Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/8xRkvlWQ75z6kWozZZBkIfx5Skc.roa
File: 8xRkvlWQ75z6kWozZZBkIfx5Skc.roa (raw, json)
Hash identifier: uDalZmcZqNYyyFt3TSvGryJVcsiUjCYYu2338OrfW6g=
Subject key identifier: F3:14:64:BE:55:90:EF:9C:FA:91:6A:33:65:90:64:21:FC:79:4A:47
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 05EDA766
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/8xRkvlWQ75z6kWozZZBkIfx5Skc.roa
Signing time: Sat 01 Jan 2022 09:02:52 +0000
ROA not before: Sat 01 Jan 2022 09:02:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202306
IP address blocks: 109.237.96.0/22 maxlen: 22
109.237.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99460966 (0x5eda766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Jan 1 09:02:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f31464be5590ef9cfa916a3365906421fc794a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:f1:9b:0a:9c:e6:51:ce:0c:57:80:fc:c7:
bc:cc:a9:71:c9:ab:64:d7:a0:86:92:02:c8:0b:cc:
e1:d1:9b:ea:2a:a7:d1:f8:9e:e7:27:50:b7:18:90:
35:0a:c6:57:c1:11:01:69:91:ac:76:7b:65:1e:e2:
ed:fb:29:a4:30:c4:32:97:79:dc:3e:2f:66:fd:e5:
19:0c:ab:be:14:ba:2e:94:28:55:17:c3:56:aa:e1:
36:3b:d4:1c:8b:39:a0:67:c5:de:cd:40:c2:be:5e:
a8:4a:04:48:bc:28:ab:da:45:8a:dd:54:bd:c8:ba:
7b:ab:be:dc:f9:f5:78:ea:d8:c4:de:30:38:2d:a6:
e6:db:ab:42:a6:2d:fd:92:85:d9:f1:fe:da:55:08:
fb:c6:a8:92:a6:04:21:30:c0:e6:d1:30:0c:79:15:
80:b1:7b:f6:5b:4a:e4:a6:5e:c8:d0:36:f8:26:8d:
9f:1a:4c:33:ba:ee:54:0b:32:8a:d8:14:06:0b:b0:
fb:db:56:c8:e1:c0:a4:00:19:42:7e:66:36:2a:d3:
d5:a1:22:3f:c8:93:64:3d:c4:b4:e1:5a:2c:d6:d2:
b2:7e:32:4f:1f:35:e8:aa:7b:6c:3e:a4:76:d1:c7:
3d:19:f2:51:88:3a:12:d4:37:29:fc:de:02:22:22:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:14:64:BE:55:90:EF:9C:FA:91:6A:33:65:90:64:21:FC:79:4A:47
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/8xRkvlWQ75z6kWozZZBkIfx5Skc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.96.0/21
Signature Algorithm: sha256WithRSAEncryption
24:6c:bc:40:0a:e0:23:83:39:3a:bb:d0:39:eb:a8:9e:d9:ba:
eb:d6:96:db:f4:f4:95:02:98:e6:4f:42:b9:13:3b:b3:09:31:
13:43:ae:fa:40:66:3d:3b:a3:37:46:1e:92:b1:11:cd:0a:32:
c8:4a:99:6f:8a:cb:ab:ac:81:20:29:ec:db:4b:c3:74:77:05:
43:13:78:a8:bb:68:78:0f:4b:a1:da:a5:5e:17:b2:92:6a:d4:
8f:91:f1:fe:3f:e1:c0:11:4c:96:1c:cd:f0:75:4b:56:e0:76:
42:49:45:f4:dd:5d:19:bb:20:c9:c6:76:05:2b:4b:d4:da:de:
64:5b:44:0f:53:7d:6b:65:10:b1:a1:13:0c:f9:d0:4d:7e:84:
52:35:f6:b0:0f:97:6b:34:b9:b7:f4:84:b3:fd:fa:22:22:e8:
8e:d9:2e:3c:6c:56:dc:bd:88:3a:fe:5c:f2:d2:24:e4:a8:9b:
39:87:3d:ca:20:3e:40:91:ba:8e:99:05:20:2b:c1:2b:ca:f6:
fb:83:ac:ed:6a:38:08:46:c5:f2:87:d6:b1:50:9e:17:29:9f:
53:7f:9b:86:84:5e:f0:27:f1:c3:3d:49:fa:db:3d:2d:e8:ca:
2e:f5:6c:4b:a3:5e:34:40:43:4e:e8:3b:05:05:99:58:a5:36:
92:97:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:58 2023 by rpki-client on console-ams.rpki-client.org