Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/o7ugdBd9kILxIUes38w1abmu0EI.roa
File: o7ugdBd9kILxIUes38w1abmu0EI.roa (raw, json)
Hash identifier: 7+rRQZeQKtdN7f1BnJ/N9HxWYxi+jTswGUvV9Hn7eno=
Subject key identifier: A3:BB:A0:74:17:7D:90:82:F1:21:47:AC:DF:CC:35:69:B9:AE:D0:42
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0184D22D632CE7BFE4BA1BF59BAC97CF18F4
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/o7ugdBd9kILxIUes38w1abmu0EI.roa
Signing time: Fri 02 Dec 2022 09:31:40 +0000
ROA not before: Fri 02 Dec 2022 09:31:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 109.111.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:2d:63:2c:e7:bf:e4:ba:1b:f5:9b:ac:97:cf:18:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 2 09:31:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3bba074177d9082f12147acdfcc3569b9aed042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8e:36:24:da:cf:b8:d8:fe:ea:8f:83:a0:bb:
76:15:a8:1b:65:63:8b:cb:1e:54:ae:51:71:89:27:
51:b8:e7:fd:04:11:02:0f:af:a3:50:a3:f5:77:97:
dc:f4:14:35:ba:5d:de:be:56:ae:6f:bd:1b:01:b3:
1c:c2:83:bc:b2:9a:57:ad:a6:62:e6:19:d2:d0:93:
53:c2:f5:a8:4f:de:d3:47:a1:3d:c5:3c:4c:66:7f:
06:4f:f0:ff:90:fb:7e:06:9f:87:d7:17:5b:6d:dd:
e1:61:d9:93:62:db:1d:ad:b0:c1:0a:82:a2:ef:11:
80:0a:6a:8b:ba:6b:2b:5a:7e:5d:a9:63:e4:01:0f:
3d:7f:72:73:fa:f6:fd:df:6d:b9:c4:7e:e6:3c:16:
5e:fa:01:3f:b8:6e:1a:83:a6:d5:45:f1:2d:24:27:
45:aa:6f:b0:01:1d:d9:95:dc:1b:6c:4e:2e:4d:3b:
db:fe:bc:40:7d:29:ca:05:4a:07:63:63:ce:eb:96:
db:94:08:c5:2a:aa:ae:fb:de:37:c5:93:8c:c4:b2:
11:2f:84:cd:7c:17:44:5b:e4:2e:00:28:8b:ac:4f:
e3:be:0c:f9:ec:a7:24:65:02:3b:dc:e5:ac:2e:1a:
17:76:9c:a0:1c:82:e8:fc:b8:2a:d3:dd:58:83:7f:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BB:A0:74:17:7D:90:82:F1:21:47:AC:DF:CC:35:69:B9:AE:D0:42
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/o7ugdBd9kILxIUes38w1abmu0EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.52.0/22
Signature Algorithm: sha256WithRSAEncryption
16:25:b0:63:3b:a8:5f:95:fd:52:b6:8c:80:21:24:3d:61:be:
8b:b5:d3:c6:8d:0d:15:b7:51:8d:87:0f:59:2e:6f:0d:07:2f:
bb:2b:b4:aa:bb:b5:54:a6:d9:1c:6e:81:47:7a:9c:a0:c1:e1:
86:d7:70:3a:7b:62:1b:af:4e:a8:da:ee:02:45:97:02:7f:44:
35:33:83:e6:03:ed:00:83:b0:32:1c:4b:37:ea:cd:a4:57:c7:
15:6f:3e:c9:eb:da:ec:7c:62:97:2a:ab:23:4a:ff:3b:8b:4c:
3e:51:66:03:93:4c:aa:f7:f9:58:55:b6:7f:83:92:95:7c:e8:
92:5a:56:a4:56:9c:f2:ee:99:43:48:90:f8:fd:eb:b5:8f:15:
f1:97:43:e8:bd:06:ac:94:77:ca:8c:1e:94:9d:14:76:0d:8a:
4d:b4:be:a3:1d:9e:e5:dc:60:42:c1:3c:0b:4c:91:1b:bc:79:
0d:98:91:c1:3e:0b:5d:dd:dd:88:40:fd:c6:75:44:5e:86:d9:
f5:01:b7:aa:df:a6:57:e3:12:99:66:c8:dc:e8:dc:e9:ba:5e:
56:5e:5c:91:1a:2b:6b:cc:5a:b4:6a:48:e9:3c:17:7a:88:31:
35:bd:8b:7a:38:1d:d1:3f:16:6f:ea:50:11:e3:df:d3:45:dc:
ef:43:48:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:05 2024 by rpki-client on console-fra.rpki-client.org