Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/n9tTOEO5d257ap52eKoVl9RIJBE.roa
File: n9tTOEO5d257ap52eKoVl9RIJBE.roa (raw, json)
Hash identifier: s/Th1Ocp0LDevvvPIxmNyW4Ow8YAhCJ2S2vefOdaq7E=
Subject key identifier: 9F:DB:53:38:43:B9:77:6E:7B:6A:9E:76:78:AA:15:97:D4:48:24:11
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01835FE79E424F350AB0CF7A14BEE8D61364
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/n9tTOEO5d257ap52eKoVl9RIJBE.roa
Signing time: Wed 21 Sep 2022 11:55:58 +0000
ROA not before: Wed 21 Sep 2022 11:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200746
IP address blocks: 185.109.220.0/24 maxlen: 24
2a0b:8f80:300::/48 maxlen: 48
2a0b:8f80:200::/48 maxlen: 48
2a0b:8f80:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:e7:9e:42:4f:35:0a:b0:cf:7a:14:be:e8:d6:13:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Sep 21 11:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fdb533843b9776e7b6a9e7678aa1597d4482411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:06:97:ae:8a:d7:24:2b:f4:b0:da:03:00:
75:b9:fe:02:21:5b:41:10:ae:db:e1:99:63:e9:ca:
b9:f1:e3:23:1b:7c:8c:96:66:b7:5d:fe:84:64:4c:
67:15:c6:e6:3e:32:c0:4c:bb:d3:2b:4b:ca:f3:6d:
3a:64:d0:09:6c:f0:06:23:ef:26:78:0d:53:13:76:
d3:d0:bf:9a:cb:92:98:7e:c0:ee:48:be:58:84:7f:
d7:5f:21:b8:57:96:a3:52:b0:db:a7:29:5c:21:12:
5c:d8:23:d9:67:fc:7e:ea:c2:dc:fc:07:a3:26:67:
73:8b:a1:44:9f:86:2f:8c:f9:27:f4:fe:51:63:5d:
83:de:fc:05:e5:a8:28:17:0b:51:bd:12:52:61:90:
37:e4:8f:46:ba:81:83:2f:ed:87:37:f2:45:d7:ed:
5a:f0:e2:27:de:e4:51:74:eb:36:94:25:17:ba:8e:
80:a4:61:8c:95:f5:01:aa:e8:c3:ee:4d:43:19:a7:
24:ab:0d:f7:d2:f1:5c:c4:eb:91:09:03:07:2b:34:
cf:90:41:64:76:cf:c2:18:07:fa:3e:c4:d0:57:15:
bd:a5:36:be:25:6c:8f:60:47:ed:c0:c2:7f:52:40:
49:a0:0b:3b:65:2e:3a:e0:1c:29:c7:39:f8:de:12:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:53:38:43:B9:77:6E:7B:6A:9E:76:78:AA:15:97:D4:48:24:11
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/n9tTOEO5d257ap52eKoVl9RIJBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.220.0/24
IPv6:
2a0b:8f80:1::/48
2a0b:8f80:200::/48
2a0b:8f80:300::/48
Signature Algorithm: sha256WithRSAEncryption
3f:c4:86:17:ad:01:1a:d9:82:c6:62:41:ef:0e:f9:94:e3:83:
71:35:bf:30:50:5d:46:17:37:32:37:3d:92:37:f4:93:8b:52:
f2:ca:d8:59:f3:38:e6:ca:8c:90:f9:da:ca:c3:c7:a7:2e:a3:
d1:45:9d:75:45:df:8e:76:d4:c6:06:70:1b:b8:14:55:70:ce:
f9:12:82:51:17:d3:cf:c0:6f:57:8e:df:bf:4e:01:25:2b:0f:
23:91:38:3c:cd:e8:f7:22:1f:8a:23:12:81:b8:f6:03:80:87:
40:a1:81:44:ed:28:24:4f:44:2e:19:e6:6a:df:86:c3:b5:9b:
90:29:9e:bb:cc:ab:d0:7f:51:1e:d3:73:5f:38:9c:1b:48:93:
cd:24:0e:6c:ed:93:86:37:23:8c:fa:a7:8e:18:29:54:41:2d:
dd:5d:45:24:ce:e5:03:49:74:8b:b9:6d:f2:4c:b7:5e:4c:3f:
48:d7:7e:da:08:f2:75:75:15:89:5c:8d:49:bd:99:f9:0a:36:
f1:cb:f1:db:15:b7:08:88:12:eb:ca:db:6e:9e:09:0b:13:36:
f3:85:85:02:34:32:c3:3e:e6:ae:6f:31:ab:03:05:61:f9:06:
72:ab:38:72:5a:0b:16:2a:13:3b:ec:7e:2a:a5:55:59:da:10:
ff:8f:2e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:15 2024 by rpki-client on console-fra.rpki-client.org