Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/3mohdaGYUYzZkjY5e114CYqJHys.roa
File: 3mohdaGYUYzZkjY5e114CYqJHys.roa (raw, json)
Hash identifier: 3dqn4gH2usCUlfx6zMB4JVZqv5YeHCzUCbf1YfjqSfY=
Subject key identifier: DE:6A:21:75:A1:98:51:8C:D9:92:36:39:7B:5D:78:09:8A:89:1F:2B
Certificate issuer: /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial: 01843E33C18C43613C3761949C1708E24B48
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/3mohdaGYUYzZkjY5e114CYqJHys.roa
Signing time: Thu 03 Nov 2022 15:54:50 +0000
ROA not before: Thu 03 Nov 2022 15:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202199
IP address blocks: 213.109.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:33:c1:8c:43:61:3c:37:61:94:9c:17:08:e2:4b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Validity
Not Before: Nov 3 15:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de6a2175a198518cd99236397b5d78098a891f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:7e:07:ef:91:5d:6e:3f:ac:14:9d:bd:31:
e9:23:81:b7:b6:e7:f1:96:02:91:64:15:98:c5:b5:
be:c8:ef:2b:64:99:ee:aa:63:ec:f8:3e:87:3f:f6:
28:e4:a1:be:da:a2:8b:db:84:a2:ec:68:19:75:56:
43:fb:89:f4:f6:8c:f1:b9:9a:71:78:70:3e:3f:37:
b6:b0:a1:e4:27:6c:c1:9b:78:9b:e6:c7:57:5f:6f:
17:9d:26:be:e2:ee:f9:99:aa:6d:1b:5b:da:5b:c6:
e8:fd:51:65:3d:d3:02:ca:f2:36:80:be:a6:24:ef:
ae:15:55:88:f9:3e:f5:db:ab:b7:89:40:fe:30:a0:
cc:2d:cb:6c:49:31:fc:e0:7a:e8:e4:bd:37:62:af:
7e:7c:05:ba:ed:6f:d8:6f:62:2d:8a:59:7a:e6:d8:
7a:50:6b:ea:d5:7b:5e:48:9c:d4:de:fc:69:8c:de:
2a:4b:04:50:fa:7b:3d:61:27:82:d1:ca:dd:2a:7f:
e1:41:57:c0:de:ff:53:28:f1:f4:db:e5:90:ca:bf:
0a:a0:fa:23:2e:65:c7:7f:fb:58:ac:92:2f:dc:f9:
b5:36:00:64:ad:8a:4b:24:71:a6:17:d0:69:81:f4:
78:68:69:d9:aa:ea:e3:c1:8f:22:76:83:6a:86:a6:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6A:21:75:A1:98:51:8C:D9:92:36:39:7B:5D:78:09:8A:89:1F:2B
X509v3 Authority Key Identifier:
keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/3mohdaGYUYzZkjY5e114CYqJHys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
35:64:3c:a8:90:26:3e:77:8a:5d:8e:70:26:2a:d0:a9:9f:eb:
5c:ae:22:ec:bc:71:89:c2:98:de:c8:ba:3f:e1:19:58:91:df:
ce:66:7f:c7:a2:4e:bc:15:db:64:90:d3:5d:6f:4f:32:5b:2b:
f0:55:97:62:a5:44:6b:63:30:21:31:49:5e:3d:a8:af:04:71:
68:ff:fa:3a:e5:1e:57:8a:85:ea:8e:2e:f7:70:15:e8:52:13:
56:83:22:20:f0:8e:4d:f1:a1:8c:e2:22:d8:af:69:ad:6f:b6:
c0:75:78:cc:68:07:9f:d2:4c:d7:72:10:ad:e5:82:0e:4a:65:
c7:a5:4a:6a:4b:25:ac:30:8b:73:a9:6a:62:56:6e:9e:50:2f:
d7:2c:5c:70:25:4b:32:aa:38:44:67:a6:72:b5:e5:49:22:25:
4f:0e:49:63:89:0a:f5:d1:79:d7:ab:9d:14:66:ed:3f:b7:3c:
2a:3a:37:31:2d:a8:73:5b:38:c9:58:08:1f:ab:6a:e5:10:77:
fa:5c:a4:de:4c:fc:96:ca:05:cb:f4:60:d2:be:53:b2:62:24:
2c:ce:2c:6b:6d:d2:06:06:03:73:0c:f7:d9:4e:d2:88:1c:44:
02:d0:0b:37:fd:61:e5:48:c8:d9:41:7d:54:17:c0:93:f1:33:
b7:ec:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:05 2023 by rpki-client on console-fra.rpki-client.org