Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/Rveihwna5xm3gvd7qW__KGZtbHA.roa
File: Rveihwna5xm3gvd7qW__KGZtbHA.roa (raw, json)
Hash identifier: rbRSPU2vLhEbZy17KBP988sgN6g7kUmONGVBaK8AA44=
Subject key identifier: 46:F7:A2:87:09:DA:E7:19:B7:82:F7:7B:A9:6F:FF:28:66:6D:6C:70
Certificate issuer: /CN=7fe0b793dc3c1dd5ad640de8a49aa7ecadb30bab
Certificate serial: 06DD5880
Authority key identifier: 7F:E0:B7:93:DC:3C:1D:D5:AD:64:0D:E8:A4:9A:A7:EC:AD:B3:0B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-C3k9w8HdWtZA3opJqn7K2zC6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/Rveihwna5xm3gvd7qW__KGZtbHA.roa
Signing time: Sat 01 Jan 2022 12:02:33 +0000
ROA not before: Sat 01 Jan 2022 12:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200567
IP address blocks: 192.109.223.0/24 maxlen: 24
192.109.231.0/24 maxlen: 24
192.109.239.0/24 maxlen: 24
192.109.235.0/24 maxlen: 24
2a0f:6dc0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115169408 (0x6dd5880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0b793dc3c1dd5ad640de8a49aa7ecadb30bab
Validity
Not Before: Jan 1 12:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46f7a28709dae719b782f77ba96fff28666d6c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:a9:af:8d:ae:6b:7c:15:b6:8c:50:1f:c5:
9f:a2:3e:16:21:15:85:41:48:11:54:34:9d:68:a9:
d9:c9:dd:00:3a:e8:b3:c2:ba:5e:6f:31:b4:9c:ff:
fd:93:8c:d6:37:9c:bf:f8:4a:02:ea:35:9d:c5:c2:
99:f1:82:1b:ba:27:ae:df:b0:b3:01:92:67:bc:e9:
4f:90:b3:61:bb:22:46:80:9a:fb:05:f4:59:e7:4e:
67:5e:d9:31:34:78:ed:2e:45:3d:c4:34:78:d8:8e:
e9:b3:e1:3d:fa:28:c8:f9:e2:84:5b:24:63:68:69:
39:13:c8:e4:79:24:f6:35:2a:33:56:87:90:37:12:
60:f1:da:1d:95:01:c9:4b:20:95:d1:3f:ca:f7:76:
9b:8a:f2:27:fa:28:76:e4:2f:d5:fa:3c:d9:c4:bf:
9f:01:ad:6c:ab:e5:35:99:bb:49:58:12:cc:cb:5f:
a3:4f:76:4f:63:ef:2f:45:ee:58:3c:5d:1d:9c:8b:
a1:74:08:f6:39:af:6e:f4:f1:06:a8:88:11:9e:b8:
1d:a4:51:4f:12:06:12:8d:31:f8:15:88:71:7f:83:
d8:32:7f:2f:76:0e:f3:57:6e:b0:4d:b3:f8:ff:14:
59:4d:69:7a:85:6b:7a:b8:e1:e3:fb:f6:7d:d3:6f:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F7:A2:87:09:DA:E7:19:B7:82:F7:7B:A9:6F:FF:28:66:6D:6C:70
X509v3 Authority Key Identifier:
keyid:7F:E0:B7:93:DC:3C:1D:D5:AD:64:0D:E8:A4:9A:A7:EC:AD:B3:0B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-C3k9w8HdWtZA3opJqn7K2zC6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/Rveihwna5xm3gvd7qW__KGZtbHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/f-C3k9w8HdWtZA3opJqn7K2zC6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.223.0/24
192.109.231.0/24
192.109.235.0/24
192.109.239.0/24
IPv6:
2a0f:6dc0::/29
Signature Algorithm: sha256WithRSAEncryption
50:d5:ef:e3:bc:46:fe:36:cf:25:63:3d:e4:d0:22:c2:5f:04:
3c:8e:13:0c:5d:75:15:c7:ee:3f:42:ee:e9:22:24:41:c6:23:
2f:09:77:87:38:48:cc:28:ab:ef:87:5e:23:09:fe:90:da:11:
4f:37:fc:59:bc:a4:08:a9:a9:d6:ac:ea:17:ba:5d:64:06:9f:
15:d2:00:a8:7f:ae:ba:71:a5:0a:b6:3a:93:1d:ac:f4:53:34:
a8:b1:a5:61:8e:b2:31:85:45:d6:20:e5:03:ae:46:12:e3:d3:
e1:2c:43:e6:2f:3c:d2:13:9d:24:95:8a:ac:75:df:60:e0:3a:
3e:95:a8:fc:7a:76:82:3c:de:70:08:f0:04:d0:bc:dc:1a:fc:
15:6e:e3:3e:36:d7:1c:f3:2b:97:21:f8:75:f7:98:de:db:0a:
69:09:01:66:67:ca:aa:38:d7:e7:40:e0:5c:42:04:78:10:a1:
39:71:7e:4c:db:07:7f:4f:2d:0a:2f:76:20:6c:72:82:51:c1:
ce:20:7b:58:14:d2:5f:be:12:dc:7c:5c:bc:6c:16:bd:10:40:
3a:46:bd:d4:96:27:79:9e:99:e2:b8:4d:41:2e:5e:eb:86:50:
b7:90:94:5b:44:6b:75:fc:34:1b:50:37:31:12:c6:da:d5:8a:
44:4d:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org