Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/I3OXQXc7kSdDU4YuUsJtJZrzzAc.roa
File: I3OXQXc7kSdDU4YuUsJtJZrzzAc.roa (raw, json)
Hash identifier: tzTGuTtrKOeUF7jH+mA6YyyWGOmZIDZzjSZ0u478E2g=
Subject key identifier: 23:73:97:41:77:3B:91:27:43:53:86:2E:52:C2:6D:25:9A:F3:CC:07
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 01823BC37C55D286D4F8980DEC3F693FB2B4
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/I3OXQXc7kSdDU4YuUsJtJZrzzAc.roa
Signing time: Tue 26 Jul 2022 18:27:23 +0000
ROA not before: Tue 26 Jul 2022 18:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210511
IP address blocks: 109.107.154.0/24 maxlen: 24
195.60.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:c3:7c:55:d2:86:d4:f8:98:0d:ec:3f:69:3f:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Jul 26 18:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23739741773b91274353862e52c26d259af3cc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:dd:bc:ad:f3:7b:0d:93:a0:bf:21:98:67:
bf:cc:73:fc:cf:98:be:5c:ba:d2:3d:32:1b:1e:35:
97:75:77:16:c1:c4:af:b9:c6:84:cc:cb:bc:40:5f:
8b:27:eb:86:41:44:55:6c:9d:1b:be:eb:99:f8:f7:
3c:5c:c7:93:a8:6a:3c:ed:51:69:e4:9f:a1:e6:dd:
9a:74:55:55:20:f9:8a:ca:6b:83:98:27:8a:54:5f:
a2:0e:00:88:b8:5d:95:7e:50:42:a2:2c:8b:dc:b5:
2a:67:8b:87:26:d7:ae:78:24:ce:33:44:da:03:d7:
4e:8c:25:92:6c:e5:1f:cf:65:34:be:81:b4:68:12:
80:2c:0b:b2:98:0f:2f:a7:74:6d:72:71:80:e1:7b:
fa:d3:a1:b5:46:49:37:38:b2:df:28:c9:cf:8b:4a:
9d:0a:b5:bd:6c:2b:77:45:2f:8d:51:23:b3:b6:d9:
bc:ad:0c:2f:44:93:a2:48:c8:01:1b:21:a8:3b:14:
15:fc:17:cc:52:04:58:ca:a0:a7:62:c2:8f:45:b1:
7c:72:ff:c6:b9:e0:61:22:81:67:47:8c:79:f2:99:
68:40:ec:39:7c:d1:5d:16:b4:8b:ef:11:0a:d5:7c:
69:e8:f1:7e:36:48:20:45:8a:c9:46:b5:3f:f8:51:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:73:97:41:77:3B:91:27:43:53:86:2E:52:C2:6D:25:9A:F3:CC:07
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/I3OXQXc7kSdDU4YuUsJtJZrzzAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.154.0/24
195.60.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:cb:0a:71:9e:04:e3:6f:cd:cc:68:b1:13:9d:a6:55:e5:e8:
3a:10:22:1c:47:f9:11:bc:b9:88:3b:43:ad:8b:5a:e9:7e:ab:
42:22:59:2d:02:24:0e:37:14:15:f8:c4:98:98:c9:59:46:c2:
83:11:ee:68:df:7d:fd:e1:0a:bf:36:6f:77:36:d8:b8:7e:28:
9f:b8:71:a3:98:c8:7f:d8:59:5e:13:fe:c6:33:86:f3:a9:f8:
a8:34:19:23:aa:38:21:7d:ba:81:b0:7d:67:0c:9f:2d:31:a4:
8b:91:19:d5:65:98:9b:70:cb:03:5a:33:7d:5a:07:a4:e5:2c:
a4:e7:90:69:5b:a5:61:d8:7e:e7:81:78:91:1d:51:e1:fd:26:
56:60:32:76:ad:d8:7c:ca:a3:26:dd:4c:24:5a:9b:3e:3c:d3:
72:f2:25:d7:74:ac:66:07:a6:b6:d4:6a:a6:63:e9:65:4d:24:
79:6f:e4:3f:38:7e:9d:a7:2a:6c:64:c3:c7:bd:2d:81:ef:6f:
8a:5d:8d:3b:7a:fd:fc:e3:c9:28:37:f6:0e:35:46:34:96:c1:
e9:ad:53:66:4f:50:61:4d:b1:e0:42:33:9e:fc:40:d9:fc:49:
12:27:bd:26:f9:34:28:84:72:01:49:d1:61:53:e6:19:0c:71:
53:ce:a8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:22 2024 by rpki-client on console-ams.rpki-client.org