Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/z3A4AaELh_B2KXlBbvZL9CSGx6E.roa
File: z3A4AaELh_B2KXlBbvZL9CSGx6E.roa (raw, json)
Hash identifier: C7RgGBArqRK9SbvQ/w2iyH9U5Xmhqs2kGom9zb2aLrg=
Subject key identifier: CF:70:38:01:A1:0B:87:F0:76:29:79:41:6E:F6:4B:F4:24:86:C7:A1
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 01845D0C892847D23F22A356B502413A1CE4
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/z3A4AaELh_B2KXlBbvZL9CSGx6E.roa
Signing time: Wed 09 Nov 2022 15:40:13 +0000
ROA not before: Wed 09 Nov 2022 15:40:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41292
IP address blocks: 109.121.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:0c:89:28:47:d2:3f:22:a3:56:b5:02:41:3a:1c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Nov 9 15:40:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf703801a10b87f0762979416ef64bf42486c7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:eb:4c:31:fb:20:55:a4:2b:55:29:22:09:
da:e5:24:b7:bc:2e:54:05:c3:64:50:38:55:0c:df:
08:64:95:f3:87:fc:f7:15:ed:a3:9f:10:99:f1:0b:
da:7a:31:b5:89:80:e2:84:f6:c9:c6:d7:b1:1e:30:
75:1c:17:18:73:6d:32:95:77:fc:c6:ef:e8:da:06:
b7:24:9b:8d:63:ed:5d:98:1f:6a:3c:66:ce:6d:ce:
3f:f2:be:b9:ce:b4:a7:64:6c:fb:91:56:e8:f5:f7:
06:48:a4:53:74:b9:2f:f7:3b:0a:17:4e:48:42:f4:
ee:90:fa:a3:2c:cd:d2:4b:f0:74:3d:0b:bc:5c:f7:
17:b3:76:51:50:47:08:a5:fe:33:eb:a9:86:78:6b:
a9:82:c7:1e:04:a2:8e:61:ed:a5:da:ac:c4:9a:8b:
91:9c:5f:20:f6:0d:02:c3:6c:a5:f1:c8:cd:56:72:
be:a3:42:bb:fd:6a:dc:ac:0b:a8:c0:8f:68:cf:4d:
df:6f:26:5a:58:1a:68:cc:25:97:0a:b0:55:ee:e1:
55:92:99:40:31:d1:f6:42:26:cd:0f:5d:f5:1f:f9:
81:b0:e9:ba:c5:b6:97:e6:fb:c0:4c:1f:cd:14:1c:
11:06:92:6e:93:e2:5f:c6:9f:25:73:a8:b4:b4:89:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:70:38:01:A1:0B:87:F0:76:29:79:41:6E:F6:4B:F4:24:86:C7:A1
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/z3A4AaELh_B2KXlBbvZL9CSGx6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.159.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b4:4e:7f:17:45:59:8e:ab:83:c6:c9:9c:14:4b:03:b7:f5:
28:14:80:cb:82:f1:ef:8c:fc:42:37:c6:bc:fc:f0:33:96:a3:
0a:a7:d6:b3:c7:95:f7:ce:f5:99:a9:bc:5d:c4:0f:d7:0c:ee:
5e:46:f9:67:f7:78:c6:74:fa:f7:3d:71:d6:0b:0e:5b:2c:13:
af:b1:b5:9e:96:a1:9e:09:61:12:de:05:72:ae:a5:f9:64:f8:
3c:c0:8e:41:da:82:cd:df:85:21:65:b8:2c:9e:5d:48:79:a5:
ee:ad:fe:0b:8a:ba:14:e1:a1:25:b8:94:98:0d:2f:71:9a:ed:
f3:e0:f2:bd:0f:c5:2b:76:aa:06:48:50:f2:c4:7b:92:a4:85:
d7:17:36:68:13:8c:dc:84:c1:e6:72:a0:a6:28:74:01:da:07:
71:a1:e0:2c:22:da:b4:cf:75:ec:58:fd:9d:da:67:1f:5b:6a:
d6:f7:c1:da:42:34:f5:51:78:ed:20:62:ba:6f:9d:57:8a:b7:
50:08:3b:03:83:23:88:9b:f1:05:1a:14:ca:52:40:2d:26:81:
68:62:8d:a3:49:07:af:07:2e:ab:c9:e2:e1:ce:38:fa:64:56:
50:48:25:e8:fa:2f:7c:c9:d9:3e:4f:aa:3a:07:b1:e4:4b:07:
74:7f:31:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:35 2023 by rpki-client on console-ams.rpki-client.org