Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1dJolJXUVwIzQ2hRo6XiAxqdxrY.roa
File: 1dJolJXUVwIzQ2hRo6XiAxqdxrY.roa (raw, json)
Hash identifier: uWQWi9zWDRnny5F+NCG9UzKFELXB73nSZSjIgmprNQA=
Subject key identifier: D5:D2:68:94:95:D4:57:02:33:43:68:51:A3:A5:E2:03:1A:9D:C6:B6
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1B9CFFE9
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1dJolJXUVwIzQ2hRo6XiAxqdxrY.roa
Signing time: Sat 01 Jan 2022 05:03:40 +0000
ROA not before: Sat 01 Jan 2022 05:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 109.207.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463273961 (0x1b9cffe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5d2689495d4570233436851a3a5e2031a9dc6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:10:2a:1e:1e:ec:38:5d:c1:94:6a:73:a4:
55:0d:74:78:0d:8a:46:14:53:95:4e:41:a2:35:f9:
6a:97:b4:b6:66:67:39:86:63:9a:d6:56:36:f7:a7:
90:2a:69:1e:8a:1b:38:a9:9f:31:ec:3a:35:ff:47:
23:48:43:28:d5:b9:b0:6c:37:e8:b1:aa:9a:bd:a8:
0e:91:bf:2a:c0:15:ee:ca:6c:d5:79:15:17:0c:aa:
7a:f4:25:0b:5a:90:be:cb:f5:4c:27:b2:bd:ed:d9:
06:08:81:a4:ac:73:30:0c:c6:2e:c9:46:35:08:d3:
ce:b0:4a:04:f2:13:11:fe:ae:af:ae:6b:21:90:8a:
bb:b7:70:cb:b8:d3:1a:83:d6:4e:ce:d5:29:aa:67:
76:92:54:bd:76:62:c6:a2:79:e4:01:20:7d:ae:86:
2d:2f:7c:41:03:81:e1:7b:95:9e:0c:61:b7:5e:e3:
5f:5d:be:a5:29:e6:f4:98:3c:15:1d:73:d6:1a:d1:
31:0f:d2:8b:f8:17:59:35:f1:0a:2c:be:76:e6:53:
0a:3c:67:6c:25:b9:0c:e5:83:d7:94:d3:58:32:7a:
78:f9:45:89:8b:9a:55:00:80:5b:de:38:79:52:fc:
9f:da:68:e3:d8:20:4d:58:f2:62:c6:37:2c:1c:8e:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:68:94:95:D4:57:02:33:43:68:51:A3:A5:E2:03:1A:9D:C6:B6
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1dJolJXUVwIzQ2hRo6XiAxqdxrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.128.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3e:31:07:51:30:ff:e6:66:98:ae:25:f1:fb:32:ff:17:0b:
09:54:f9:02:2b:e8:f2:d9:74:c7:98:fb:50:06:f3:dd:3b:30:
10:46:bd:82:c0:99:7a:36:30:81:d0:06:a2:aa:5b:a7:ea:51:
58:01:d0:5d:d2:c9:72:be:9a:ec:6e:86:dd:cb:da:d5:e8:dd:
42:c7:1a:11:03:f7:df:82:03:f1:6a:b6:c3:6c:70:f7:df:d0:
33:04:dd:2a:69:5e:93:97:74:bd:61:f2:23:a7:63:5b:fe:16:
13:d6:71:1c:49:d1:9c:a1:76:6b:f5:38:82:ab:c1:a8:b5:f3:
a6:8a:64:6d:1b:55:6e:db:c6:d9:59:21:e6:1f:2a:dc:da:92:
91:1a:17:f9:ef:da:17:83:7a:15:69:e2:2e:18:7c:46:ab:fc:
a7:0c:dc:35:93:25:2e:83:77:d7:3f:4c:be:f3:8e:48:d8:fb:
61:de:2e:92:7a:27:6e:6f:b3:78:a9:a0:e0:7f:7f:ac:55:3f:
c7:05:1c:7a:49:26:7b:34:41:88:d8:08:ae:52:3f:ff:34:b2:
3f:53:84:ae:d1:8d:32:30:b8:47:7a:31:b4:80:f9:45:6d:e4:
bd:5f:d9:ac:df:86:c1:05:f3:a5:c8:bc:65:81:bd:0e:f5:66:
cf:b7:50:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:56 2024 by rpki-client on console-fra.rpki-client.org