Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/LT1ze9iTMw6AITijDxPVzsQ9E_A.roa
File: LT1ze9iTMw6AITijDxPVzsQ9E_A.roa (raw, json)
Hash identifier: Y/TJcluR5e2zCdwXQU9yrFUg6piuTeYK6p5nV624bEU=
Subject key identifier: 2D:3D:73:7B:D8:93:33:0E:80:21:38:A3:0F:13:D5:CE:C4:3D:13:F0
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 08C0508B
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/LT1ze9iTMw6AITijDxPVzsQ9E_A.roa
Signing time: Sat 01 Jan 2022 09:06:32 +0000
ROA not before: Sat 01 Jan 2022 09:06:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50201
IP address blocks: 109.232.88.0/21 maxlen: 21
109.232.94.0/23 maxlen: 23
109.232.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146821259 (0x8c0508b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Jan 1 09:06:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d3d737bd893330e802138a30f13d5cec43d13f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:05:07:fd:ca:d8:bf:3f:1f:86:d3:23:5b:
88:39:d0:b6:70:8d:42:45:5f:ba:f2:ff:d4:56:ee:
57:b5:2d:b9:a1:4c:54:a0:23:33:c2:18:6c:05:b4:
9a:70:a6:57:ef:5e:30:cf:ff:c2:6f:4e:17:74:cd:
4d:33:28:87:5a:59:e7:50:06:50:cf:3f:79:bd:e4:
a3:69:1d:32:43:1d:a5:26:6c:24:6f:d7:91:6b:e2:
d0:72:04:13:38:77:e2:f9:d8:4a:90:12:0f:f2:a9:
ee:6a:fe:22:25:bd:3b:11:57:e3:e1:f3:e8:5b:c6:
ed:a6:cb:4e:11:c4:d8:bf:5d:e6:8a:7e:92:e3:17:
f9:8b:6d:65:04:c9:2a:6d:58:f5:21:1a:6f:d8:b4:
35:1a:6b:dc:7a:f1:07:75:35:c5:5b:18:80:3e:9b:
12:e6:04:f9:10:3b:f2:e0:4f:c7:f2:0b:aa:e2:cb:
20:76:f1:c2:a4:79:3d:46:99:64:40:7d:f4:ff:12:
dc:36:4c:97:f3:0b:22:73:b8:55:b0:f9:50:16:a8:
6e:fa:ca:51:72:68:18:9e:ab:16:8d:bf:f2:53:b6:
ab:fd:09:87:55:06:93:b6:ea:14:45:b6:67:48:30:
15:70:9e:3e:5f:27:0b:6b:62:e7:39:09:ef:5b:0f:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3D:73:7B:D8:93:33:0E:80:21:38:A3:0F:13:D5:CE:C4:3D:13:F0
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/LT1ze9iTMw6AITijDxPVzsQ9E_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.88.0/21
Signature Algorithm: sha256WithRSAEncryption
76:f6:79:7e:73:98:44:a6:4c:d7:33:74:64:95:66:e6:cf:62:
43:01:5b:7e:a9:75:88:9e:8d:0f:12:cd:75:fc:b8:3f:9d:ce:
76:1a:62:31:b2:48:d8:1a:aa:c9:02:e5:79:8b:7e:e7:e7:9b:
9e:12:b3:5a:cd:50:60:de:66:af:48:b6:ef:98:00:c9:4c:40:
c8:b7:b3:34:8e:f6:12:6a:87:45:2a:c6:6a:3d:81:08:f9:45:
55:d4:ee:da:ab:9c:20:e1:09:63:5a:3e:78:0c:34:da:26:61:
f2:36:c1:d8:67:9b:46:02:7a:91:1f:cc:ee:2f:9b:3e:9b:84:
d1:ae:7f:0d:a4:ab:bd:b2:cd:48:b7:08:ee:db:eb:fe:fc:bf:
db:81:79:f4:d7:0b:76:5b:4d:a5:c0:b3:b6:55:f5:32:81:ee:
97:c2:53:b2:7b:e8:a8:fd:9a:b9:7a:ce:b7:da:9d:48:dc:4c:
d8:65:ce:61:ac:01:54:3c:97:b7:ee:53:08:f5:59:34:c2:e4:
99:96:6f:7e:71:0a:fb:a5:94:89:96:ca:aa:ea:36:1a:12:63:
9a:58:f3:fd:d9:9f:95:ed:af:ae:2c:b2:e6:72:20:20:7d:f7:
42:33:98:1e:74:17:42:cc:62:1d:32:c7:1b:45:a7:94:0e:30:
39:31:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:22 2024 by rpki-client on console-ams.rpki-client.org