Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/Fy1eXWcrjVmjTPw13fu-HnKtsAM.roa
File: Fy1eXWcrjVmjTPw13fu-HnKtsAM.roa (raw, json)
Hash identifier: 5k4P9DFKEbIfwJc7xUE9SUcUFZtWf3Qz20fm7uaEUqM=
Subject key identifier: 17:2D:5E:5D:67:2B:8D:59:A3:4C:FC:35:DD:FB:BE:1E:72:AD:B0:03
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 04F431
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/Fy1eXWcrjVmjTPw13fu-HnKtsAM.roa
Signing time: Tue 28 Jun 2022 05:03:20 +0000
ROA not before: Tue 28 Jun 2022 05:03:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51607
IP address blocks: 109.235.191.0/24 maxlen: 24
185.30.118.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324657 (0x4f431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Jun 28 05:03:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=172d5e5d672b8d59a34cfc35ddfbbe1e72adb003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:c6:86:6d:61:39:3e:fc:01:9f:de:83:1b:
38:8e:8f:d5:87:55:7b:39:2e:b7:90:aa:d7:fb:35:
81:dc:e7:f0:6c:a4:e1:08:9a:27:10:17:d8:47:fe:
29:a8:3b:6c:d9:6a:27:0d:f7:41:2e:ea:0e:4d:d9:
bb:07:ea:7c:9c:ab:a6:63:90:8d:8c:d6:53:41:85:
7b:37:65:85:c1:17:1d:d3:b9:ef:4e:28:4a:09:35:
23:09:17:e8:c9:48:4e:ce:fa:34:31:36:34:25:c2:
bc:85:ae:73:40:9e:99:eb:cd:1b:dc:6d:ff:d1:7b:
f7:43:0e:3f:52:d7:af:00:b8:8a:61:da:fa:c5:30:
bc:5e:1f:90:09:08:31:20:6e:c8:21:4c:d2:07:f5:
be:89:00:38:0e:b3:23:fc:a1:cb:5f:29:79:4a:d5:
8a:27:01:27:4e:98:5e:c7:90:2f:d3:51:b1:26:41:
dc:a9:1f:e7:01:fd:39:d1:ea:ad:fb:67:e6:ee:51:
3b:70:2c:77:92:99:be:04:d1:7d:32:69:9e:cb:2c:
82:8c:ff:52:f2:53:74:ef:ab:4a:2b:fb:c2:3f:04:
ef:5a:81:42:b0:cf:2f:e0:c1:5f:2e:71:88:73:d4:
73:3f:1d:5b:df:8c:c4:fd:ab:74:57:cd:83:6a:48:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:5E:5D:67:2B:8D:59:A3:4C:FC:35:DD:FB:BE:1E:72:AD:B0:03
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/Fy1eXWcrjVmjTPw13fu-HnKtsAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.191.0/24
185.30.118.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:66:da:89:d2:74:21:5c:a7:05:ca:66:bb:3d:72:0a:05:03:
2f:88:51:98:00:2a:5a:3d:4e:a8:64:0d:46:44:32:65:4a:17:
50:4d:23:64:b6:e1:a1:ab:ff:b2:0c:9e:65:ae:04:36:1c:e2:
93:d8:5a:43:b2:14:00:3b:ef:ef:2a:94:0d:00:38:1b:8d:cb:
1e:3c:ed:76:b9:b5:a4:05:75:b2:fe:bb:7c:1a:8a:2b:5f:ef:
41:5a:fc:cb:4d:c1:c2:8f:28:dc:68:1a:39:9d:a9:5c:2b:35:
cc:c4:96:09:d9:e2:6e:3d:ae:78:55:1a:02:a9:6c:9d:a4:e7:
57:54:46:71:ef:0d:7c:87:d2:de:c2:e4:1e:14:40:ef:4d:67:
52:30:c8:4d:79:32:a4:3f:c8:b8:fa:6d:bc:6a:d2:34:ca:37:
51:1a:f6:af:a3:de:aa:54:70:0a:65:1b:5c:6a:35:1e:ae:06:
cb:ca:57:e7:3a:f0:57:68:f9:da:d1:b4:33:2c:39:07:1e:0f:
58:a6:9d:fb:64:2a:1a:73:be:6b:c9:97:ed:fb:b1:07:b6:94:
c6:d2:00:20:de:ec:28:20:02:dd:74:b8:86:2f:cc:e8:76:bf:
45:7f:d4:5f:6e:7d:45:bb:cf:00:0d:ea:1a:29:fa:5d:bf:5c:
a3:08:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:31 2024 by rpki-client on console-ams.rpki-client.org