Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gjbD5w9fL-oQjdeQtj73SycoUsY.roa
File: gjbD5w9fL-oQjdeQtj73SycoUsY.roa (raw, json)
Hash identifier: P/25s+Lk2xlTfN3cvEOElHBAF0f1RMHYtbAVBobtJYA=
Subject key identifier: 82:36:C3:E7:0F:5F:2F:EA:10:8D:D7:90:B6:3E:F7:4B:27:28:52:C6
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01823F3C764A09E43B83C7F92E7F4FB5DB27
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gjbD5w9fL-oQjdeQtj73SycoUsY.roa
Signing time: Wed 27 Jul 2022 10:38:23 +0000
ROA not before: Wed 27 Jul 2022 10:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 109.72.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3f:3c:76:4a:09:e4:3b:83:c7:f9:2e:7f:4f:b5:db:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jul 27 10:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8236c3e70f5f2fea108dd790b63ef74b272852c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:f9:ff:5f:2c:dd:9c:6e:6d:1d:16:06:8e:
7b:d6:2b:2d:1a:d1:13:14:d2:15:44:d8:53:f7:68:
2c:b9:6e:17:34:5f:ea:ba:75:cb:69:8b:30:e4:3e:
f8:77:57:99:1b:e6:50:bc:89:b4:5f:bc:59:4c:b5:
ae:43:cd:6a:62:26:b1:61:76:03:0c:40:10:08:0f:
2f:28:6c:52:98:1c:9b:b2:c8:d5:fb:27:b4:d9:5b:
7a:2f:62:82:1c:7f:74:e9:9e:94:d6:6e:ff:2f:77:
8a:a0:3f:36:3e:2c:88:af:d9:14:e7:1c:be:f4:f0:
b2:05:9c:f6:62:57:cc:24:2f:03:88:22:bd:5b:24:
10:c2:33:9e:9f:26:91:4b:b7:6f:da:17:df:b7:50:
34:29:0f:67:aa:bd:0e:70:bf:37:40:0f:b6:6c:d9:
e2:11:69:71:1d:4e:85:ee:04:55:37:8c:e6:c7:11:
0e:69:d5:96:83:50:32:1f:71:aa:c2:71:9f:9c:8d:
23:33:7b:7b:cc:cb:64:30:d8:26:90:cd:33:3d:1f:
63:1c:d5:d5:6a:b6:75:25:5b:a1:1c:60:79:8e:d9:
16:ee:f4:e4:8d:be:ed:f4:59:23:cf:c2:46:1f:52:
38:a4:da:9b:a4:91:d4:03:be:a3:26:5c:1e:e4:ab:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:36:C3:E7:0F:5F:2F:EA:10:8D:D7:90:B6:3E:F7:4B:27:28:52:C6
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gjbD5w9fL-oQjdeQtj73SycoUsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0/21
Signature Algorithm: sha256WithRSAEncryption
11:4d:31:b7:61:34:90:0a:17:ce:c7:78:52:c9:f0:44:1c:d6:
2a:ea:fa:f9:9f:3e:b1:10:d5:29:bf:79:01:aa:f0:a0:ad:cb:
61:b5:a2:09:c1:49:05:ab:8f:69:87:0d:08:33:33:a1:78:c5:
9d:04:6d:64:37:0e:62:b1:cb:61:b1:dc:ff:5e:32:2b:e1:5f:
bf:66:d5:8b:18:91:c2:6a:65:ba:88:bc:d0:4b:d6:f4:cf:bd:
c0:0c:d2:23:0d:59:07:f4:c1:70:bb:6b:bb:96:33:5b:d3:e1:
a2:dc:84:6c:fd:fc:6d:2e:21:b9:1f:28:7b:86:05:89:40:cc:
e8:67:37:d0:72:ba:8c:ab:46:ac:17:e4:9e:88:ca:1d:a6:16:
8c:15:5c:c5:ad:6d:01:ab:b0:f6:4a:f0:f5:b7:d1:1c:9a:12:
6b:d8:24:dc:56:c6:56:2c:0c:dd:bb:9c:5f:16:82:55:4b:7e:
68:0e:6a:ba:f0:fc:a9:97:79:a5:7d:24:10:e2:c5:b3:df:a8:
61:2b:38:9f:2b:85:c4:51:89:27:2c:f5:f4:1d:16:2c:50:c1:
aa:1c:a0:fe:3e:0c:5b:58:04:3c:48:6f:7f:67:d7:75:25:88:
04:e0:a4:42:83:97:f4:78:e5:5a:7a:4b:13:fb:3f:6b:be:6c:
36:33:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org