Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XyBo3DQ59QIAOJy3mrEiWLBJLvk.roa
File: XyBo3DQ59QIAOJy3mrEiWLBJLvk.roa (raw, json)
Hash identifier: ZmgFCy+Y1TCWq8c3Yi9vQabYyjqV+SHcDYYOK+j3jl4=
Subject key identifier: 5F:20:68:DC:34:39:F5:02:00:38:9C:B7:9A:B1:22:58:B0:49:2E:F9
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0999AED6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XyBo3DQ59QIAOJy3mrEiWLBJLvk.roa
Signing time: Sun 19 Jun 2022 06:25:06 +0000
ROA not before: Sun 19 Jun 2022 06:25:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.38.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.32.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161066710 (0x999aed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 19 06:25:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f2068dc3439f50200389cb79ab12258b0492ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:c5:58:ab:d0:09:3d:e3:e0:f2:39:29:cf:
7a:1c:a8:2a:73:1f:12:2c:70:2c:cd:f9:e1:00:e6:
ac:00:2c:88:a4:76:79:ca:1d:85:f1:3d:41:61:f7:
ab:73:bd:8f:74:96:69:01:19:0e:83:0c:d9:0a:d0:
5c:15:c7:c1:ca:5b:1c:44:db:b2:fb:da:c9:22:a3:
f1:42:93:1a:e6:e9:ad:1b:82:d6:19:8d:9b:4e:74:
0d:5b:91:68:cf:b2:31:bf:f4:54:0a:ba:d9:ce:9a:
c4:0a:f7:50:df:6f:8d:b7:26:99:c5:2a:bf:96:f3:
2b:6c:ff:1e:8c:da:1f:ee:28:43:cd:1e:a6:0e:d9:
96:1f:fb:eb:36:8e:27:72:90:4c:54:ee:5d:71:38:
f8:61:2d:e6:f5:2f:26:46:4d:c6:6c:6b:e6:72:61:
21:c0:33:70:63:cf:22:11:69:c9:28:33:d2:c4:92:
b1:ca:ff:af:ce:2e:a9:6b:25:ba:7f:33:a0:cf:8e:
55:a3:72:3e:11:37:a0:b7:77:b8:5e:fa:67:21:c2:
1b:e1:ba:bc:7e:21:f8:3b:29:09:3a:6d:40:98:02:
ec:8e:ab:56:b7:ca:17:12:f8:cb:ce:39:02:d2:a2:
26:1b:37:63:ee:86:d4:0c:9a:4e:9d:41:a3:ba:f4:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:68:DC:34:39:F5:02:00:38:9C:B7:9A:B1:22:58:B0:49:2E:F9
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XyBo3DQ59QIAOJy3mrEiWLBJLvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
109.121.32.0/24
109.121.34.0/23
109.121.38.0/24
109.121.40.0/23
109.121.43.0-109.121.44.255
109.121.46.0/24
109.233.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:d8:f1:a6:c1:15:53:aa:c9:39:bc:6e:bb:1e:8d:26:c7:ea:
41:cd:c8:74:b2:06:bf:11:73:50:fe:81:4e:29:1f:20:50:6a:
4b:31:d2:6d:f0:6d:35:8e:c1:ca:49:f1:09:74:4c:10:a1:19:
9c:37:06:00:e5:a7:36:e6:46:ed:1b:5b:d5:52:12:ac:b5:e7:
a4:fd:9d:ef:fa:8a:bb:0d:26:2d:95:c2:1c:56:62:76:ba:64:
2c:0a:8a:ba:43:64:48:12:b5:93:92:5c:0a:e0:aa:21:c7:10:
10:e0:5c:76:25:65:f0:16:9f:34:90:49:c0:c2:ac:21:ba:6e:
df:bf:4a:f8:5b:3c:fb:fd:3f:73:08:bf:b1:22:59:6f:6a:3e:
2d:37:0d:1f:3d:4d:3c:55:b5:b1:d3:76:c8:6b:f1:42:7c:6b:
83:53:77:9e:7d:5b:93:c2:e7:24:b9:d3:69:45:fc:87:11:8d:
7c:a8:f2:9b:3d:ca:f3:af:22:69:78:92:b4:9c:14:b3:67:c7:
33:2f:64:1c:78:34:8a:14:d9:e8:23:74:f3:7c:39:63:91:0b:
a7:b1:6e:7f:34:86:cd:aa:b6:bf:17:6d:fd:84:17:8f:c1:7d:
85:e7:43:71:d6:87:ff:57:0f:81:a8:e8:0f:a6:a3:01:5f:17:
93:4a:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org