Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/eA2c6vQIed-rftZ4hhnKdvBu0vU.roa
File: eA2c6vQIed-rftZ4hhnKdvBu0vU.roa (raw, json)
Hash identifier: 0NrhQdiIFZpwbypeMFdCfGNWIlaISJQKjlLyr+q4dWc=
Subject key identifier: 78:0D:9C:EA:F4:08:79:DF:AB:7E:D6:78:86:19:CA:76:F0:6E:D2:F5
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 0731609B
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/eA2c6vQIed-rftZ4hhnKdvBu0vU.roa
Signing time: Sat 01 Jan 2022 13:02:29 +0000
ROA not before: Sat 01 Jan 2022 13:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209156
IP address blocks: 109.121.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120676507 (0x731609b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 1 13:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=780d9ceaf40879dfab7ed6788619ca76f06ed2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e7:6a:15:fe:bd:5e:1b:c6:87:16:b3:d7:6d:
12:4c:47:05:70:6d:fa:6e:f1:d3:58:a4:07:e6:24:
b4:1c:1b:39:a9:23:46:d0:5d:55:fd:cd:b2:a1:1a:
4a:3d:cd:38:9b:85:9b:e8:b6:a3:b3:30:b6:d6:d7:
3e:9c:18:29:28:d0:e9:fd:a4:a7:ec:82:bb:a0:97:
9b:24:1d:a0:f3:ab:ca:1c:a3:b8:4d:50:8a:0f:24:
68:76:a2:27:98:b4:41:1b:67:88:23:ca:05:16:44:
ed:2e:65:7b:4b:a5:36:84:f1:42:a9:25:4a:4d:3f:
13:05:fe:83:ff:77:d8:77:01:c9:97:05:34:ed:a4:
f5:06:f2:2a:98:ee:f1:37:4d:3b:93:ac:99:08:82:
cd:cb:9b:06:db:b9:15:5b:f4:ee:71:4d:eb:21:3e:
cd:47:b4:9d:a2:b5:02:2e:fb:07:34:6a:fc:fd:0a:
3f:6d:56:70:ad:47:67:48:a5:56:e1:a5:a9:1c:03:
79:5e:29:e6:8b:49:97:d6:0e:a8:28:64:ab:7c:62:
80:a4:bf:0e:81:4d:51:de:05:23:b7:51:7e:2b:88:
7c:18:34:d6:06:63:44:a2:9b:ca:d6:08:25:48:52:
c8:fd:19:19:8a:e7:89:31:f7:b2:72:48:4a:6b:3d:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0D:9C:EA:F4:08:79:DF:AB:7E:D6:78:86:19:CA:76:F0:6E:D2:F5
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/eA2c6vQIed-rftZ4hhnKdvBu0vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.135.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9a:71:e0:be:86:85:45:b5:62:1e:5b:c0:c4:7f:a3:bf:1a:
89:76:66:1f:b8:45:17:e8:aa:52:5a:d6:cc:da:79:af:ff:20:
82:f7:d1:ef:d0:16:55:1a:5d:3d:79:4f:54:67:1f:79:d9:33:
22:d8:52:53:14:f9:c8:10:0f:4e:4e:21:48:68:56:69:f2:5b:
4c:0b:f4:38:c0:e2:27:75:ab:16:ba:d2:59:8b:bd:ba:12:64:
28:ba:6d:1b:30:d3:6f:b8:0b:85:bc:95:a8:5b:a2:dc:2f:df:
03:55:0c:4d:c7:aa:44:9e:a8:d7:da:87:26:66:a4:a1:24:c4:
3b:98:d5:02:6d:41:38:13:2c:15:70:e6:02:80:39:b2:7e:70:
cf:03:ce:10:58:f4:82:8d:a2:6c:67:79:1d:19:a7:78:8b:37:
36:2e:f3:c3:ef:31:46:aa:de:b5:fd:33:38:16:36:63:7a:5f:
6a:78:14:40:d3:de:3c:02:e1:d4:ba:d9:66:55:d4:fe:c5:66:
32:ac:75:3c:3c:d2:59:e9:a7:16:76:53:1f:70:1d:a5:08:19:
c6:0f:06:2b:6d:f4:48:89:6a:7c:83:2b:fc:39:16:22:1d:f2:
c2:24:17:c3:bd:d4:93:3f:b5:cd:4d:a8:c3:4e:9a:88:bd:e4:
6f:b5:a7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:24 2024 by rpki-client on console-ams.rpki-client.org