Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/IvNHNWYE8fPS0IephGPuTd8npgk.roa
File: IvNHNWYE8fPS0IephGPuTd8npgk.roa (raw, json)
Hash identifier: yymGlcfLIEJ3eM7XgRP9lVjAzNJVS+iuQcLGE7QKpDw=
Subject key identifier: 22:F3:47:35:66:04:F1:F3:D2:D0:87:A9:84:63:EE:4D:DF:27:A6:09
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08E1C6B8
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/IvNHNWYE8fPS0IephGPuTd8npgk.roa
Signing time: Mon 11 Apr 2022 16:30:22 +0000
ROA not before: Mon 11 Apr 2022 16:30:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 212.69.1.0/24 maxlen: 24
212.69.0.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149014200 (0x8e1c6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 11 16:30:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22f347356604f1f3d2d087a98463ee4ddf27a609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:6a:2d:80:61:dc:0c:e2:fd:22:15:1b:02:
98:87:30:2d:a6:77:34:bb:93:73:c5:1c:d5:5c:00:
b2:ef:c9:cc:23:c9:28:a7:18:de:eb:b7:82:9e:43:
d0:5e:02:19:a4:2b:0f:3b:ee:61:55:01:e9:52:1c:
f9:b7:ad:2d:e9:00:22:68:33:14:9e:0d:05:6e:ff:
b4:24:22:2e:ab:40:4b:82:85:cc:a4:18:47:5f:79:
72:2a:2b:13:ca:54:1e:ac:8e:ee:f0:a8:70:64:a0:
22:c5:42:3f:a3:61:59:2c:0f:f8:e9:55:2e:37:86:
26:f9:35:14:3b:27:60:28:a8:00:a1:47:b9:69:a4:
55:f1:99:3e:a7:2e:67:78:b1:a2:17:43:05:35:09:
84:df:ac:6d:39:90:ce:e7:ea:7f:77:27:9e:09:54:
e2:76:96:41:e0:88:5e:4b:fd:76:ae:13:6f:52:22:
7a:32:cb:6b:b9:8a:ae:91:7e:21:29:bf:c3:c1:9e:
95:2f:4b:26:2e:65:74:cf:b6:5e:fb:1d:2d:66:05:
9e:ed:38:61:a1:f9:d4:f7:ee:0b:db:ed:e4:30:ea:
ce:3a:1d:e7:2f:dc:12:96:a2:55:96:7d:f4:bd:93:
34:af:8d:a1:3a:91:0b:d5:59:4d:57:cc:c9:4d:23:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:47:35:66:04:F1:F3:D2:D0:87:A9:84:63:EE:4D:DF:27:A6:09
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/IvNHNWYE8fPS0IephGPuTd8npgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.189.0/24
212.69.0.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:81:b5:8a:a5:93:b2:2b:11:6e:91:5e:2c:f9:16:ac:79:3d:
25:68:30:cb:c9:e5:e4:2b:3c:86:00:58:8c:d1:0d:95:d7:ea:
79:88:09:53:b8:50:4a:92:d1:eb:bb:76:09:2e:c7:ee:b4:69:
52:58:4f:9d:c5:7b:eb:6e:06:5b:66:43:cd:0f:4f:ab:b9:4b:
4d:b2:a8:02:31:09:bf:e0:2d:13:79:94:82:64:ac:cc:45:8f:
a3:ee:65:e1:2f:1c:3f:44:8d:b7:55:1e:29:ca:bc:cd:5a:c4:
40:0a:0e:8d:1b:35:60:37:29:68:5d:f6:1d:aa:63:8e:4d:75:
19:84:5b:69:5a:33:90:40:88:ee:9a:ac:21:95:58:46:5f:c8:
31:23:3d:f8:6b:7d:87:e5:46:1c:25:e8:cb:e8:f2:f0:ee:35:
7d:c3:d2:99:9c:f6:c7:f8:f2:d0:a6:4a:fb:14:99:a0:83:94:
38:e6:eb:a7:70:3c:ac:e6:61:d6:20:50:2a:b2:39:cc:76:7d:
e5:2d:3e:c4:5d:9d:dc:01:61:bb:6f:fc:ee:72:94:30:3d:0a:
e6:62:ff:09:3e:8a:43:f5:9c:06:4c:76:ea:a4:43:86:c4:04:
97:64:14:68:91:d2:93:40:96:57:93:42:a0:16:c3:e5:8d:49:
4f:63:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org