Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/gUGlLCQ1_SnKAGJ6cUI-iLALp4I.roa
File: gUGlLCQ1_SnKAGJ6cUI-iLALp4I.roa (raw, json)
Hash identifier: C8O+uxKLV4ZXTnyRe3e8NMaZMSwX/1bOcGdG/BJVUGE=
Subject key identifier: 81:41:A5:2C:24:35:FD:29:CA:00:62:7A:71:42:3E:88:B0:0B:A7:82
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 42AAFECB
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/gUGlLCQ1_SnKAGJ6cUI-iLALp4I.roa
Signing time: Sat 01 Jan 2022 06:05:08 +0000
ROA not before: Sat 01 Jan 2022 06:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207548
IP address blocks: 109.108.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118502603 (0x42aafecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8141a52c2435fd29ca00627a71423e88b00ba782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:48:92:46:d2:23:a1:68:8b:9e:c7:75:ce:
a0:47:4a:9a:1d:a1:be:41:9c:6c:53:e1:a4:b3:b8:
a2:a2:a5:f1:ec:e8:4a:41:47:02:d6:2e:5f:b5:51:
ab:53:83:de:45:41:f9:76:49:32:1a:1e:d1:4d:58:
4f:1f:06:1e:5e:4b:4c:73:47:bb:83:fb:89:99:d1:
fa:c5:60:f7:80:73:80:a0:41:53:61:9e:82:be:9e:
9d:ef:31:b2:c4:fb:ce:4a:a0:b0:5b:a2:de:3a:51:
91:3f:6d:89:76:ab:be:a7:77:22:ad:cb:cb:ad:7d:
38:bc:a9:e4:07:c6:77:ed:43:fb:cf:c6:4c:b1:cf:
ec:c1:6a:3e:54:10:ec:b9:67:74:f3:83:2c:eb:fc:
11:80:13:69:8c:5f:3b:0a:0c:1d:1f:b9:4a:b8:a2:
0a:fe:56:c7:ab:ef:ee:7e:ef:0b:6e:de:19:5b:6e:
77:d3:55:66:7f:31:c4:ee:ca:05:c9:6e:aa:eb:e4:
81:67:2b:6a:af:83:f9:fa:99:62:70:eb:66:1b:36:
7b:1d:2e:b8:85:76:ba:77:8f:97:99:d8:3e:68:6e:
7e:f7:ac:a6:15:0c:e9:26:ec:b2:d4:06:30:b2:40:
a5:2d:9b:c0:39:9b:c1:27:c3:77:51:ca:05:49:81:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:A5:2C:24:35:FD:29:CA:00:62:7A:71:42:3E:88:B0:0B:A7:82
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/gUGlLCQ1_SnKAGJ6cUI-iLALp4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.108.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ee:2f:6e:bf:c8:a1:ea:16:d9:e3:15:4a:80:49:ac:01:6f:
de:db:36:a8:14:59:95:69:40:ef:f4:b0:3d:d3:44:a0:c2:de:
ee:a0:c4:14:a9:ff:bc:4e:48:cb:e7:c6:1e:85:82:a2:2e:95:
2d:a7:c0:5b:66:5d:cd:8d:ed:73:9a:ee:fc:38:ad:32:e0:b8:
a3:7f:4c:63:f5:ae:af:85:16:2a:11:7c:15:99:50:4e:87:85:
f2:ed:49:e7:4f:f6:04:b0:05:19:7e:2c:8b:5b:e9:4e:7d:80:
c4:e8:1f:66:21:1e:58:28:7c:81:72:bb:33:44:4f:a1:46:46:
11:97:73:bf:43:ce:45:1b:17:8e:9e:6e:b3:f1:c5:bc:c3:b9:
21:a9:6d:96:8e:34:ba:4f:6e:a8:9e:26:85:b8:d6:2a:2d:4b:
99:c1:fd:21:c3:36:fc:fd:5b:6f:90:27:b6:b9:5c:41:50:3b:
0a:8f:c4:e9:01:ba:66:35:96:4d:0d:42:71:f4:c8:a2:2e:68:
71:75:59:b1:a3:3b:a6:c5:08:92:f7:e6:c3:e6:ec:82:71:95:
2f:3b:01:dc:3c:f9:8e:8c:1b:9c:7d:e8:f6:9a:86:0f:b5:23:
55:8c:c2:84:08:b2:e1:ac:6a:7c:d3:65:16:c0:f2:59:a9:81:
48:9a:b3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net