Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/w-XB75ei9NL2p4hAe-FsdGhGzlc.roa
File: w-XB75ei9NL2p4hAe-FsdGhGzlc.roa (raw, json)
Hash identifier: 6BGM3uUSyAClamLs1wpcXpDgcgwdNhEHSe+tVi5QXx0=
Subject key identifier: C3:E5:C1:EF:97:A2:F4:D2:F6:A7:88:40:7B:E1:6C:74:68:46:CE:57
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 1D4655AA
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/w-XB75ei9NL2p4hAe-FsdGhGzlc.roa
Signing time: Tue 31 May 2022 07:04:15 +0000
ROA not before: Tue 31 May 2022 07:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 109.72.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491148714 (0x1d4655aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 31 07:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3e5c1ef97a2f4d2f6a788407be16c746846ce57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:4e:bd:38:78:22:01:fb:98:69:d9:45:ab:
00:1e:e0:57:aa:a0:67:0f:1c:f7:45:22:20:8b:54:
70:d8:6e:00:a2:63:06:a9:3b:5a:e6:cf:16:e8:bb:
54:c3:0a:30:23:4f:0e:f1:47:ad:f3:75:31:01:8e:
00:e7:dd:0b:81:f1:5b:bf:70:75:ca:5e:17:dc:7e:
01:d0:47:17:4b:77:59:5a:e4:c5:36:43:89:8e:47:
64:9c:70:41:b8:58:66:6f:cc:cc:04:0e:af:02:14:
54:68:7e:bc:00:f7:ba:30:8f:f6:db:3f:cd:22:c1:
e8:cb:c9:d6:5e:aa:fb:4e:1c:14:8e:1a:72:25:e7:
d5:ac:75:85:0a:25:2c:c4:5a:3c:5f:77:44:52:50:
98:29:4e:10:ca:57:33:7b:18:13:60:a4:1c:b2:d7:
63:fe:4d:4f:21:45:ae:c7:5b:09:5f:a5:ce:17:f6:
6d:b9:3a:8d:c8:1a:b4:6f:90:af:fc:2e:51:4d:82:
d7:a3:b2:2e:bb:56:3b:22:7c:20:28:6a:af:73:b2:
ba:31:e6:b7:80:f8:2a:32:bb:07:b1:37:c0:63:2a:
6a:2a:a0:20:fb:53:cd:f8:59:03:a1:3e:0d:75:e7:
37:30:fe:d5:a1:e7:35:83:77:cc:8a:aa:78:21:fd:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E5:C1:EF:97:A2:F4:D2:F6:A7:88:40:7B:E1:6C:74:68:46:CE:57
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/w-XB75ei9NL2p4hAe-FsdGhGzlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:1c:48:d1:e3:31:8b:b1:60:75:50:00:29:c4:85:ec:c9:43:
66:ea:b3:ad:1c:e0:fa:83:73:9b:81:91:ee:41:7b:1c:2c:15:
2a:ea:08:8b:7e:2a:a7:0f:02:43:4a:8a:96:78:2f:b4:8e:29:
f2:9d:29:34:63:bf:c6:ff:55:8a:19:54:cb:e9:b5:74:a7:03:
4c:9e:79:e2:7e:26:5a:37:09:b4:11:86:18:d2:33:f2:17:d0:
ac:69:f8:cf:ab:a8:48:13:51:fe:3a:22:50:a6:c1:12:c6:15:
73:2e:dd:76:b0:b2:97:8c:ff:e2:d6:68:c4:68:12:fb:f7:3a:
1a:23:85:1d:e0:0f:4d:50:49:98:bc:91:cf:fb:97:e4:fa:86:
07:0e:66:84:63:24:04:c4:fc:23:60:18:02:c5:83:2d:bb:83:
68:57:85:54:d9:0d:34:35:56:f1:58:a6:31:3d:6c:88:93:34:
4b:ab:e4:4a:57:28:4d:e0:34:47:be:51:fb:c5:4e:c5:a6:f1:
5d:82:4d:e2:bc:c0:a1:c3:49:c6:83:6a:7b:22:65:04:c5:bd:
99:77:62:1a:a0:79:b2:78:dd:27:da:41:3b:0a:fd:d7:b0:26:
70:9a:be:7d:cb:71:50:33:c2:d5:6d:fc:e6:2e:e2:86:a9:22:
5b:bc:5e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org