Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/1-Kk3atMo-721ghxO7xXVY07aZCE.roa
File: 1-Kk3atMo-721ghxO7xXVY07aZCE.roa (raw, json)
Hash identifier: sxdL5fbT9voD2Kka1rBmyqwWL6XEZ7p16sufBCJbsO8=
Subject key identifier: F8:A9:37:6A:D3:28:FB:BD:B5:82:1C:4E:EF:15:D5:63:4E:DA:64:21
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 08FF559C
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/1-Kk3atMo-721ghxO7xXVY07aZCE.roa
Signing time: Sat 01 Jan 2022 07:00:42 +0000
ROA not before: Sat 01 Jan 2022 07:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137
IP address blocks: 192.107.51.0/24 maxlen: 24
192.107.56.0/21 maxlen: 21
192.107.52.0/22 maxlen: 22
192.107.64.0/19 maxlen: 19
192.107.96.0/22 maxlen: 22
192.107.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150951324 (0x8ff559c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Jan 1 07:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8a9376ad328fbbdb5821c4eef15d5634eda6421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:ed:4d:eb:0c:0a:ac:c9:ea:ec:f8:75:87:
25:25:fe:50:ba:c3:a3:ed:7d:9d:15:82:bf:23:88:
fa:8b:61:95:07:34:08:2c:6f:91:b0:8b:7e:61:f4:
a2:f9:11:eb:d8:c1:f1:d8:34:63:cc:8d:b9:54:11:
4a:c9:68:2c:6c:09:37:7b:01:b9:62:8a:47:ab:be:
ec:c2:35:56:33:62:5a:2c:cb:4a:e4:5a:2f:a8:de:
c0:bc:86:84:6c:22:a5:d3:85:1b:ff:95:04:61:37:
1c:2d:ca:80:2a:78:3d:c6:ce:a8:5a:44:23:e5:b9:
44:d9:ff:5b:15:82:e8:ab:fe:cc:70:98:b8:9c:b9:
1a:e0:61:8e:1d:c7:df:9f:21:fc:4b:7a:bf:9a:31:
df:1b:41:a1:5c:4c:34:bc:8f:0e:61:58:6d:8d:70:
83:35:14:0d:31:78:98:27:0c:e6:d3:5a:90:e1:43:
b6:da:aa:53:96:f6:ba:42:fb:5c:8c:a3:ea:02:11:
56:bc:3c:8f:97:a7:de:f9:29:f0:b5:22:6e:a5:d2:
85:17:0e:20:ab:d8:41:02:8d:72:2e:95:21:c1:3f:
e5:1d:4c:ca:1b:56:a1:fa:85:f0:6d:31:1b:89:9f:
45:c2:c8:5b:ef:44:b3:84:5c:23:cd:34:8a:a0:5f:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A9:37:6A:D3:28:FB:BD:B5:82:1C:4E:EF:15:D5:63:4E:DA:64:21
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/1-Kk3atMo-721ghxO7xXVY07aZCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.107.51.0-192.107.100.255
Signature Algorithm: sha256WithRSAEncryption
1a:5f:85:38:1c:01:b5:cb:66:40:c8:a5:38:dc:bb:f6:77:b4:
8f:c9:98:0d:da:15:7b:f9:57:d5:a2:b6:b6:e9:a4:30:8e:61:
18:b9:6f:2d:01:da:90:55:a4:70:ad:e1:ac:f2:0f:e4:1d:a3:
a8:66:b4:9c:75:61:da:c5:56:bf:ff:c8:82:4d:70:93:d4:f9:
10:0e:7b:c8:1e:06:a2:b1:37:10:f4:98:24:6d:4b:a9:05:f2:
08:ce:c0:37:52:97:7f:38:43:75:db:3f:1b:f1:d0:87:5a:db:
32:15:8f:6a:ff:22:69:e0:a3:47:1d:c0:77:67:95:44:c5:fa:
29:eb:e7:e4:4b:c3:18:61:d4:ee:2a:4f:c3:9f:60:9a:dc:64:
0a:00:74:97:98:b3:46:bb:07:c7:7f:ea:e3:32:57:db:6f:d2:
b1:1b:7c:2e:4a:9d:a4:45:f3:b0:da:67:2e:cf:e6:35:bd:35:
12:ea:97:e4:db:c7:37:c8:b4:16:b9:18:94:89:28:7b:41:ac:
35:57:c6:14:ce:9a:1f:cb:27:ad:26:ee:c8:8f:65:4f:c0:23:
ed:9d:55:e4:a1:41:3b:20:b0:c1:c2:59:5f:e2:00:b4:b6:43:
d7:66:6b:b5:22:84:ac:e2:cd:18:06:5b:49:67:7e:80:18:9c:
48:2f:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:04 2024 by rpki-client on console-fra.rpki-client.org