Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MJzEZwcp9XH43esb2Iyo8uOro7Q.roa
File: MJzEZwcp9XH43esb2Iyo8uOro7Q.roa (raw, json)
Hash identifier: QEyIVqde6Dm0yuXnxZ6Auv9j1mJ5JPvby3U3zR+wtEs=
Subject key identifier: 30:9C:C4:67:07:29:F5:71:F8:DD:EB:1B:D8:8C:A8:F2:E3:AB:A3:B4
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 089ABB95
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MJzEZwcp9XH43esb2Iyo8uOro7Q.roa
Signing time: Mon 28 Mar 2022 10:22:39 +0000
ROA not before: Mon 28 Mar 2022 10:22:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 109.121.37.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144358293 (0x89abb95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 28 10:22:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=309cc4670729f571f8ddeb1bd88ca8f2e3aba3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:82:f0:96:57:5a:9c:97:d5:54:7d:ca:fa:
1a:5d:cf:55:22:07:ab:b2:82:72:91:14:14:4f:e5:
b3:94:4c:f6:a7:71:6d:a9:4d:27:a5:48:d9:d3:b7:
a9:a7:42:3b:3f:20:0f:de:fe:4d:a4:0f:e4:0c:f6:
ab:42:45:f0:7d:05:ea:33:ee:e7:bb:33:39:4e:e7:
35:73:63:85:3d:6c:b8:7d:9f:3f:b5:52:a1:8c:30:
a9:bb:e3:6b:48:9c:36:d0:c1:bc:6c:e7:6b:8d:85:
b4:4a:2e:45:e9:d0:ad:33:e4:41:7b:9c:c8:91:88:
c7:44:43:a3:62:eb:ef:c2:f3:35:6f:1e:a4:48:42:
3a:f5:d9:79:63:61:76:21:79:55:8d:cc:7c:b9:90:
44:7c:0b:7e:70:ac:5a:6f:c5:eb:87:19:aa:31:bf:
e2:9b:b2:0d:43:56:9c:bf:1a:0f:f4:b9:a1:8b:d3:
dc:9b:d4:39:45:0c:e9:cc:0f:fb:8e:91:60:75:4b:
8d:8b:4b:5d:ff:2e:83:ca:88:68:dd:ed:59:a6:91:
ef:df:81:52:80:12:66:2b:92:d3:d9:ec:9d:55:7f:
bc:3c:de:a2:58:b2:f3:88:87:7f:96:43:fe:41:9e:
7a:4a:c1:42:3f:a4:ba:7f:93:f3:4c:e4:a6:81:ca:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:C4:67:07:29:F5:71:F8:DD:EB:1B:D8:8C:A8:F2:E3:AB:A3:B4
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MJzEZwcp9XH43esb2Iyo8uOro7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.37.0/24
109.121.39.0/24
109.121.47.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b5:b9:b6:aa:fe:3e:ab:e2:03:d1:1c:0c:83:15:ee:29:0b:
1f:b7:d7:96:4f:2e:16:00:0c:29:f8:89:9d:3a:00:4e:96:be:
00:f0:13:12:96:9e:04:f6:dc:ad:09:68:59:95:b4:1a:16:e5:
76:5c:44:c4:70:80:6c:68:97:b0:d9:8e:34:5c:c5:0b:4c:5d:
6c:aa:d3:9f:60:75:31:bc:dc:c9:01:cd:a5:e3:4f:74:fc:f7:
5e:7a:b0:02:13:8b:08:47:3f:0f:f4:35:0f:e6:f8:24:a6:08:
d3:7b:e1:1c:70:20:2b:98:ac:e3:99:22:67:41:1f:95:90:bf:
d0:c8:57:27:e7:1d:65:fa:bd:10:fe:bf:55:d0:71:2e:c1:b1:
19:1e:57:2c:21:e2:63:bd:be:7f:b0:41:1a:53:0a:0a:9f:c8:
8b:8d:70:48:4e:12:3e:7b:09:0c:9b:6a:de:1d:38:bc:a2:f9:
ca:b3:65:e7:30:58:58:85:4c:e6:e0:d7:f5:80:bf:57:4f:61:
17:18:b8:96:85:0d:d9:5d:08:fd:53:f4:d2:82:32:98:b6:47:
83:83:28:01:c8:3a:9c:6f:31:1b:21:d1:91:ca:f0:6a:8d:8f:
29:ff:41:0e:f0:b9:7d:fc:1a:f6:f9:29:67:e3:93:fd:4e:ae:
27:0c:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org