Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/hLLJ8ja5Y5HnfyyWMJt2ElyG5sc.roa
File: hLLJ8ja5Y5HnfyyWMJt2ElyG5sc.roa (raw, json)
Hash identifier: TW/lz37ZDREAwgTHr7rLf5nWO9JgomDVKBZ/+y7PyRI=
Subject key identifier: 84:B2:C9:F2:36:B9:63:91:E7:7F:2C:96:30:9B:76:12:5C:86:E6:C7
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 11800D52
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/hLLJ8ja5Y5HnfyyWMJt2ElyG5sc.roa
Signing time: Sat 01 Jan 2022 10:59:43 +0000
ROA not before: Sat 01 Jan 2022 10:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49813
IP address blocks: 109.105.128.0/20 maxlen: 20
109.105.137.0/24 maxlen: 24
109.105.139.0/24 maxlen: 24
109.105.138.0/24 maxlen: 24
109.105.144.0/21 maxlen: 21
109.105.146.0/24 maxlen: 24
109.105.147.0/24 maxlen: 24
5.63.132.0/24 maxlen: 24
5.63.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293604690 (0x11800d52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Jan 1 10:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84b2c9f236b96391e77f2c96309b76125c86e6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:20:ba:9c:ce:20:7c:84:88:28:d1:5e:6f:
dc:69:72:f2:9b:6b:ae:94:a4:f5:c3:14:60:7d:24:
cd:28:f4:49:e4:66:9d:bb:35:34:5a:99:96:48:7d:
75:05:f1:4f:ce:db:35:76:98:bd:85:9f:64:f3:31:
09:51:20:b1:e6:4a:8a:bd:ed:5f:f2:18:6d:03:ab:
2d:fd:33:96:c3:6d:20:2c:85:30:71:f1:fc:5f:d9:
76:79:62:16:b5:80:85:2c:87:e5:8d:4a:80:75:cf:
77:9b:7c:8d:20:40:10:27:9a:10:ac:3c:7f:5c:59:
a8:c9:6b:01:d0:a0:f3:73:52:60:3b:a8:68:1a:85:
ca:37:b9:5b:5f:cd:1a:55:15:9f:a4:59:d1:bb:23:
58:d2:af:a0:2f:40:8a:f9:31:59:a4:aa:ff:82:f4:
05:d6:a6:61:d0:68:0b:d9:dd:dc:1a:a8:ae:f9:39:
29:59:ae:3c:8f:2b:0e:e7:48:99:6a:64:5d:d4:e6:
1a:e0:66:81:c8:df:83:f0:63:93:56:48:31:86:78:
14:41:37:7e:d3:89:22:11:89:d9:59:7b:9a:e1:04:
8a:87:98:41:c8:09:83:9b:65:00:05:e1:4f:96:a5:
6b:70:75:8b:12:9e:d0:84:7b:51:0e:6e:6c:49:f7:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B2:C9:F2:36:B9:63:91:E7:7F:2C:96:30:9B:76:12:5C:86:E6:C7
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/hLLJ8ja5Y5HnfyyWMJt2ElyG5sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.128.0/21
109.105.128.0-109.105.151.255
Signature Algorithm: sha256WithRSAEncryption
cb:78:0e:f3:82:98:1e:a3:22:32:f2:fb:44:87:c9:eb:da:66:
c6:ce:79:a3:0d:23:f9:40:3e:28:50:37:c5:05:f8:29:80:b5:
86:df:6f:42:36:65:6e:fa:39:3a:05:fc:42:f0:e1:04:56:64:
ab:af:ef:ef:17:1e:38:53:eb:f0:55:b2:36:20:c8:76:f6:6d:
0f:35:61:f1:6d:8b:4c:f8:7d:7e:e4:5f:b4:bc:20:d0:fa:16:
14:52:16:04:ad:f9:42:42:c6:3d:0c:ba:69:a2:60:e2:62:af:
34:e6:9b:04:9c:16:65:93:f0:6a:64:ae:de:1a:56:6c:e2:17:
2a:cf:6c:e3:f0:2d:ca:2c:7a:e0:3e:d3:ec:a4:64:df:c5:97:
c4:e5:e5:b6:25:76:5c:e6:fb:5f:18:dc:2c:09:43:1d:95:21:
16:ec:98:ff:16:59:e8:ad:51:3c:a4:cc:52:0b:d4:26:a0:e8:
71:73:da:07:65:af:26:c6:df:18:97:9e:9c:b6:f6:de:7a:39:
4b:a1:e7:00:7c:f9:d8:3b:21:d4:10:99:be:00:dc:5c:97:23:
be:95:56:1b:d8:b2:44:53:92:dd:0f:0c:e4:96:fa:ab:95:e2:
3f:94:21:9f:9b:c6:86:b7:4b:68:ae:bb:a4:43:3d:d8:b1:10:
82:e6:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org