Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/m6zWk0cXTk4F4DEcmzPupfa2ysA.roa
File: m6zWk0cXTk4F4DEcmzPupfa2ysA.roa (raw, json)
Hash identifier: UHDmyAfMkY+nifffiDSZ1fP/llDNZGpwsnzCEuIyUJ0=
Subject key identifier: 9B:AC:D6:93:47:17:4E:4E:05:E0:31:1C:9B:33:EE:A5:F6:B6:CA:C0
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09A7E951
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/m6zWk0cXTk4F4DEcmzPupfa2ysA.roa
Signing time: Wed 22 Jun 2022 07:45:44 +0000
ROA not before: Wed 22 Jun 2022 07:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.121.33.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
212.69.11.0/24 maxlen: 24
109.233.184.0/23 maxlen: 24
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161999185 (0x9a7e951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 22 07:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bacd69347174e4e05e0311c9b33eea5f6b6cac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:52:e5:c7:1b:e0:4e:be:80:a5:2d:50:25:
5a:fc:74:42:94:42:3c:a7:7d:27:23:e9:72:99:e3:
2e:59:4d:78:7a:62:e5:64:61:a9:9f:2c:f8:2c:57:
fa:04:e9:fb:24:d3:4a:56:db:8b:f6:98:e0:46:45:
63:a6:cd:55:03:2f:2c:e0:e0:a6:62:27:96:af:fd:
2a:86:b0:c2:d3:56:0d:48:12:6d:a4:04:10:d1:53:
d2:ce:d3:59:8b:91:0b:f5:a1:9f:bb:f1:3a:9c:4d:
d7:f8:15:c7:fd:da:93:40:34:f6:f9:92:35:f1:9f:
26:9a:ef:3b:98:13:2d:71:5f:46:e4:15:51:6d:a7:
9f:79:2b:cf:10:e0:5c:e9:e8:54:db:d9:6d:42:a5:
77:3b:7f:18:ec:4a:1a:b2:22:d3:c0:b8:fa:b2:f1:
ca:66:ea:c7:46:e8:c2:25:ea:3b:2e:e1:3e:d4:fc:
34:51:de:80:02:5c:ee:9b:7d:1f:d3:8a:17:98:0d:
fc:83:df:08:03:24:2f:fc:4e:29:da:88:25:13:66:
15:49:2e:7f:25:3a:98:64:c2:7f:eb:4d:75:81:dd:
2f:74:02:78:38:b9:f4:d2:df:5c:88:f9:73:36:50:
03:17:59:39:25:a4:f7:18:81:70:48:53:c1:17:2e:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:D6:93:47:17:4E:4E:05:E0:31:1C:9B:33:EE:A5:F6:B6:CA:C0
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/m6zWk0cXTk4F4DEcmzPupfa2ysA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.121.33.0/24
109.121.42.0/24
109.121.45.0/24
109.233.184.0/23
178.253.237.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
05:6b:a7:6c:4b:6a:68:64:ae:b6:21:74:5f:d1:19:eb:4d:ed:
2a:07:6f:ea:62:0f:b5:81:a9:97:b4:ab:44:bc:86:48:67:e3:
22:d9:e3:12:70:0c:43:39:0d:de:37:be:bf:00:88:05:87:96:
bf:93:ac:d7:33:8f:4f:f4:b9:37:be:e8:18:24:24:85:47:f8:
17:3a:1e:f6:b2:8d:16:2f:ff:cb:c0:a3:ea:23:41:39:86:59:
92:14:b1:fb:c1:fd:75:53:23:94:fb:a4:68:ae:29:48:b6:6d:
13:6b:05:06:0e:6c:a2:a8:65:74:24:93:04:3c:ad:2d:cf:27:
cf:54:af:0d:9c:af:d8:7f:bb:f4:55:29:99:84:8b:01:e0:7b:
ec:9b:ad:58:fd:1c:77:b3:2b:da:d3:db:6d:01:e8:08:37:11:
f2:21:b8:8b:3c:e5:ff:9c:34:d3:d5:26:c3:89:19:44:95:e3:
42:57:8e:ee:3d:03:3f:13:4e:38:9c:90:f8:44:0c:5b:06:a4:
dd:59:76:0b:05:10:09:5d:f1:9c:b4:2f:d2:19:2a:9f:ab:1d:
56:30:3e:f8:10:13:cd:bb:7c:39:07:ed:b0:67:9a:22:43:71:
56:7b:f2:68:e5:c5:06:82:51:69:14:a7:2f:9c:24:2b:96:65:
1c:a7:3b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org