Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/IbjqpERAuNHl5nQ9OaSw7FPFlpg.roa
File: IbjqpERAuNHl5nQ9OaSw7FPFlpg.roa (raw, json)
Hash identifier: G0u6yzKibzDA89FcWzfeCkunQPgtjanOjNFBIRW7ry4=
Subject key identifier: 21:B8:EA:A4:44:40:B8:D1:E5:E6:74:3D:39:A4:B0:EC:53:C5:96:98
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 0356D5A1
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/IbjqpERAuNHl5nQ9OaSw7FPFlpg.roa
Signing time: Wed 04 May 2022 07:47:27 +0000
ROA not before: Wed 04 May 2022 07:47:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.111.200.0/24 maxlen: 24
109.224.233.0/24 maxlen: 24
195.74.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56022433 (0x356d5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: May 4 07:47:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21b8eaa44440b8d1e5e6743d39a4b0ec53c59698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:02:c2:b4:47:9a:22:56:ab:f2:fb:e5:cf:
6b:56:17:4d:ae:b8:81:a1:27:47:65:c1:1a:08:36:
f5:19:bc:f6:2c:2a:0a:23:7e:4c:3f:6b:51:63:b3:
6b:a3:81:16:fa:ce:b8:fd:47:e0:a2:6d:35:67:c9:
98:77:4e:0d:7b:09:8a:54:e8:3c:2b:68:64:5f:34:
5e:83:42:f5:03:8e:22:6c:22:16:01:90:bb:ce:aa:
39:04:d5:b7:59:f3:3c:c6:99:18:de:ab:1b:9c:1c:
9c:93:3d:6a:65:a7:b9:cc:8f:8d:7c:38:e9:fc:03:
d6:a8:f8:40:21:33:31:92:63:70:8a:9b:32:d9:9d:
94:64:a6:70:59:0a:c7:f2:63:49:51:2c:88:1f:59:
5d:6b:da:e4:6e:51:60:6c:37:12:dd:d7:e8:d7:23:
d4:a6:e8:a7:c5:88:4c:eb:36:e0:55:e7:bb:d0:36:
a8:98:10:ae:45:8e:df:3a:ee:ca:5e:eb:3d:ff:64:
49:6d:d2:1d:50:93:d4:47:37:51:49:17:b0:d2:a1:
60:ce:b9:87:50:14:f5:99:fb:17:64:11:31:5f:c2:
01:60:ee:22:04:23:5c:78:13:35:75:7f:b7:d9:09:
93:70:ae:70:66:e4:8f:70:bb:a3:03:c2:ec:5e:8b:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:EA:A4:44:40:B8:D1:E5:E6:74:3D:39:A4:B0:EC:53:C5:96:98
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/IbjqpERAuNHl5nQ9OaSw7FPFlpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.233.0/24
193.111.200.0/24
195.74.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4c:44:f3:24:f8:75:d6:a2:a3:24:f8:da:bb:e5:e6:aa:86:
59:19:66:bc:2c:2e:11:16:64:ef:ba:46:e3:b0:94:8b:db:92:
e5:53:bd:a7:03:11:32:16:1f:a0:1f:1e:34:88:40:74:5b:6f:
92:3c:a9:be:5a:19:94:e0:30:0d:2f:58:ec:5b:8a:81:8c:c9:
54:66:fb:4b:d4:75:4b:68:ed:37:50:2e:e9:6b:1e:c7:96:bb:
63:b7:e3:5d:62:69:d6:08:af:10:20:1e:47:0a:51:01:9f:6d:
02:8a:a9:df:0e:a8:7a:5b:d2:ed:57:e3:bc:52:69:2e:43:4f:
65:94:63:d2:f8:f0:e4:71:ae:52:6c:d0:e9:fc:d3:32:fd:6c:
f7:b8:30:6e:41:93:d1:0c:54:4c:9e:2f:9d:22:32:3f:6c:cf:
54:d5:5f:d4:18:78:52:09:f8:7a:14:8e:31:d9:d4:54:82:49:
25:cc:b1:63:8a:af:73:bf:87:67:0e:42:34:ce:28:25:46:7d:
e7:80:e0:e3:7a:ec:38:1d:0f:01:3b:c5:9c:90:15:65:af:36:
be:ac:2d:43:2d:3f:1b:e3:3c:26:c6:d0:6d:3c:79:c8:51:e5:
75:01:29:8a:3f:aa:1c:77:27:99:c6:81:ee:57:66:86:20:02:
27:4a:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:03 2023 by rpki-client on console-ams.rpki-client.org