Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/sLN4Z77z_02fdwBcTYr-KjpuCIc.roa
File: sLN4Z77z_02fdwBcTYr-KjpuCIc.roa (raw, json)
Hash identifier: MsAZzX9NkdrVb7jrGFNUilT2UyasL40GbrCeRltQdik=
Subject key identifier: B0:B3:78:67:BE:F3:FF:4D:9F:77:00:5C:4D:8A:FE:2A:3A:6E:08:87
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 38921034
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/sLN4Z77z_02fdwBcTYr-KjpuCIc.roa
Signing time: Sat 01 Jan 2022 10:05:23 +0000
ROA not before: Sat 01 Jan 2022 10:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 109.122.240.0/23 maxlen: 23
109.122.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949096500 (0x38921034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 10:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0b37867bef3ff4d9f77005c4d8afe2a3a6e0887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:25:b7:04:0b:f0:56:66:f8:25:04:fb:a7:
29:cb:ae:04:8f:44:79:a5:27:9e:36:38:7c:6e:57:
6f:bf:0b:38:1a:db:e5:ee:06:99:9e:5a:55:71:e2:
b9:dc:59:c6:99:b1:2f:02:8b:1a:5e:c4:d8:c0:1c:
d5:91:73:c3:82:77:86:08:f6:bc:bf:5d:e1:61:4f:
8a:09:99:b2:29:fe:40:72:1d:39:7e:42:a9:d4:df:
72:49:4a:d8:5c:f1:75:9c:14:bc:7c:2e:57:1d:4e:
fb:78:aa:e6:dd:ba:7d:fc:af:b0:73:f4:8f:94:27:
08:b0:45:0e:15:7f:73:67:17:c5:49:20:7f:50:b4:
db:91:a4:0a:5f:36:81:24:89:d8:36:30:86:8b:55:
2c:0b:62:d7:e0:f5:ba:88:0e:69:c5:00:59:40:04:
ff:e1:7d:63:26:bd:ec:e6:b2:12:af:f2:d3:d0:3e:
28:32:5b:27:53:3f:a3:2d:05:97:5d:17:34:ba:62:
1e:b7:70:81:66:a8:b3:3c:14:78:0b:93:7d:cc:dc:
3e:d9:ed:fd:a1:8a:60:f2:93:08:14:90:50:da:26:
e0:92:e0:76:79:03:ad:ef:a4:5b:bc:5b:01:eb:4b:
0e:aa:b9:f2:24:78:eb:ad:d2:bc:a5:d0:5f:3d:da:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B3:78:67:BE:F3:FF:4D:9F:77:00:5C:4D:8A:FE:2A:3A:6E:08:87
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/sLN4Z77z_02fdwBcTYr-KjpuCIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.240.0-109.122.242.255
Signature Algorithm: sha256WithRSAEncryption
65:4c:36:f0:fa:0a:4a:24:26:04:c4:44:09:a9:54:7a:a6:9d:
48:b4:c3:df:fa:54:a8:af:5d:92:dc:bd:db:76:9e:bc:13:b9:
0a:15:30:5d:b5:4f:3e:a4:61:3b:48:b8:54:1b:b8:27:d1:5f:
ea:75:a7:eb:7b:8d:a3:ad:d5:66:87:48:57:91:06:8a:f1:0e:
6d:8c:01:de:e8:c5:2e:b5:2b:7d:52:70:84:00:56:e3:fa:09:
da:61:8a:69:2a:69:02:a8:22:df:76:96:e3:a8:47:2c:d2:fd:
ce:ec:ba:0a:82:75:55:7b:5c:42:5c:9d:0e:65:80:49:34:47:
bc:1a:df:f6:26:b3:02:1e:8b:22:f5:88:cb:e0:76:4c:50:81:
92:3b:18:2a:3d:d7:e9:90:28:df:fd:2a:fc:98:fb:1d:a3:26:
4b:f1:04:b3:e7:ca:5d:e9:c9:b8:52:63:6f:8c:dc:b0:48:2b:
ce:25:81:46:8d:2c:58:b5:e7:14:d0:b4:80:90:4a:7c:e0:c6:
04:33:e9:62:19:ee:a3:9c:3d:a2:b0:26:d6:32:98:d5:6c:8e:
20:ad:23:c7:37:36:1a:25:f3:a7:0e:95:21:47:fa:84:cf:d8:
22:6a:ae:98:bf:33:47:c3:75:77:50:32:d5:fb:05:9e:32:67:
98:a3:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:46 2024 by rpki-client on console-fra.rpki-client.org