Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WRx0FsauivRF1EzRHWzHTKqNgwA.roa
File: WRx0FsauivRF1EzRHWzHTKqNgwA.roa (raw, json)
Hash identifier: 4ijiSgiEfmBiWQNA13bFYI/m0qaHJx9n+AGPcQ8U1MI=
Subject key identifier: 59:1C:74:16:C6:AE:8A:F4:45:D4:4C:D1:1D:6C:C7:4C:AA:8D:83:00
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09A42B05
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WRx0FsauivRF1EzRHWzHTKqNgwA.roa
Signing time: Tue 21 Jun 2022 11:47:44 +0000
ROA not before: Tue 21 Jun 2022 11:47:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.121.36.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
212.69.11.0/24 maxlen: 24
109.233.184.0/23 maxlen: 24
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161753861 (0x9a42b05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 21 11:47:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=591c7416c6ae8af445d44cd11d6cc74caa8d8300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e9:c1:7d:72:5c:2c:dc:5c:26:4c:86:59:45:
cb:04:4e:11:2b:0e:be:01:0b:ac:8b:cd:0d:ba:cb:
e5:1b:b0:f0:c3:32:72:39:aa:1d:3f:53:63:25:21:
8c:e3:56:10:e2:18:28:6d:ea:d7:35:a2:25:47:28:
91:a4:a0:a5:ec:65:ab:bd:4c:5f:ce:1c:76:8d:a9:
ba:c0:5f:33:4d:c4:d3:dc:e6:6c:20:c0:f8:62:3f:
97:ff:92:0d:ec:b9:45:69:05:84:48:b0:9b:c5:e0:
fc:e9:90:da:87:f2:3b:af:31:bd:24:a9:35:d4:ce:
3b:f5:35:31:ca:a5:9f:fe:6d:63:02:73:7f:95:e9:
19:05:7b:81:83:db:b2:88:db:06:36:36:35:05:b3:
25:a2:a8:44:87:15:6e:89:2e:c8:ff:85:b5:9b:54:
70:c7:8b:68:a6:61:8f:da:12:a6:2b:24:e1:db:fb:
b4:e4:18:21:21:73:64:67:30:0b:81:49:7b:69:aa:
19:82:c4:b4:c1:8e:81:ac:6b:99:34:c8:49:a3:e3:
22:6b:52:c9:c9:fb:f7:64:b1:70:4e:19:c9:bc:ad:
d7:ff:00:d9:ea:3b:74:da:6a:e3:f0:f0:0c:09:00:
f1:9d:0c:c5:3d:43:5d:f2:9b:09:68:35:15:76:14:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:74:16:C6:AE:8A:F4:45:D4:4C:D1:1D:6C:C7:4C:AA:8D:83:00
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WRx0FsauivRF1EzRHWzHTKqNgwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.121.33.0/24
109.121.35.0-109.121.36.255
109.121.40.0-109.121.42.255
109.121.45.0/24
109.233.184.0/23
178.253.237.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
44:1e:89:55:ff:7b:cc:75:e7:80:34:38:dc:e7:bc:37:4b:a8:
0d:11:63:c1:ba:5c:af:87:63:d5:e0:25:3e:85:f4:b3:9c:11:
96:91:9d:a9:03:b2:3a:5d:dc:b8:6c:46:38:07:45:1a:bb:6f:
08:d9:8c:e5:9b:ba:6c:3f:f6:be:15:be:d3:a3:60:6b:84:ef:
79:f2:73:18:63:28:93:0c:ba:a4:d9:cf:d8:c7:4e:e5:41:fb:
2d:21:97:11:10:e4:83:af:e3:b6:57:6a:cf:e3:4b:6b:ef:29:
5b:79:06:80:d6:d4:10:f9:1c:4b:61:05:5c:c9:76:9e:7b:16:
35:e4:4a:95:61:f1:a4:ea:1e:88:e4:44:cb:16:40:97:7f:81:
51:a3:2f:05:19:f6:f0:33:2c:d7:1e:32:e5:b2:a6:e9:9e:3d:
4e:ee:cf:00:c3:31:b3:64:6a:da:e9:3d:d4:de:a7:88:d9:0f:
47:f8:41:f6:a7:ee:9f:34:46:b3:95:42:e5:3e:ef:fb:ef:11:
7b:99:32:9f:43:8e:04:9d:82:b4:9d:70:a2:1c:e4:43:e9:91:
7d:b0:ff:63:b8:16:c7:54:8d:da:d2:d5:49:7a:ab:21:da:67:
38:62:4f:95:ff:66:2b:b1:e4:d3:72:3f:f3:8c:59:6f:de:90:
ff:c6:5a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org