Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/bR8FSRAlgJEYM4riqagIO8JUwl0.roa
File: bR8FSRAlgJEYM4riqagIO8JUwl0.roa (raw, json)
Hash identifier: jG0XTu1KPICFX/tdeIzmODqC0ig/hFiHsxwzTWbG4oQ=
Subject key identifier: 6D:1F:05:49:10:25:80:91:18:33:8A:E2:A9:A8:08:3B:C2:54:C2:5D
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 36DFF561
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/bR8FSRAlgJEYM4riqagIO8JUwl0.roa
Signing time: Sat 01 Jan 2022 11:04:46 +0000
ROA not before: Sat 01 Jan 2022 11:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 109.239.114.0/23 maxlen: 24
109.239.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920647009 (0x36dff561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Jan 1 11:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d1f05491025809118338ae2a9a8083bc254c25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:df:12:5f:6b:45:5f:86:2f:7c:d5:bc:76:cb:
4d:65:8c:08:0e:ac:50:c2:3d:c8:b1:9c:51:29:a7:
f9:47:c8:a0:c8:d0:57:b1:f2:82:8d:ff:10:2b:e3:
c8:4b:74:cc:70:c9:b4:67:21:0e:08:05:e2:bf:99:
bb:ed:05:04:44:25:5d:8d:18:c7:67:21:f4:b8:ea:
23:74:5e:ea:b4:aa:1f:5c:85:2e:12:d8:b7:88:82:
47:20:f2:b7:f9:03:15:f1:43:95:6e:fb:94:68:67:
ac:7b:94:30:dc:00:54:3e:aa:93:0e:72:cb:45:ee:
45:bd:df:15:5e:52:e1:6e:66:99:06:5e:07:1d:fd:
24:ae:aa:37:0d:4e:53:4b:bc:d5:be:73:bd:21:63:
d5:f3:3c:d6:2d:9c:79:d0:d6:43:c6:77:93:32:30:
94:f5:ce:bc:84:1a:bb:d8:3b:b2:b1:14:cc:cd:5d:
0a:c4:71:90:43:c3:bc:de:77:15:15:ee:67:ae:df:
74:88:fe:df:c9:83:e6:9d:6b:a9:89:e5:2d:6a:c8:
30:17:44:d5:5d:7e:e5:d2:98:16:bf:ae:97:f0:b0:
7a:ab:c8:33:83:34:67:59:3c:c7:68:6a:97:75:c9:
02:63:ff:4a:a0:9d:e3:7e:54:7f:28:46:3a:1d:70:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1F:05:49:10:25:80:91:18:33:8A:E2:A9:A8:08:3B:C2:54:C2:5D
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/bR8FSRAlgJEYM4riqagIO8JUwl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.239.114.0/23
109.239.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:4b:96:ca:4f:c3:c4:1c:f7:a7:d8:e5:a2:2d:f5:ac:23:b2:
4d:3b:ac:47:9a:68:f7:c7:7b:8f:49:ce:51:52:81:94:0b:3f:
91:8a:53:41:5c:37:fc:e6:05:83:03:fc:c5:4c:e1:91:c3:18:
ed:cb:1f:fd:c0:e6:41:27:a4:d3:f0:26:9e:58:3b:e5:8f:f5:
df:27:a5:11:37:2e:be:f0:a9:b5:56:99:02:fd:e7:01:4d:83:
03:bb:91:f1:79:7e:04:51:c5:d3:44:60:3d:04:3e:99:45:b8:
0e:2a:ea:90:41:ce:88:89:fd:20:b3:bd:7c:ab:54:b1:9b:6b:
35:97:d5:79:dc:f0:a0:d4:0c:16:79:33:64:cd:84:92:58:be:
74:4d:48:82:5f:34:d6:0b:b4:08:36:64:ee:51:1b:c7:54:42:
b5:cf:d2:0c:78:b6:8b:02:78:3b:a6:ae:7f:fd:58:7d:2f:63:
2a:1c:d0:49:5b:18:63:3f:5e:d4:9e:ac:cb:7a:03:fd:dc:e2:
88:20:2a:5c:4d:0c:81:a3:d5:8a:f6:70:b1:ec:59:cf:2a:75:
f1:12:bb:9e:e3:0d:db:3a:d4:3b:70:7c:e0:e7:a2:95:9a:46:
70:f5:bd:8f:00:f2:44:7a:d6:3c:f8:15:a8:c4:48:f7:9f:99:
f0:c3:7f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:52 2024 by rpki-client on console-fra.rpki-client.org