeTEMkLm6hJDG8sqKSSRQ.roa (raw, json)
Hash identifier: 2HhpqSZjg6iiMT8JffWaErpW/NwaQiQDWios1Tvq1XQ=
Subject key identifier: 1A:8E:BB:E2:F2:5E:4C:43:24:2E:6E:A1:24:31:BC:B2:A2:92:49:14
Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial: 023E4143
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/Go674vJeTEMkLm6hJDG8sqKSSRQ.roa
Signing time: Sat 01 Jan 2022 08:56:07 +0000
ROA not before: Sat 01 Jan 2022 08:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3209
IP address blocks: 192.109.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37634371 (0x23e4143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Validity
Not Before: Jan 1 08:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a8ebbe2f25e4c43242e6ea12431bcb2a2924914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:f1:bb:95:1d:f3:cb:02:8a:38:7f:39:74:
b4:97:1b:2b:f1:8a:95:23:45:f3:a4:0f:ab:43:7b:
07:9e:0d:70:c8:97:6f:64:6e:1b:75:f2:0a:7c:30:
06:f8:6e:56:72:ba:75:ed:70:6b:0b:1a:d9:7b:4e:
e4:b8:22:e9:ae:3d:ab:1d:6a:4c:4a:e6:5e:79:49:
1f:57:79:9c:18:78:49:d4:79:05:48:0a:4c:89:bc:
08:de:1a:66:f5:d5:3f:1d:aa:33:3e:a0:29:99:1e:
73:e9:9f:0d:b8:81:f5:30:c4:36:79:12:96:03:29:
93:7c:e7:e2:44:da:53:e8:cb:17:e9:0a:10:22:eb:
ac:0f:c9:6c:b8:07:c7:ca:a8:20:03:c5:64:8e:f4:
b6:66:e0:ca:67:d1:51:21:97:91:36:e5:01:6f:b8:
e6:52:a7:84:39:10:04:1b:c2:81:22:55:d6:13:e4:
82:76:bf:29:e8:9f:73:fa:02:65:78:51:1e:e9:19:
43:87:25:bc:5e:61:7e:15:f5:28:27:5a:b9:f1:eb:
16:85:8d:b9:d6:27:2c:3a:bb:94:b4:bb:2f:74:46:
ff:ab:e2:ab:14:f3:2a:8f:7f:48:ce:a3:1b:32:df:
18:7b:a8:53:0e:4d:35:c6:4e:ca:07:15:e7:87:cd:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8E:BB:E2:F2:5E:4C:43:24:2E:6E:A1:24:31:BC:B2:A2:92:49:14
X509v3 Authority Key Identifier:
keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/Go674vJeTEMkLm6hJDG8sqKSSRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.111.0/24
Signature Algorithm: sha256WithRSAEncryption
51:17:c3:bf:36:f9:fb:2b:e8:fd:e6:1d:05:f9:0c:5e:b8:88:
14:d4:a2:2a:f2:b8:82:a2:c7:4d:ed:16:63:23:8f:4a:1b:f2:
7d:f5:b8:16:e5:77:24:48:52:7c:b2:17:17:12:5b:17:d2:46:
e3:37:ea:fb:8e:cf:23:3c:8b:6d:cf:60:6d:94:6b:77:7e:c8:
26:76:d6:e5:34:a8:6f:fc:25:f4:3d:06:7f:05:3b:79:40:61:
42:95:a7:e9:54:4d:72:32:68:62:2d:2d:8f:10:85:53:bf:16:
d8:ac:fa:45:5b:78:c2:73:6e:b2:e0:47:0f:2e:36:64:5e:62:
e6:5e:4d:46:db:6e:36:dd:46:db:a0:f7:b6:4b:5f:72:af:96:
0a:bc:16:0e:cb:6c:55:fc:d0:6c:92:05:8d:6e:fe:d1:08:1d:
a4:27:72:b3:46:21:82:49:65:cc:e3:d4:80:7c:f4:e2:b1:4d:
ae:68:9e:a7:5a:bd:c9:89:91:0b:81:ba:7f:10:1a:8a:4c:c9:
07:9b:35:9c:ee:51:c8:ef:55:2b:87:9a:1f:e5:8b:2b:2e:13:
87:99:2d:28:8d:da:61:43:e2:ac:29:9d:15:46:92:e1:84:9f:
d8:b4:d4:21:ad:2d:f8:24:15:a0:26:95:11:1c:9b:c3:4b:2b:
9f:b4:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:56 2024 by rpki-client on console-ams.rpki-client.org