Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/sDYyKebHTQgU5_bPWH5905c9iQk.roa
File: sDYyKebHTQgU5_bPWH5905c9iQk.roa (raw, json)
Hash identifier: xqFh/HP2tzBQG2rxmFYT3OOcua0DemOd4ylf66wsVKk=
Subject key identifier: B0:36:32:29:E6:C7:4D:08:14:E7:F6:CF:58:7E:7D:D3:97:3D:89:09
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 0B958349
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/sDYyKebHTQgU5_bPWH5905c9iQk.roa
Signing time: Sat 01 Jan 2022 11:56:18 +0000
ROA not before: Sat 01 Jan 2022 11:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24725
IP address blocks: 109.70.105.0/24 maxlen: 24
109.70.104.0/24 maxlen: 24
109.70.107.0/24 maxlen: 24
109.70.106.0/24 maxlen: 24
2001:4130:107::/48 maxlen: 48
2001:4130::/32 maxlen: 48
2001:4130::/34 maxlen: 48
2001:4130:18::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194347849 (0xb958349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Jan 1 11:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0363229e6c74d0814e7f6cf587e7dd3973d8909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:88:26:5c:06:7d:d6:5b:57:87:7f:b2:50:
50:02:d8:ab:7b:56:de:fd:11:08:b2:e8:5e:a6:5d:
9b:a4:4e:bb:cb:c4:a7:80:38:5e:30:d7:9d:52:fa:
b3:e4:c6:19:5e:a4:a9:d9:9a:c3:f2:f1:28:47:a0:
ea:12:2c:7f:26:1c:bf:1a:83:91:bd:ab:92:19:07:
6d:c8:22:00:76:6e:b1:6b:b3:71:b1:2b:9b:eb:0c:
64:8d:d5:8d:83:0a:37:4e:cf:6f:7a:3d:4d:36:27:
b4:f9:4e:6e:f2:e2:aa:08:49:ef:eb:af:af:1c:d8:
42:43:8e:eb:93:71:45:5d:f1:a1:32:10:1f:8a:b1:
7d:fa:ae:1f:85:a6:f2:2a:f2:fb:05:73:af:66:2c:
2c:72:da:f2:90:79:92:f3:3b:b4:d2:ab:8f:4d:ea:
df:e5:28:66:19:01:59:45:f0:20:92:74:76:e9:c9:
16:4d:5f:f2:1b:e7:8d:68:05:6d:16:45:e9:42:b0:
11:b5:45:6f:db:35:d2:7c:2f:a0:e1:c6:c4:0e:43:
07:63:48:a4:85:e4:94:73:4b:c6:e6:d1:85:06:e3:
59:bd:8f:3c:d6:15:0f:ed:c5:31:2f:29:f4:9f:d8:
81:78:bc:e6:d9:fc:da:f5:61:92:f8:66:48:ad:09:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:32:29:E6:C7:4D:08:14:E7:F6:CF:58:7E:7D:D3:97:3D:89:09
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/sDYyKebHTQgU5_bPWH5905c9iQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.104.0/22
IPv6:
2001:4130::/32
Signature Algorithm: sha256WithRSAEncryption
1c:f9:b8:d4:9c:0b:6c:f6:c1:99:01:38:e1:fd:36:6d:3e:f8:
df:41:f5:81:89:de:4a:6a:b2:82:a2:7c:55:d4:55:31:94:df:
51:4f:0c:1c:13:e5:6a:b0:ff:77:7f:b2:a3:73:c3:79:ee:13:
ea:7b:55:af:15:70:e1:4e:a3:1d:6d:59:d8:8b:5b:d6:ff:2c:
18:87:dc:01:70:ba:74:e8:14:32:74:f6:cc:8f:9c:30:02:e2:
c0:e6:2a:9e:6b:0d:a4:33:5f:ea:06:48:68:da:ae:a3:9d:a4:
a9:bf:d1:c0:e5:b9:4d:26:5e:5c:32:37:5b:21:68:14:1c:d5:
49:f6:e5:6f:4f:6e:b4:e5:fa:57:1b:66:da:b9:e1:81:f0:10:
de:03:1b:a2:4b:c8:83:9c:4f:a4:43:d6:e2:cc:6b:14:cb:22:
df:2a:3c:3e:ce:66:c5:0f:f3:a6:0a:5c:cb:fa:c1:c9:26:88:
08:ed:ba:63:f7:3f:26:82:70:82:9a:70:1e:56:91:45:4d:f1:
3c:c5:9b:83:60:3c:4d:fd:ef:17:d9:74:f2:9f:c9:40:cf:e6:
28:52:a6:93:75:f1:f6:70:b1:ef:a4:81:2d:ac:c5:c1:b5:8a:
77:2f:33:0d:7f:95:e2:02:14:eb:60:85:07:a7:83:d9:54:f2:
46:ab:b7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:33 2024 by rpki-client on console-fra.rpki-client.org