Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/q8ESptN5aSEKTsXMKupJLds3sx4.roa
File: q8ESptN5aSEKTsXMKupJLds3sx4.roa (raw, json)
Hash identifier: NDjND8S0QPHC4UfxO7igC0YWZyhcBRerFwGY3Et+SgU=
Subject key identifier: AB:C1:12:A6:D3:79:69:21:0A:4E:C5:CC:2A:EA:49:2D:DB:37:B3:1E
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01829184481BC2A726FCB4BBE1C48700FEA7
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/q8ESptN5aSEKTsXMKupJLds3sx4.roa
Signing time: Fri 12 Aug 2022 10:05:41 +0000
ROA not before: Fri 12 Aug 2022 10:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43431
IP address blocks: 109.72.120.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:84:48:1b:c2:a7:26:fc:b4:bb:e1:c4:87:00:fe:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 12 10:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abc112a6d37969210a4ec5cc2aea492ddb37b31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:17:83:81:89:9f:71:20:db:99:1b:68:f8:
b5:01:ac:c2:2f:51:0f:fc:7f:06:86:59:3a:08:6f:
28:6f:da:5d:9d:87:6b:cf:c4:67:43:f1:62:19:c0:
d0:10:88:ed:47:a0:0a:26:a5:10:c9:86:d8:2a:24:
b2:a3:f1:26:18:48:5d:04:e3:96:83:64:26:14:2f:
dd:b8:1a:b6:08:fe:9d:12:bf:08:e3:56:49:9d:7f:
0c:93:06:a7:74:89:82:83:4e:a2:73:8d:40:be:32:
d8:ba:bb:63:02:d1:3c:b5:d7:e1:b7:ff:64:61:64:
89:8d:38:c2:47:31:b6:bb:db:64:dd:de:18:fe:04:
e4:3d:23:5e:89:bf:ba:91:9b:1b:3a:c6:fa:77:a6:
45:ff:f9:f0:2a:7a:19:2a:b7:6c:24:cf:3f:63:29:
fe:b6:06:04:4a:4c:ff:cf:0b:c1:29:ab:6d:5a:36:
00:db:d5:53:50:e3:80:eb:57:e6:97:35:31:ce:ec:
be:a7:50:38:93:95:cb:87:37:d9:14:2d:73:9a:4f:
d9:1d:ec:b0:4f:a0:88:3c:07:c7:4a:1b:e8:42:cb:
78:2e:17:93:11:69:60:61:a7:88:07:32:7d:55:87:
e4:3f:3f:6a:3b:a9:03:50:4c:97:a6:b6:ba:09:26:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:12:A6:D3:79:69:21:0A:4E:C5:CC:2A:EA:49:2D:DB:37:B3:1E
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/q8ESptN5aSEKTsXMKupJLds3sx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.120.0/23
Signature Algorithm: sha256WithRSAEncryption
97:2a:07:03:85:e2:4a:a1:b9:e7:36:3d:f2:4a:a4:6b:a0:45:
01:9b:0b:61:ae:e5:18:c1:28:ac:07:14:0f:aa:81:29:53:ef:
23:a1:71:c5:70:31:f9:29:3a:88:e0:74:b2:ab:46:37:d3:8b:
79:2c:8b:86:61:9a:64:fc:9b:d4:34:7d:bc:2a:5b:e7:b2:36:
6f:88:c6:ff:0c:7f:4f:66:ae:e2:ec:ef:66:93:74:1d:07:f3:
05:de:54:55:58:46:44:b0:c9:63:9b:d3:bf:fa:2c:e9:a7:03:
17:a7:42:7d:0e:6e:04:aa:b8:46:b5:92:10:b1:be:d9:f3:e8:
3f:9f:ad:d3:87:9d:57:32:f5:4d:79:03:18:93:8f:1f:14:fc:
42:d5:78:ac:e4:06:e6:a6:fe:8d:92:05:a2:f9:97:38:5f:a2:
8e:c9:0f:ba:f2:87:06:57:e9:1d:f0:41:79:15:f4:8a:95:08:
02:07:22:59:81:bd:c7:e6:f9:3e:36:b0:12:2f:61:78:7b:ba:
85:cb:89:ea:74:bb:8e:d7:b0:2b:b8:fd:55:0b:9b:6c:85:45:
2b:2e:13:0b:4f:94:f7:33:b4:e4:74:70:b7:df:59:f7:5e:06:
05:db:aa:08:d2:a7:87:14:cb:16:0b:85:bd:78:d0:84:0b:13:
8b:82:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org