Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/EwiZRNjKYOx9ZRx5zO5lK5JGro0.roa
File: EwiZRNjKYOx9ZRx5zO5lK5JGro0.roa (raw, json)
Hash identifier: 64xWXoqY/QIr68hEmxzqPl7TT5tCh3RwhwMyjJ0I47M=
Subject key identifier: 13:08:99:44:D8:CA:60:EC:7D:65:1C:79:CC:EE:65:2B:92:46:AE:8D
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 1D134ADA
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/EwiZRNjKYOx9ZRx5zO5lK5JGro0.roa
Signing time: Thu 12 May 2022 03:11:02 +0000
ROA not before: Thu 12 May 2022 03:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 109.72.124.0/22 maxlen: 22
109.72.120.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487803610 (0x1d134ada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 12 03:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13089944d8ca60ec7d651c79ccee652b9246ae8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:a7:03:5f:b4:76:f3:cb:74:d7:e6:a7:0e:
81:d5:e7:57:ed:1f:8a:39:fb:be:f1:bc:e0:36:05:
81:c7:d8:9f:73:9b:93:c9:ac:02:78:62:b3:b8:55:
35:8f:c0:74:b5:98:3f:0a:63:6c:b6:7b:42:83:b7:
bc:9b:b0:a4:fc:c8:dc:8c:cc:0e:46:8b:2d:b6:3a:
3a:d1:cb:cc:76:df:a6:93:55:f9:61:92:5e:f0:2d:
18:39:2a:1a:26:8a:47:d2:c9:0a:b2:d9:13:9f:bd:
7f:4f:c3:fc:b2:e4:b0:1c:cc:47:6c:2b:7a:cd:c7:
98:07:38:ee:19:85:53:5f:d6:48:1e:1a:b4:0a:34:
cb:f9:36:2d:00:13:67:ad:a9:e9:f6:0f:96:f0:56:
27:5b:21:95:1e:18:72:fd:89:96:b2:93:52:d1:a8:
aa:db:61:0c:c9:27:8d:62:c9:98:14:45:c0:67:fb:
e5:9b:31:f7:98:6b:3d:67:65:14:9f:29:29:b7:e1:
22:67:f9:18:75:8a:72:bb:5a:28:57:aa:8e:27:f6:
18:b2:c9:53:1a:d1:15:9b:89:e6:c2:e2:e0:f9:90:
c0:a8:d4:72:7e:0c:52:c9:31:9b:58:91:40:dd:a2:
a3:50:56:fb:11:e4:73:3d:40:72:45:3d:1d:41:d8:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:08:99:44:D8:CA:60:EC:7D:65:1C:79:CC:EE:65:2B:92:46:AE:8D
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/EwiZRNjKYOx9ZRx5zO5lK5JGro0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.120.0/23
109.72.124.0/22
Signature Algorithm: sha256WithRSAEncryption
74:11:fe:5f:7c:18:58:af:d7:63:05:e9:13:16:36:ce:f2:aa:
f4:46:7c:3a:2a:d8:b5:40:7d:d7:90:e0:c1:23:08:6d:dd:4f:
c8:9a:a8:11:55:dd:1f:44:2a:25:8c:b4:a2:63:7d:b3:54:d3:
67:4d:af:1e:a9:ee:46:0f:2d:a5:85:ef:15:23:89:58:f0:52:
1c:e6:1b:cb:2c:95:5a:c4:9d:e0:28:89:31:0f:c6:22:4b:ad:
c3:7e:81:99:71:1d:66:31:a5:7e:2a:a0:5c:23:2b:58:d4:a2:
0f:1c:01:1a:4e:37:76:1c:31:fc:25:82:50:03:9a:e1:d7:05:
95:8b:0d:b4:96:86:b2:92:82:51:bd:96:80:6d:bc:32:6f:53:
23:d5:f8:f4:bb:d4:94:9b:e6:14:9b:a9:49:f4:1f:f3:6a:0b:
e4:90:cd:8d:81:a1:73:9d:33:78:67:69:a2:09:9b:4a:dc:8a:
48:7d:a8:13:33:48:6f:62:7b:d5:8d:11:aa:2f:8e:d0:8b:0e:
c1:c4:5d:3f:71:57:e4:10:79:c9:da:f4:05:60:6e:f7:cd:89:
23:65:23:0a:eb:07:e0:54:b1:87:65:00:70:03:0f:2f:fe:8a:
51:b3:59:8c:77:92:fc:ba:33:d2:85:4d:74:6d:8d:8c:8f:8f:
a9:f7:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org