Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Lou0pyVfsmkNeX3KhCuAPi_XkJc.roa
File: Lou0pyVfsmkNeX3KhCuAPi_XkJc.roa (raw, json)
Hash identifier: ixp/292RI1gh9Ol3BcCp0aHXXBfldXMN6mvyVJxY5lg=
Subject key identifier: 2E:8B:B4:A7:25:5F:B2:69:0D:79:7D:CA:84:2B:80:3E:2F:D7:90:97
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: ABDC1C
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Lou0pyVfsmkNeX3KhCuAPi_XkJc.roa
Signing time: Sat 01 Jan 2022 00:55:58 +0000
ROA not before: Sat 01 Jan 2022 00:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 109.107.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11263004 (0xabdc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 00:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e8bb4a7255fb2690d797dca842b803e2fd79097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3e:3d:f3:51:4e:e8:e2:40:e3:9d:b3:45:e3:
4c:9a:c8:9b:43:10:44:9a:47:a1:db:52:85:ab:81:
95:8a:da:5e:eb:23:d8:3f:95:f5:78:ba:74:42:07:
8a:1e:ae:f3:ad:a4:79:01:c5:69:c5:00:43:7a:b1:
06:3b:b1:12:24:9c:9f:77:0e:b9:d5:92:45:97:de:
d7:15:8d:ff:0f:f2:b0:12:e1:59:9e:b2:0b:b2:cf:
38:27:02:fc:7c:72:d1:0e:ae:74:dd:1d:cc:80:1e:
f0:84:85:78:62:6d:0f:95:da:51:1d:e9:42:7d:d3:
d9:40:9f:e8:f0:77:cd:a1:1c:1c:26:62:2f:91:21:
e9:3b:ae:9f:ed:b6:7f:e8:e5:d8:03:34:8f:82:91:
c7:2e:c8:46:30:ce:36:3a:9f:fa:20:e8:0b:f5:82:
95:85:33:56:b6:2b:a5:c9:67:04:2c:01:45:29:f6:
de:35:c2:75:34:c8:5a:15:95:9a:13:63:ab:73:70:
95:2b:e3:f8:ed:86:d4:f9:7c:73:5c:12:46:5c:42:
1d:84:41:f6:df:46:9c:a6:0f:8d:f3:b9:d7:c5:d9:
1e:60:a3:bd:a5:d2:cb:a7:e7:62:90:ae:f5:99:83:
ca:ac:6b:6e:f0:81:e7:37:42:9d:3c:d1:99:f6:f5:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:B4:A7:25:5F:B2:69:0D:79:7D:CA:84:2B:80:3E:2F:D7:90:97
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Lou0pyVfsmkNeX3KhCuAPi_XkJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.132.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e4:4d:35:bf:b2:46:7b:44:08:d0:9a:1e:d6:a4:5a:cc:24:
6e:61:92:63:3f:a3:f9:ec:db:b6:af:df:de:5f:32:75:91:d5:
35:6f:28:8c:a4:35:c0:ba:d9:7a:9c:bd:96:11:3f:0a:17:6a:
37:69:43:b5:03:b6:b8:47:22:f3:dc:f5:0a:65:45:5f:b7:f1:
29:f8:8a:09:98:83:c0:db:bc:d2:c3:b3:99:09:0a:98:32:19:
84:9a:49:1e:71:f1:c3:a7:35:ad:cc:08:0e:56:85:0c:aa:8f:
c9:48:e9:07:2d:45:da:b0:bd:9b:53:b1:8d:4f:52:dd:c8:a9:
d2:a1:09:0c:6d:c6:f9:9f:e3:f7:9c:c6:48:ae:2b:d7:6d:3a:
20:79:67:7e:eb:2c:b9:cf:0f:ab:9a:f3:63:64:10:77:a6:46:
71:a4:8e:39:d2:1f:22:36:5f:97:2b:33:2c:da:d8:e7:6f:8d:
10:fe:22:11:78:8d:49:cd:12:39:b7:b4:db:1d:e0:9f:3c:bc:
2f:b3:91:4f:60:55:1b:9e:59:1b:63:63:76:f4:9a:58:b9:98:
98:f0:2f:7c:71:56:eb:2b:2b:fe:39:1c:44:bc:78:85:3b:b8:
62:ef:0c:1d:b3:a1:1d:d9:5d:bb:2e:f1:92:9f:09:49:cc:fe:
91:fd:ed:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:45 2024 by rpki-client on console-fra.rpki-client.org