Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/33y40x0UBmPoyTHTy9oapwuAXuU.roa
File: 33y40x0UBmPoyTHTy9oapwuAXuU.roa (raw, json)
Hash identifier: fBgmM4z3P3qF6JB1NiGQ/AgJ4rY6ydoBDmZqxbdk5YA=
Subject key identifier: DF:7C:B8:D3:1D:14:06:63:E8:C9:31:D3:CB:DA:1A:A7:0B:80:5E:E5
Certificate issuer: /CN=1b893c6209b7a8018776c5ccad30e240d2cf2d07
Certificate serial: 0298F30E
Authority key identifier: 1B:89:3C:62:09:B7:A8:01:87:76:C5:CC:AD:30:E2:40:D2:CF:2D:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/33y40x0UBmPoyTHTy9oapwuAXuU.roa
Signing time: Thu 23 Jun 2022 09:50:23 +0000
ROA not before: Thu 23 Jun 2022 09:50:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 109.234.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43578126 (0x298f30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b893c6209b7a8018776c5ccad30e240d2cf2d07
Validity
Not Before: Jun 23 09:50:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df7cb8d31d140663e8c931d3cbda1aa70b805ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:8b:b9:3b:18:d2:87:bc:f7:32:b9:fa:ff:
e2:ef:a6:2c:4d:fb:54:bd:83:e3:c0:2f:8b:17:c6:
5c:6a:fb:cd:65:a3:cb:e9:2b:b2:5a:18:b2:88:7e:
e1:dc:cb:ca:fe:71:5d:1d:e0:c2:65:95:83:9c:e6:
31:6d:9a:db:32:3c:c4:c9:76:58:06:30:8c:4d:d9:
dd:de:86:3c:61:c4:e5:27:15:bd:fa:be:17:80:81:
b1:bd:fc:b8:df:23:a3:19:48:02:0b:67:e0:f0:a2:
33:ef:dd:f3:5a:a2:65:bd:c8:55:88:47:81:a1:ad:
34:a5:44:6d:bd:20:b2:31:73:82:46:58:d5:76:72:
13:8c:17:30:d1:ab:d5:da:ff:9c:07:3d:79:80:d1:
f8:7c:ae:e9:b4:ce:ce:8a:0b:f0:0e:49:b9:89:e3:
20:a7:a5:07:15:4b:6a:86:4f:13:48:96:6a:ee:a5:
e9:9b:b8:b9:09:c1:c5:f3:61:47:6e:ce:84:24:b8:
32:a9:59:c8:b1:da:0e:6f:9c:7b:8c:15:d6:a5:99:
26:ea:8a:48:1f:96:04:70:e6:bb:e5:6e:88:33:0c:
4d:bb:51:f4:97:07:37:91:3a:a8:6d:32:be:9e:d4:
4c:c1:d4:1d:cc:dd:1a:6c:66:18:1e:b4:67:9e:cf:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7C:B8:D3:1D:14:06:63:E8:C9:31:D3:CB:DA:1A:A7:0B:80:5E:E5
X509v3 Authority Key Identifier:
keyid:1B:89:3C:62:09:B7:A8:01:87:76:C5:CC:AD:30:E2:40:D2:CF:2D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/33y40x0UBmPoyTHTy9oapwuAXuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.74.0/24
Signature Algorithm: sha256WithRSAEncryption
34:04:15:63:96:74:d8:cb:b0:f1:6a:c4:5f:b3:44:54:50:dc:
28:c6:20:99:c0:f5:ee:c0:7f:3e:52:b3:ac:bc:d9:e2:d2:7b:
fa:9f:c5:4f:8e:94:9b:66:4b:0f:01:b9:8d:de:71:bb:a1:ef:
ad:77:65:9c:17:6c:2a:ed:87:c2:dc:cb:54:be:46:a4:bf:22:
9e:1d:ff:08:d7:6f:18:fd:51:88:c3:f2:f8:2e:ae:48:51:67:
cd:01:96:c8:62:95:9f:ec:0a:2b:e1:60:da:59:a6:e7:80:5f:
df:2e:f8:07:3e:c3:44:69:54:c0:fb:eb:9c:db:67:38:fc:5f:
90:a4:fe:11:1f:65:ec:97:3f:03:3b:da:02:e9:33:cb:45:c4:
c0:cf:dc:03:0d:ed:c1:80:12:4f:d0:a7:dc:a1:0e:4a:1f:5b:
84:0d:cc:a7:6c:2e:1e:be:e5:2b:71:c2:92:07:e5:6b:2b:24:
3f:e5:42:62:b7:53:9b:e0:1f:53:73:25:62:a5:fa:dd:2a:1b:
5a:cb:6a:b3:ea:a1:dc:f5:4a:4b:0b:76:f3:e2:3f:cf:20:6d:
34:64:e2:84:1c:f7:3b:f6:7f:b9:c7:62:1c:75:cb:f3:65:4c:
01:4b:33:5f:2f:b5:01:31:7d:aa:60:83:d0:8d:c0:1e:c6:8a:
d7:61:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org