Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Rszoq3_POCH2VDQySphNo9F9zcI.roa
File: Rszoq3_POCH2VDQySphNo9F9zcI.roa (raw, json)
Hash identifier: 7vH+qXEYcO0cNb3wckIAL59unuSMEucRfW6kDTJUhkY=
Subject key identifier: 46:CC:E8:AB:7F:CF:38:21:F6:54:34:32:4A:98:4D:A3:D1:7D:CD:C2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 096B1BD5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Rszoq3_POCH2VDQySphNo9F9zcI.roa
Signing time: Thu 02 Jun 2022 09:41:21 +0000
ROA not before: Thu 02 Jun 2022 09:41:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.69.18.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.36.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
212.69.11.0/24 maxlen: 24
109.233.184.0/23 maxlen: 24
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158014421 (0x96b1bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 2 09:41:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46cce8ab7fcf3821f65434324a984da3d17dcdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:62:49:27:d0:c1:2c:23:81:66:87:54:54:
25:4c:b6:3e:cc:18:86:f2:c6:bd:83:07:f0:77:1d:
1a:b2:82:5f:08:25:a0:02:f5:57:76:70:3a:f7:25:
2a:ac:6b:84:be:d2:bf:1b:49:18:b0:ad:e1:01:f8:
f5:d6:5f:ba:91:d6:dc:59:93:da:69:3d:15:42:f5:
84:a3:1d:bf:8a:37:e6:d0:ea:3c:10:ef:d9:75:3a:
8f:0c:1d:83:94:02:a4:ac:bf:2a:79:4e:b4:f9:15:
77:81:83:58:0a:a1:35:cb:f3:d8:15:2c:75:23:c6:
2d:11:e4:b5:95:19:40:a2:33:95:12:61:ca:91:16:
77:e9:b3:09:4b:ab:4a:e4:47:02:f5:87:88:fb:b5:
79:c8:49:25:b7:b5:40:a4:0c:2c:67:52:ae:fa:6e:
f6:71:76:cd:84:3b:cf:d0:11:e0:c6:e9:07:2f:41:
78:f0:8f:0c:fa:93:55:73:e7:52:65:30:3c:01:bb:
51:6b:05:06:8b:27:0c:b4:bc:f3:ea:24:a1:99:90:
94:14:45:2f:a5:cb:96:aa:b2:f2:f0:9f:5c:44:f2:
ad:61:8e:c6:ed:38:c3:7b:5f:98:7a:2b:fd:dd:98:
e7:ce:41:74:f3:bf:c0:fc:60:47:3b:5f:5c:e3:f8:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CC:E8:AB:7F:CF:38:21:F6:54:34:32:4A:98:4D:A3:D1:7D:CD:C2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Rszoq3_POCH2VDQySphNo9F9zcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.121.33.0-109.121.36.255
109.121.38.0/24
109.121.40.0/22
109.121.45.0-109.121.46.255
109.233.184.0/23
178.253.237.0/24
212.69.10.0/23
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0f:5e:69:ec:ef:f0:cd:8f:23:25:ea:46:4a:2e:b4:e8:b7:
8a:5a:4d:7b:3c:8b:8a:9f:53:23:5f:83:a0:f4:f2:e0:44:9f:
f4:61:e1:19:93:bc:bb:f3:b5:b1:1f:cf:6e:3b:22:1b:ab:54:
c2:11:93:4e:39:a1:85:9e:bf:68:b4:74:05:a7:15:1d:1e:4b:
40:fb:91:f0:7a:ad:9d:fe:de:ba:c2:05:42:74:b7:c9:b9:65:
23:8d:8a:90:a9:1c:05:4b:ef:7b:cc:5f:0c:bd:e1:50:e1:43:
a5:4c:9e:0c:d4:0b:fb:10:b9:16:ff:19:9c:c3:4b:bb:7b:95:
15:ba:f5:e3:14:91:a9:7a:7b:43:84:da:be:14:cd:bd:91:1e:
7d:06:04:70:e3:3b:86:75:bc:ec:cf:9e:e7:4b:60:f0:55:aa:
36:db:84:fc:02:42:bc:9a:a1:73:7f:d1:09:ac:67:6e:6c:ab:
84:cf:de:03:52:4b:dd:a7:6c:81:16:40:48:2a:7c:ac:45:ff:
0a:36:4d:45:16:0d:76:d4:af:87:8a:a3:28:56:3e:a8:fc:52:
07:6f:3b:6e:18:c9:0a:0a:a4:f7:ae:36:be:35:14:b0:63:59:
0d:e4:d0:d7:46:8e:ec:83:83:87:4f:73:94:88:64:a8:ee:de:
cd:e2:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org