Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_WhVL3YYLaO00xqxZ-yMxvjqHlw.roa
File: _WhVL3YYLaO00xqxZ-yMxvjqHlw.roa (raw, json)
Hash identifier: o/ngLpaE69QIAdaq1LirK1w4251KQG1ARTeEhNCIW5A=
Subject key identifier: FD:68:55:2F:76:18:2D:A3:B4:D3:1A:B1:67:EC:8C:C6:F8:EA:1E:5C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 099E33E6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_WhVL3YYLaO00xqxZ-yMxvjqHlw.roa
Signing time: Mon 20 Jun 2022 07:39:44 +0000
ROA not before: Mon 20 Jun 2022 07:39:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.121.33.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
212.69.11.0/24 maxlen: 24
109.233.184.0/23 maxlen: 24
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161362918 (0x99e33e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 20 07:39:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd68552f76182da3b4d31ab167ec8cc6f8ea1e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:01:47:c4:c9:75:3d:4b:86:70:2b:0e:33:
e9:5a:b3:a5:6e:04:f7:6e:08:25:4f:aa:d5:92:1e:
f6:5e:e8:4b:cd:5a:23:7a:7e:91:24:c8:c1:32:06:
4b:fb:e8:a3:30:20:b0:86:6d:cc:8c:47:7b:66:9a:
5b:0a:a8:58:36:dc:77:5b:97:93:a9:78:18:7e:b4:
55:82:ee:33:6d:49:33:5d:16:b0:fb:f3:b3:93:fe:
e0:14:be:c5:7a:be:a5:c2:6c:ba:4f:de:28:fe:9c:
8b:f5:75:95:b4:d5:31:67:d2:07:ab:a9:93:7e:27:
a7:e1:b7:2d:c6:17:c2:55:87:5f:ae:6c:42:e6:63:
fd:cf:92:5b:39:8c:30:c1:d5:91:d9:91:50:cd:d2:
82:32:9e:2c:90:10:98:0a:c7:2d:51:09:72:5e:65:
16:48:23:b2:69:93:a2:a6:3b:49:4e:63:39:33:33:
e9:d0:79:c2:17:c4:da:42:d2:84:a7:c5:04:45:fa:
ac:89:91:15:02:fc:63:cd:a9:0e:6b:cb:a4:05:24:
55:de:e0:52:55:f5:7c:cc:a2:60:b0:4d:f6:5c:94:
40:55:9d:9c:3a:a4:85:c2:43:0c:db:49:7d:3a:e9:
db:ea:de:13:c0:34:07:9d:42:f1:3e:d1:8a:30:2a:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:68:55:2F:76:18:2D:A3:B4:D3:1A:B1:67:EC:8C:C6:F8:EA:1E:5C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_WhVL3YYLaO00xqxZ-yMxvjqHlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.121.33.0/24
109.121.42.0/24
109.121.45.0/24
109.233.184.0/23
178.253.237.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
19:e3:db:a3:b6:f5:a6:db:9a:24:3a:a9:a8:8c:3c:c8:b6:e6:
bd:a1:ba:75:fd:8a:4e:ab:d7:0a:ca:a0:37:3d:c3:ec:c1:19:
f5:c0:08:b4:ee:07:f4:f5:db:67:1a:98:73:ea:fe:d0:09:74:
ac:c0:a4:db:42:10:fe:f2:2a:14:ab:08:91:cf:86:41:67:82:
21:0b:30:7c:c0:9a:99:bc:dc:69:e6:7e:3a:d6:79:33:80:2e:
72:1f:fd:ea:04:6a:b4:e0:36:ed:2a:64:d9:f1:2a:67:02:59:
d5:c4:a8:c9:f2:2b:6b:76:1a:06:7f:a1:5c:04:20:41:2b:43:
65:1c:7a:cc:99:1c:bb:c0:63:cb:38:a2:79:b9:eb:b1:8c:4d:
66:3b:d2:6a:45:95:56:6a:c3:4e:02:4d:af:3f:15:dd:74:6c:
65:e2:27:18:73:2c:29:65:09:d4:14:cb:52:7c:6d:8d:f4:de:
26:67:de:1d:a0:96:2c:f4:52:e0:dc:86:a1:9b:ed:1a:8f:40:
59:d6:a6:fb:b0:0a:cd:73:88:c4:c2:7c:6b:e3:29:c6:72:74:
d6:61:25:a0:a2:5c:39:c5:a9:8f:e8:59:23:24:5c:78:c7:87:
55:63:34:e8:fb:37:56:f4:61:4b:92:c2:e0:c8:df:c1:a6:6f:
a0:e9:df:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org