Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6SjMWOrtgMHC1c9t7HoFmMtzMxY.roa
File: 6SjMWOrtgMHC1c9t7HoFmMtzMxY.roa (raw, json)
Hash identifier: 48F9/EykIPUHeuf72hj6LapfQfurMCGb7Fdo6VLr5Gk=
Subject key identifier: E9:28:CC:58:EA:ED:80:C1:C2:D5:CF:6D:EC:7A:05:98:CB:73:33:16
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 098EB438
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6SjMWOrtgMHC1c9t7HoFmMtzMxY.roa
Signing time: Wed 15 Jun 2022 10:10:44 +0000
ROA not before: Wed 15 Jun 2022 10:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.121.36.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
212.69.11.0/24 maxlen: 24
109.233.184.0/23 maxlen: 24
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160347192 (0x98eb438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 15 10:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e928cc58eaed80c1c2d5cf6dec7a0598cb733316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:fc:27:fc:7e:75:51:47:0c:12:21:be:3e:
35:1e:8f:73:2f:a5:04:90:c6:c0:57:92:23:06:c1:
5f:f5:a9:5c:00:9b:73:40:8b:7c:f9:39:e0:3c:12:
96:a5:7c:15:42:34:54:ee:18:9b:a1:4b:d1:d2:4c:
d6:16:e4:c2:14:99:b1:d2:89:79:3d:66:08:2e:d2:
0b:d2:17:d5:41:d2:bb:9e:50:26:53:9f:93:78:b2:
23:8f:33:e9:38:e0:4c:94:91:30:78:26:42:cb:64:
37:a6:51:f8:94:5d:ea:5a:cf:70:d1:c6:86:81:da:
5e:7d:f0:d2:a2:1b:d5:0d:17:d4:75:88:f5:9b:7b:
9d:ac:7b:68:41:f3:05:66:0d:b1:3e:e4:7c:ac:23:
b8:35:45:43:94:c4:0e:bf:9f:3e:86:d8:27:f9:41:
4f:a1:63:9a:8f:25:c8:bc:27:6e:ce:4f:aa:bc:89:
87:e8:08:1b:b4:6b:50:bf:5b:bc:22:77:b7:71:24:
27:7e:21:80:99:d7:ce:4d:23:1e:be:4a:04:26:42:
7f:a1:3a:a1:21:bb:e7:72:f7:53:6c:e2:cb:b4:d8:
a7:0f:24:c0:f7:a0:90:a0:a8:e8:91:d6:97:a3:cb:
75:a4:5c:e7:e5:e0:cb:11:c0:8b:2a:da:f1:70:f3:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:28:CC:58:EA:ED:80:C1:C2:D5:CF:6D:EC:7A:05:98:CB:73:33:16
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6SjMWOrtgMHC1c9t7HoFmMtzMxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.121.33.0/24
109.121.35.0-109.121.36.255
109.121.40.0-109.121.42.255
109.121.45.0/24
109.233.184.0/23
178.253.237.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:a2:16:c1:d6:db:9f:c2:3c:4d:fc:44:d0:df:5e:2c:6f:90:
ce:e4:ce:71:17:2b:d4:e3:f0:a7:f6:9b:4e:5d:fd:24:59:f4:
50:f5:71:07:99:be:90:f9:8e:f3:7b:01:e9:b7:82:0d:7a:95:
86:d2:45:08:9e:00:d6:33:8b:ba:6c:ba:be:6a:27:84:02:7b:
49:a7:9b:35:0f:ec:d9:d1:a9:58:de:03:4f:1e:41:1f:7d:04:
f0:78:4a:f5:a1:3d:c1:97:e4:23:5a:8b:cc:bc:d5:e1:68:4f:
f1:b1:0d:58:6c:f4:ce:c9:47:e8:1a:1a:40:0a:2a:95:d2:56:
99:37:52:1d:aa:ac:63:c3:6c:8a:20:3c:af:5d:fd:e6:94:4e:
28:00:0b:bf:0e:48:80:c4:d3:a3:42:ff:4a:be:95:71:c3:3c:
6a:c7:26:73:46:d9:53:34:d0:4e:6b:60:9d:18:a6:ee:88:f8:
08:c2:4d:f9:fa:10:78:01:a2:41:b6:f8:9f:d4:ce:d8:51:4f:
b9:75:48:4b:e0:de:22:ed:ad:95:b6:f6:d9:e3:88:1a:00:c3:
35:3a:0e:83:c6:d6:cb:4c:b7:f5:9e:33:43:f9:ee:c5:b4:a5:
b4:71:5d:7b:04:87:b6:d0:4e:44:bd:91:f0:94:5a:5a:0e:da:
bf:d9:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org