Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/7s_89H4OuypHeoDab2QnNS-sm1E.roa
File: 7s_89H4OuypHeoDab2QnNS-sm1E.roa (raw, json)
Hash identifier: E/BuwqAtYDmVfg4I3dKaiya1dChy+Uixac5zyYoKcmY=
Subject key identifier: EE:CF:FC:F4:7E:0E:BB:2A:47:7A:80:DA:6F:64:27:35:2F:AC:9B:51
Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial: 0185523E7048D163FAB5C10131F60D9F8DC9
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/7s_89H4OuypHeoDab2QnNS-sm1E.roa
Signing time: Tue 27 Dec 2022 06:21:41 +0000
ROA not before: Tue 27 Dec 2022 06:21:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8829
IP address blocks: 109.204.128.0/19 maxlen: 19
109.204.160.0/20 maxlen: 20
109.204.192.0/18 maxlen: 18
2a00:8780::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:3e:70:48:d1:63:fa:b5:c1:01:31:f6:0d:9f:8d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Validity
Not Before: Dec 27 06:21:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eecffcf47e0ebb2a477a80da6f6427352fac9b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:39:fb:35:d3:47:62:1b:fb:7a:21:f3:2f:31:
8d:e0:0b:fd:61:38:4d:d3:0c:8b:0d:bc:31:c3:bd:
85:08:80:32:df:59:4d:dc:43:8a:de:e0:1d:2c:26:
9e:b4:72:70:04:44:98:04:08:82:32:b5:e2:18:9b:
97:6e:78:67:89:55:38:c9:87:48:74:b9:19:22:30:
7e:4a:e1:0e:7d:8f:dd:a9:1e:27:8b:84:9f:3b:31:
49:6f:68:43:9c:c1:fa:73:fe:f9:a8:6b:be:ed:1d:
a1:98:77:d6:4e:ad:7d:a1:78:a3:68:d7:3b:df:6e:
28:aa:ea:b9:f8:14:07:66:61:ab:21:b5:89:75:b4:
4e:9d:40:fe:c6:90:b5:62:59:6a:a3:1d:dc:0d:f6:
17:2f:6f:05:65:b7:1d:3b:36:2f:f6:ba:9b:8e:16:
5f:c6:99:66:d2:34:ea:a0:7b:8a:e9:a4:84:12:70:
b1:bd:26:f1:01:07:84:f7:cd:8d:99:84:55:28:d1:
85:26:be:57:f9:14:e7:43:55:d9:e0:12:1e:fe:a9:
03:4b:46:89:b5:cd:29:27:9a:c5:53:6c:cf:93:cf:
d7:9e:a2:cb:f3:2a:7f:ed:8d:e7:50:96:93:86:02:
04:4b:b6:68:d5:25:72:76:5d:fd:06:3d:6c:62:e7:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CF:FC:F4:7E:0E:BB:2A:47:7A:80:DA:6F:64:27:35:2F:AC:9B:51
X509v3 Authority Key Identifier:
keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/7s_89H4OuypHeoDab2QnNS-sm1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.128.0-109.204.175.255
109.204.192.0/18
IPv6:
2a00:8780::/32
Signature Algorithm: sha256WithRSAEncryption
7c:c9:be:e8:2b:32:ab:ee:7b:28:74:72:ef:ee:cf:34:0d:22:
14:8b:1e:3a:7c:bd:e7:db:f8:96:03:83:62:6c:2d:82:42:e7:
97:2e:e9:ef:b2:38:f5:89:18:70:ec:d3:ed:21:33:c3:78:4a:
ce:60:02:be:42:dd:92:98:69:d8:29:83:c5:dc:1e:55:39:ca:
54:10:71:90:1c:5e:ef:93:6c:ce:80:63:20:7e:f8:ab:72:61:
b1:e4:70:0d:74:fc:f6:00:21:b8:45:ab:cb:11:13:50:a3:13:
88:75:17:04:54:4f:ff:eb:ab:b3:8e:50:89:40:1e:3e:6a:c7:
e7:e6:5f:6f:f8:03:4c:0c:82:ac:b7:49:46:2c:b8:7d:7b:b2:
f3:ed:ad:89:c0:ff:19:b2:2d:56:63:e3:bc:87:b8:f1:c7:ea:
7b:61:fd:26:83:0b:2a:d0:65:8c:20:e1:9c:e1:c7:a9:2b:c6:
01:3f:37:5f:af:b3:8d:91:60:6b:f9:0e:69:dd:c7:34:c6:f5:
03:06:d8:2e:cd:5c:ac:07:16:10:eb:e5:4b:e1:61:f3:27:43:
4c:5d:c2:03:f4:81:4c:90:f8:9f:49:84:f7:d1:34:90:57:eb:
54:32:b8:78:99:bd:59:9a:c6:42:c8:07:96:b6:55:17:a6:f1:
ca:1c:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org