Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/yK9scus4d4euvm3IoRcm6VoqvlY.roa
File: yK9scus4d4euvm3IoRcm6VoqvlY.roa (raw, json)
Hash identifier: B684oLqXy4Xo5wc+qn5VJZ6Y0mtnY6CIX4pDxv/TUFU=
Subject key identifier: C8:AF:6C:72:EB:38:77:87:AE:BE:6D:C8:A1:17:26:E9:5A:2A:BE:56
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 1290F1CD
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/yK9scus4d4euvm3IoRcm6VoqvlY.roa
Signing time: Sat 01 Jan 2022 10:05:51 +0000
ROA not before: Sat 01 Jan 2022 10:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203684
IP address blocks: 109.232.4.0/24 maxlen: 24
109.232.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311488973 (0x1290f1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 10:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8af6c72eb387787aebe6dc8a11726e95a2abe56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:30:91:fb:75:a9:4f:8c:52:a0:86:b0:5c:
08:64:87:f0:19:bd:c8:4b:a1:32:c1:75:40:a2:7e:
94:1e:a0:3b:1f:b8:e0:78:c3:49:77:09:5a:fe:19:
2a:22:57:2e:e1:cb:a6:e8:91:c3:af:d9:39:33:19:
28:22:95:21:6d:dd:0f:48:bf:b6:c7:16:3b:ce:3a:
2f:b9:11:99:48:2f:00:4f:fe:7b:60:39:f1:52:63:
d1:38:fc:eb:80:80:09:be:3f:62:af:06:16:5a:46:
29:3d:ed:0e:81:bb:de:9a:0e:6a:a6:e6:a9:25:ec:
93:67:9b:89:e2:57:1d:4d:2a:c0:16:0d:ae:8c:f7:
3e:4c:72:6d:25:27:f0:2a:cd:61:7a:be:b7:d7:19:
61:59:ed:5f:92:4b:48:51:77:50:ed:49:94:a9:f5:
b1:75:84:5c:80:aa:21:d2:b0:3c:de:5f:11:69:ba:
c8:81:00:78:d2:0c:19:87:0d:65:a3:f2:df:9f:51:
28:d8:e1:fd:73:24:c5:1d:1d:2a:6d:f0:a9:53:3c:
67:65:be:c3:a0:1f:45:1b:3a:94:e3:58:3c:a6:b2:
d6:43:df:f3:44:2c:55:54:14:73:3d:46:a0:e4:f5:
3d:3c:7b:af:bf:a5:ec:ce:34:e7:fb:e7:2d:b2:de:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:6C:72:EB:38:77:87:AE:BE:6D:C8:A1:17:26:E9:5A:2A:BE:56
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/yK9scus4d4euvm3IoRcm6VoqvlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.0.0-109.232.4.255
Signature Algorithm: sha256WithRSAEncryption
96:43:0d:2e:62:71:d2:75:17:54:97:ee:01:7a:07:d9:c3:fe:
01:67:65:7b:b6:5f:d6:d4:20:92:2a:30:af:e3:1d:67:06:cb:
23:30:31:cb:4a:1d:95:50:8a:ab:1d:64:f7:13:4a:97:02:1a:
d6:2f:e1:b7:8d:62:4e:84:1a:67:e6:51:79:96:a0:32:d8:da:
e8:ac:70:b9:fd:3f:6c:30:ee:ae:68:83:59:99:73:dc:ba:16:
69:57:ed:a6:87:9e:25:66:0b:8a:ac:bc:19:f1:1a:a0:93:7b:
f2:c4:41:52:2c:d2:e1:31:b7:c6:fc:cc:f8:89:2c:8c:05:49:
68:a4:bd:c8:85:25:db:7a:42:18:b9:13:8b:66:20:11:66:27:
1c:56:a8:4b:f5:4f:da:c7:67:2e:ed:b2:fb:e2:f7:d0:28:c3:
53:2a:00:13:c6:2e:d0:f7:01:bb:80:12:e1:19:f5:b4:77:a6:
e9:15:e5:93:f5:1c:4b:0b:f5:50:fb:89:d8:ff:fd:1a:4b:f4:
a0:49:10:cd:7f:42:6e:47:3d:f4:70:2f:1b:da:a9:79:a1:3b:
eb:19:95:83:22:ed:ba:f0:c9:1c:30:1d:7d:02:11:73:b1:c9:
07:fd:f1:e9:e6:c2:53:e0:bd:ae:a0:a6:05:7d:70:1f:05:ac:
75:2f:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-ams.rpki-client.org