Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/_KkbzNYxUQKtRLGyLkcIvu_SvgU.roa
File: _KkbzNYxUQKtRLGyLkcIvu_SvgU.roa (raw, json)
Hash identifier: K+5XJxr2DMG56uDlm5S1J806vL1BbMZycloFiKyKQss=
Subject key identifier: FC:A9:1B:CC:D6:31:51:02:AD:44:B1:B2:2E:47:08:BE:EF:D2:BE:05
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018360F69D20F900AA48567A47F65DB925F3
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/_KkbzNYxUQKtRLGyLkcIvu_SvgU.roa
Signing time: Wed 21 Sep 2022 16:51:58 +0000
ROA not before: Wed 21 Sep 2022 16:51:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 109.203.160.0/22 maxlen: 24
37.49.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:f6:9d:20:f9:00:aa:48:56:7a:47:f6:5d:b9:25:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 21 16:51:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fca91bccd6315102ad44b1b22e4708beefd2be05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:76:b7:91:ff:b7:07:71:e5:79:fb:26:5d:
e3:ab:53:25:2d:78:c1:64:41:2a:04:a4:d4:28:7d:
9a:4e:a8:7e:6a:8d:08:3a:c0:93:ba:bd:a3:42:a3:
09:6b:78:22:d8:74:c7:59:86:7c:ed:33:c2:2f:bc:
cf:c1:cb:64:c7:ec:21:f4:0d:59:cf:91:ee:8a:fb:
20:cc:18:89:37:38:4d:be:d9:35:12:4e:69:6b:ad:
a2:10:e9:c6:95:27:06:a0:2b:ed:36:fd:39:44:b8:
ab:b8:cf:85:58:91:ae:0f:d8:db:ee:77:79:22:b1:
80:17:6b:c2:91:2b:d6:ee:a2:65:7f:98:01:aa:17:
9a:06:f3:99:06:4d:c8:ed:9b:7d:e2:81:8a:79:20:
d0:d3:9d:8f:7b:be:ae:df:bc:af:b3:75:e8:e7:79:
40:72:b8:49:49:b9:b0:0a:72:c6:29:38:4c:82:be:
0f:7c:c9:c4:66:a5:3f:55:05:92:e4:83:44:d3:a2:
63:70:55:f9:8a:74:df:fa:d5:31:7a:0d:2f:a8:03:
82:e5:00:0a:4d:d1:60:5e:56:d9:29:c5:7b:82:1a:
98:34:4a:ae:5c:8e:f9:b0:41:59:ab:b7:1a:10:33:
aa:4a:24:c5:cb:bd:5a:93:6f:d8:ce:18:f0:82:e9:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A9:1B:CC:D6:31:51:02:AD:44:B1:B2:2E:47:08:BE:EF:D2:BE:05
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/_KkbzNYxUQKtRLGyLkcIvu_SvgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/22
109.203.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:2f:91:73:ce:c7:00:d4:7f:2b:bd:cf:80:2c:0f:4c:33:1b:
d6:ae:f0:05:80:86:4b:5d:92:32:3b:a4:2f:b8:1c:35:8c:3b:
fd:a5:27:44:fb:ea:16:63:8e:b5:ec:60:5e:34:e3:77:86:6e:
41:d7:34:ea:dc:60:bb:c5:08:24:62:91:5b:2c:f0:1d:ca:67:
57:aa:76:58:fc:58:a0:d3:df:3a:65:e7:5d:47:ff:ad:1c:d9:
f5:85:b7:60:4a:5b:7b:da:8e:56:61:28:1d:41:fd:a0:df:ec:
42:07:13:66:0c:e8:2e:b2:1d:28:ac:95:5e:0d:18:53:c4:ca:
d6:0c:78:97:1f:bf:89:cd:6c:3c:c6:a4:7c:79:52:91:98:78:
f2:69:3a:c7:b5:8e:5f:d4:54:22:15:48:d3:40:7f:75:4e:59:
2b:d0:57:7b:15:79:23:d6:b2:18:b2:5f:1d:10:23:60:38:c4:
93:4a:1c:12:66:af:70:c0:8d:c4:8f:78:6a:41:bb:14:5b:2f:
f5:76:91:4d:ea:26:23:3c:2b:89:7c:a4:6a:32:6d:87:77:72:
94:3d:19:32:ae:91:de:ad:67:83:fc:f1:96:c4:9b:64:2a:f2:
f2:cd:8b:a9:65:70:e8:c1:9f:f9:6e:73:7d:61:d9:d4:a4:73:
b0:d0:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:22 2023 by rpki-client on console-ams.rpki-client.org