Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/4zC1iIUUpPPuXZDoUzwjmOBPi6Q.roa
File: 4zC1iIUUpPPuXZDoUzwjmOBPi6Q.roa (raw, json)
Hash identifier: lIzFtmFOGzmpOV4GZqFnMUZUFvDyRj4p/x7aabs4wFI=
Subject key identifier: E3:30:B5:88:85:14:A4:F3:EE:5D:90:E8:53:3C:23:98:E0:4F:8B:A4
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185304F1657DB8BAC992711C1BD66168FA8
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/4zC1iIUUpPPuXZDoUzwjmOBPi6Q.roa
Signing time: Tue 20 Dec 2022 16:12:47 +0000
ROA not before: Tue 20 Dec 2022 16:12:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50977
IP address blocks: 109.107.96.0/19 maxlen: 24
185.96.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:4f:16:57:db:8b:ac:99:27:11:c1:bd:66:16:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 20 16:12:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e330b5888514a4f3ee5d90e8533c2398e04f8ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:40:d7:a0:7c:94:90:1d:34:fc:03:73:86:
99:2a:31:e9:0c:77:f3:f5:ea:f7:48:90:fb:71:98:
d4:f0:93:6d:02:72:9c:8b:a0:5d:fe:25:62:61:55:
2f:52:90:55:0a:f1:be:c8:92:76:4e:a0:8c:3f:72:
b0:9e:38:14:35:46:91:1d:91:fd:7a:ec:e8:44:a2:
a1:ce:4e:0f:b2:c5:f9:c4:72:e0:f6:e3:a0:b9:c1:
4d:fd:2c:70:40:00:59:3d:d2:ae:08:5b:0c:23:ae:
80:4e:e5:54:e8:8a:ef:41:5d:a6:38:2a:0c:36:7a:
b0:8e:85:eb:b4:87:f5:74:7e:e8:f4:bc:d4:13:9c:
40:24:28:59:e5:e8:c9:14:c3:54:e6:21:1d:dc:ac:
43:89:6d:b9:8e:9d:86:c9:92:56:81:99:0d:a7:54:
fc:af:fa:09:dd:f9:51:37:10:d2:8f:17:88:61:11:
36:38:2f:62:b3:f0:83:a6:6f:59:56:1e:ca:82:8d:
d7:e5:a7:99:b8:52:12:95:01:f6:f7:63:48:85:ce:
fc:e5:e8:60:64:c2:0f:0c:ef:e4:80:d4:7f:7b:ca:
e8:c3:f5:4c:09:18:ae:d8:25:9c:8b:76:8a:0f:c1:
a2:ec:1a:89:45:1e:93:d7:10:0e:01:c0:ba:c6:00:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:30:B5:88:85:14:A4:F3:EE:5D:90:E8:53:3C:23:98:E0:4F:8B:A4
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/4zC1iIUUpPPuXZDoUzwjmOBPi6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.96.0/19
185.96.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:6e:23:29:5f:32:7d:b4:42:01:ae:ab:2c:69:fb:c0:fe:2f:
ea:ea:0f:c1:e7:e8:93:4e:bc:c9:e1:1b:96:ea:37:7d:e0:03:
4a:ef:2f:18:27:ef:17:cb:c1:ec:90:a7:9a:23:4d:bd:ff:b7:
d5:b4:45:c6:ab:c7:8e:6e:d0:70:3b:41:fe:0d:72:de:93:63:
b6:78:cf:6d:0b:9c:bb:4e:64:32:a3:a6:33:58:19:88:b8:73:
77:e6:a1:29:57:40:34:3e:4d:1a:13:90:54:cc:bc:18:89:2a:
53:3a:ed:3f:68:10:b9:32:94:6f:5d:a1:26:5d:dc:3c:a7:a1:
fa:40:56:ac:4f:69:1d:50:cd:aa:14:fe:e4:a9:3d:7f:7f:73:
d7:c1:31:68:ec:91:ca:c1:1b:cf:9c:00:92:3b:b3:e3:bc:8b:
c2:2a:17:e2:b3:ba:ee:9a:51:aa:64:37:9a:f0:3c:93:81:dd:
21:27:c3:4f:31:f1:5e:ef:c4:49:12:2e:f5:20:6e:c3:0b:fa:
c6:85:ec:15:79:11:35:6b:1d:d7:49:e3:e4:db:ee:d1:c2:a8:
ac:26:0f:ca:22:91:5e:22:f0:23:1a:31:10:8a:70:cf:18:5f:
1f:c3:92:c1:11:92:2d:e4:6b:a9:df:60:4a:54:95:ef:36:30:
c1:65:83:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org