Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/pXMrZlNlRv_QU-JF4b4_lR0bCxc.roa
File: pXMrZlNlRv_QU-JF4b4_lR0bCxc.roa (raw, json)
Hash identifier: 7AJ6m0O+O4TAABCRxtlgqqfCWihZOB34lzS8Txn3Z20=
Subject key identifier: A5:73:2B:66:53:65:46:FF:D0:53:E2:45:E1:BE:3F:95:1D:1B:0B:17
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 0185582423CAC5A0640412A4FB33ADFC86DB
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/pXMrZlNlRv_QU-JF4b4_lR0bCxc.roa
Signing time: Wed 28 Dec 2022 09:50:41 +0000
ROA not before: Wed 28 Dec 2022 09:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49872
IP address blocks: 109.122.193.0/24 maxlen: 24
109.122.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:24:23:ca:c5:a0:64:04:12:a4:fb:33:ad:fc:86:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Dec 28 09:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5732b66536546ffd053e245e1be3f951d1b0b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:dc:fb:cf:61:b6:7e:2d:3d:08:ff:35:55:
27:a7:fb:c4:2b:f2:59:3a:00:78:7f:81:3a:87:9b:
36:23:44:c5:77:b6:d9:b3:96:1f:5e:d9:73:3b:c9:
8f:5a:75:16:79:4b:d5:d9:8e:6b:3c:9b:07:81:c0:
db:ec:48:fd:ed:2d:0c:af:3f:22:50:95:08:fe:3d:
97:bb:00:9d:4c:79:8f:61:13:d3:70:03:ac:df:60:
cc:c2:71:1e:f3:26:47:95:40:c0:6e:f8:78:55:ed:
9d:e2:61:65:b2:52:c5:a4:50:64:01:81:7c:69:81:
63:99:13:fe:4a:e3:c8:10:d3:d4:ee:a3:3e:12:b3:
6e:14:9b:ba:e4:32:95:e4:ec:53:e7:d6:36:7c:ac:
77:e0:06:9f:b9:f0:9e:de:d1:42:c8:aa:cd:e0:9e:
7f:b2:30:9c:6e:de:40:4c:ed:06:fc:c2:b7:9e:a4:
e2:6f:af:29:56:2f:94:ea:c1:9c:47:7e:12:c6:dd:
ba:49:e4:c2:25:54:46:49:22:20:68:80:fa:ff:b4:
ba:96:43:ce:4c:30:7c:78:0c:44:c2:6b:f6:c4:67:
37:d4:04:92:02:6b:9a:50:2a:3f:fc:36:d9:d1:74:
88:df:68:1c:7c:3a:2d:b6:81:1e:92:60:d1:6b:2b:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:73:2B:66:53:65:46:FF:D0:53:E2:45:E1:BE:3F:95:1D:1B:0B:17
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/pXMrZlNlRv_QU-JF4b4_lR0bCxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.193.0/24
109.122.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:82:48:bc:a1:fe:7d:a8:f1:d6:d7:cc:13:a9:6d:db:ef:a6:
1c:3c:cb:94:50:60:e9:39:8e:f6:1b:f1:60:ec:39:87:29:0b:
4c:d7:e4:3e:39:ef:14:9c:e7:b7:aa:23:b1:ed:82:eb:8d:32:
60:cc:79:80:f4:90:99:ff:e5:58:54:f9:e9:3f:3e:ab:27:76:
ff:aa:a3:ea:6f:98:33:43:75:df:1b:bb:bc:a7:27:a9:e2:97:
95:29:d0:b1:99:ce:6d:93:bd:11:3f:54:e5:cc:bf:11:0c:32:
30:11:45:0e:d8:5c:d4:4c:b5:b0:26:6c:b8:01:6f:a3:77:2a:
09:1e:d9:d0:05:dc:a6:6b:1f:5d:bc:d3:a8:cb:30:d7:e4:61:
bb:5f:4d:8b:50:9b:e0:08:ff:11:85:f5:c2:da:d1:45:7a:eb:
a8:53:77:61:38:df:da:30:16:c2:da:60:f7:b5:20:06:85:3b:
c4:7f:3d:05:74:76:e2:77:52:7e:63:5f:0a:67:86:ee:2e:c0:
9b:ca:60:62:08:68:27:2d:c9:39:49:d1:f0:a0:39:13:76:22:
26:bb:4d:cd:14:7e:3b:61:d8:14:da:ff:ec:cf:18:74:d9:d2:
97:66:77:5c:e5:ab:e1:dd:05:62:d5:94:1d:dc:24:62:01:3c:
a5:15:99:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:57 2024 by rpki-client on console-fra.rpki-client.org