Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Jyu0F5fEb1hMyd6BbX6FMkdwmro.roa
File: Jyu0F5fEb1hMyd6BbX6FMkdwmro.roa (raw, json)
Hash identifier: rb0tg3Psv+TaC4WMtFFiTmFeWX4oqijnajG5AmHqzK4=
Subject key identifier: 27:2B:B4:17:97:C4:6F:58:4C:C9:DE:81:6D:7E:85:32:47:70:9A:BA
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 094AE1D6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Jyu0F5fEb1hMyd6BbX6FMkdwmro.roa
Signing time: Fri 20 May 2022 05:29:30 +0000
ROA not before: Fri 20 May 2022 05:29:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.69.18.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.36.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
109.233.184.0/23 maxlen: 24
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155902422 (0x94ae1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 20 05:29:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=272bb41797c46f584cc9de816d7e853247709aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:0b:41:d1:60:f1:25:51:df:9c:fe:1f:2b:
0f:58:0c:c9:f0:a3:59:96:3c:b3:e4:1a:97:7b:a8:
cc:9a:a0:83:e9:5a:65:7f:c6:6f:0b:74:43:01:a8:
db:4f:e5:74:f9:1b:fd:c0:9b:ce:bc:33:00:fd:dd:
71:bd:2d:b1:1b:65:78:43:f6:11:d1:51:14:af:d8:
6d:43:55:11:96:17:d8:04:69:3e:d0:6d:c9:03:76:
f8:e4:b4:20:44:b5:87:c7:36:44:43:d7:a3:d9:5a:
ea:ae:46:b0:c5:2b:dd:79:22:96:3f:0f:82:6d:12:
e7:c9:f1:18:48:e8:86:af:b4:4a:c5:f6:da:a4:2d:
d5:c9:04:1a:a4:b6:57:be:19:45:60:b9:4a:68:be:
74:c8:16:71:29:cb:cd:79:46:df:64:ee:fa:eb:9c:
0d:ad:fc:fd:35:ca:e8:f8:cd:ae:31:ac:b7:77:81:
79:cd:64:d7:1d:e3:7d:8e:68:d1:47:12:7a:ee:f3:
73:5e:fd:5a:66:bb:94:e8:bf:28:81:ea:05:6f:24:
16:cf:35:f0:a4:51:72:4f:0a:ef:85:77:e5:0f:2b:
23:c9:ef:a1:5a:5e:22:b0:fd:ef:c5:d6:c6:f3:d0:
f6:f4:2d:b7:fa:9b:b0:b4:96:2e:41:d0:e4:07:40:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2B:B4:17:97:C4:6F:58:4C:C9:DE:81:6D:7E:85:32:47:70:9A:BA
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Jyu0F5fEb1hMyd6BbX6FMkdwmro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.121.33.0-109.121.36.255
109.121.38.0/24
109.121.40.0/22
109.121.45.0-109.121.46.255
109.233.184.0/23
178.253.237.0/24
212.69.11.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a3:45:0b:bb:17:b5:ef:7f:64:9f:f5:14:46:b0:4b:3c:8d:
09:a2:e8:8b:cc:d1:db:79:34:f2:77:7a:fb:49:51:eb:7c:a1:
45:8d:5d:26:e4:7c:d1:48:a1:0a:ca:dc:e8:a8:57:e9:f6:12:
17:84:13:d8:aa:75:06:ad:f3:ed:25:1b:b5:40:2f:d4:15:26:
bb:2a:2f:ba:ed:8b:0a:46:fa:02:cb:8f:a1:d7:f4:30:21:9c:
d4:8c:29:a5:41:d1:fc:0e:9f:04:ca:66:e0:da:9c:f6:ac:d6:
dc:15:d8:dd:ed:d7:3a:e4:cb:bf:f1:9c:c7:84:5a:5a:8d:37:
8b:29:13:ab:e2:9d:63:0c:3e:10:83:0b:58:eb:1f:c9:34:7e:
78:ad:4d:d5:b3:0a:55:cd:80:c5:80:ef:af:df:48:53:89:5c:
f0:7d:1d:c7:1f:79:1e:e3:30:94:d5:aa:ab:ae:cd:5b:ad:52:
e3:31:de:3b:3d:cd:d8:24:f8:8a:ac:c9:06:2d:4a:9f:24:d1:
cb:cc:36:43:4e:98:17:31:4a:dd:af:c3:52:43:94:a4:31:b6:
64:00:30:1e:e1:d7:00:16:c3:66:19:20:e8:32:ec:98:b4:f1:
df:1f:04:b6:80:eb:bc:aa:8b:89:c7:07:e2:34:81:f2:e4:af:
db:31:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org