Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/iTRGg31ZiofYy7HDCRgCLX-rnjs.roa
File: iTRGg31ZiofYy7HDCRgCLX-rnjs.roa (raw, json)
Hash identifier: 1qL0FyOtDdUFjqReOVON4dkNmuAGGnOERVfzEW3rcKw=
Subject key identifier: 89:34:46:83:7D:59:8A:87:D8:CB:B1:C3:09:18:02:2D:7F:AB:9E:3B
Certificate issuer: /CN=dd85dc6b6143a17feb49820ea520048958f48adc
Certificate serial: 01C86D83
Authority key identifier: DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/iTRGg31ZiofYy7HDCRgCLX-rnjs.roa
Signing time: Sat 01 Jan 2022 06:05:10 +0000
ROA not before: Sat 01 Jan 2022 06:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211928
IP address blocks: 83.242.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29912451 (0x1c86d83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd85dc6b6143a17feb49820ea520048958f48adc
Validity
Not Before: Jan 1 06:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=893446837d598a87d8cbb1c30918022d7fab9e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:a3:dd:2f:7c:f6:29:c1:4f:32:c4:fc:8a:
ca:ea:a9:55:b9:aa:75:43:4d:e2:7f:71:1e:db:25:
e0:44:8d:f3:4d:78:03:b2:5e:cb:a2:55:82:e7:22:
a0:2d:e4:99:49:cc:95:a8:8a:41:37:f6:90:52:18:
75:a9:d9:f3:f5:03:72:2e:e4:c6:33:9c:91:08:cb:
50:cf:7e:df:d1:d0:c2:f9:c4:9f:7c:9e:93:01:03:
8f:b8:e8:07:a5:bb:53:20:bf:e7:7a:35:e4:b2:19:
d4:0b:8c:95:08:32:92:b4:ae:e7:01:0b:53:0f:37:
a3:bd:72:93:53:72:c0:28:7d:d3:fc:dc:4d:c6:6d:
32:35:87:a0:1a:93:80:eb:1c:fd:f5:af:9c:2a:63:
cd:5d:24:f2:c8:a6:4c:d4:64:58:b9:44:5b:37:35:
50:33:9a:7f:6e:18:1a:ed:73:d3:18:62:83:d1:97:
3c:a4:a8:61:b0:b8:16:47:c2:32:a3:de:c5:fb:79:
f1:2d:82:e4:92:50:e0:81:d2:e3:21:9c:5c:53:78:
52:cd:69:7c:ac:11:d9:c5:fc:94:20:ab:ca:9b:54:
1b:2e:b9:c5:0a:66:62:16:aa:1b:ec:21:59:b1:e7:
0c:61:64:4c:f2:0f:11:24:bc:49:6a:46:5f:57:90:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:34:46:83:7D:59:8A:87:D8:CB:B1:C3:09:18:02:2D:7F:AB:9E:3B
X509v3 Authority Key Identifier:
keyid:DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/iTRGg31ZiofYy7HDCRgCLX-rnjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:35:bc:ce:7b:26:b1:05:63:fb:83:95:ce:0b:ba:43:97:32:
f3:f6:28:68:d3:ec:03:43:11:cc:8b:08:09:a2:8e:f0:67:0e:
08:67:38:0e:d6:ef:05:f6:6e:67:e9:c1:95:00:86:fe:a4:be:
db:e5:bf:04:82:e5:46:f4:7f:a2:6e:71:7a:5f:09:51:4d:e8:
6a:b9:a6:c9:ad:6d:41:89:3a:c8:1b:a8:06:2c:46:bd:c0:1b:
b6:2b:dd:ea:80:f3:fd:fd:be:00:2a:49:9d:cf:9c:4b:dc:a7:
cb:34:44:c4:e3:75:4d:26:f6:06:32:d0:97:4b:9a:76:84:e7:
64:1a:75:76:56:80:04:3d:42:5b:a6:a5:e2:c2:7c:7d:ae:d9:
70:94:35:e7:33:d3:ac:e2:e2:e2:7e:25:85:43:7f:a9:c5:ca:
61:df:cf:28:ae:e2:0c:ed:00:25:ce:cc:f5:19:50:94:1f:52:
e3:ba:56:74:42:49:5c:3b:a1:ad:91:f6:d7:53:31:f8:9d:e4:
e2:24:37:af:3e:47:f4:14:37:22:5a:f5:0e:88:66:6a:0f:51:
91:dc:ec:1f:64:24:cd:cd:d4:7d:23:3f:6a:0a:ad:1d:00:3a:
db:27:bc:9f:91:2f:0a:09:76:4f:0d:d8:52:28:55:c4:2b:98:
79:87:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:02 2024 by rpki-client on console-ams.rpki-client.org