Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/20E0163gLaw0_sFCcJnuMUCUxaM.roa
File: 20E0163gLaw0_sFCcJnuMUCUxaM.roa (raw, json)
Hash identifier: OowsRihm3ukBpBc4tRHjumY3zU812FelAX6+Kp0qvLM=
Subject key identifier: DB:41:34:D7:AD:E0:2D:AC:34:FE:C1:42:70:99:EE:31:40:94:C5:A3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09471152
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/20E0163gLaw0_sFCcJnuMUCUxaM.roa
Signing time: Wed 18 May 2022 15:55:59 +0000
ROA not before: Wed 18 May 2022 15:55:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 109.121.44.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155652434 (0x9471152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 18 15:55:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db4134d7ade02dac34fec1427099ee314094c5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:a2:d5:3e:f1:9b:5a:53:c2:06:eb:12:a4:
c6:9e:57:f7:ac:f7:37:96:c1:41:05:53:01:04:94:
15:7d:b6:64:ca:7c:61:77:cb:f9:70:86:dd:75:89:
4d:3b:e9:be:2f:3c:01:6a:cd:62:85:98:7e:c3:12:
2c:b0:cd:d0:e5:58:ae:fb:31:30:b3:83:9e:10:ce:
2f:43:a2:d8:ac:b4:94:6f:58:30:1c:ee:12:9e:9c:
98:65:1f:8a:68:d0:74:19:55:43:40:90:cc:d4:70:
0d:2c:c0:5f:ae:50:f2:de:b9:7d:64:4f:82:d8:1c:
ca:fb:86:e3:75:b1:f4:bc:8c:de:68:24:97:33:27:
eb:61:44:f8:56:a7:49:46:35:f4:ce:52:d1:65:f5:
d8:69:83:41:45:03:55:71:a9:5d:94:97:b6:9f:47:
7b:68:29:37:e2:3a:cb:85:ff:4d:20:01:49:c2:56:
56:f0:ab:93:82:3f:d9:8d:14:d8:50:51:9a:b3:ff:
8d:7f:fe:6a:47:a5:9d:a2:5a:c3:ef:24:89:06:0d:
69:73:75:7b:b8:e4:08:e6:c7:30:93:64:d3:ba:ae:
5d:2f:ed:6b:fc:06:29:8f:ab:f6:27:e3:d3:f4:aa:
1c:86:63:21:63:a8:41:0d:cf:5a:6e:1b:62:09:99:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:41:34:D7:AD:E0:2D:AC:34:FE:C1:42:70:99:EE:31:40:94:C5:A3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/20E0163gLaw0_sFCcJnuMUCUxaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.44.0/24
109.233.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fd:39:98:cf:10:61:b8:34:bf:60:16:b0:5a:02:f4:f2:53:
c6:3a:3b:36:bb:8c:b8:53:d7:54:76:53:8a:74:e9:7f:07:f3:
be:a0:b7:e5:cf:a7:42:e0:0a:49:10:fa:86:1e:f5:08:2c:dc:
8b:2b:11:da:eb:17:9f:1d:31:e9:45:30:e6:fd:b6:b2:51:ff:
74:bc:51:9e:da:11:b0:86:66:e2:d5:98:e3:9c:f0:51:09:43:
07:5c:42:a6:ca:87:97:79:cd:66:b8:03:be:90:00:13:3d:b4:
bf:9c:4f:3b:cf:83:2c:01:97:00:6a:be:29:1a:01:e3:5c:3c:
98:2d:ba:08:c4:b4:3a:95:9b:46:4c:b2:cb:31:06:d0:a7:f8:
53:c8:ef:53:9b:00:4c:b5:6c:1a:04:e7:ac:78:30:8d:83:d9:
7f:80:49:54:87:0f:80:5e:32:e3:05:bf:69:9c:ae:af:2c:40:
f8:22:e2:6f:a4:8b:60:42:ff:77:25:6b:64:c8:8c:e3:f9:76:
ac:9d:e9:08:0b:98:d5:6f:be:e4:08:eb:33:81:52:d0:0b:09:
84:c6:b4:02:08:60:ea:45:d7:cf:bb:12:82:74:f4:99:69:03:
7e:e1:bc:87:88:fe:33:72:29:fb:bd:08:39:19:be:bb:22:f1:
b7:53:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:25 2024 by rpki-client on console-fra.rpki-client.org