Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dw8pYYiBQP0fT8FWbiDjadSp4Yw.roa
File: Dw8pYYiBQP0fT8FWbiDjadSp4Yw.roa (raw, json)
Hash identifier: ZRWDdYmNxKwJUpHIXu82EphWGUSlUCMRMNKz/GkZ4YQ=
Subject key identifier: 0F:0F:29:61:88:81:40:FD:1F:4F:C1:56:6E:20:E3:69:D4:A9:E1:8C
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01847BDC93759D3C59C2D9D2FBCDFDEBC7C8
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dw8pYYiBQP0fT8FWbiDjadSp4Yw.roa
Signing time: Tue 15 Nov 2022 15:16:04 +0000
ROA not before: Tue 15 Nov 2022 15:16:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47193
IP address blocks: 109.248.64.0/19 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:dc:93:75:9d:3c:59:c2:d9:d2:fb:cd:fd:eb:c7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 15 15:16:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f0f2961888140fd1f4fc1566e20e369d4a9e18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:1b:fd:66:1e:b0:e0:8d:db:82:60:11:37:
e4:4c:57:37:63:7d:91:96:aa:e1:98:f1:94:70:a3:
3a:17:e3:95:fe:be:26:35:5f:d8:cc:d9:3c:cc:62:
99:54:06:87:f2:aa:30:68:b1:3c:e5:41:c7:95:57:
5f:68:70:24:9c:bd:03:58:9b:e1:d0:a5:bd:04:a0:
7b:ae:41:c7:c3:e0:2e:ea:05:ac:20:bd:91:0e:7f:
3a:3d:98:db:ae:df:d8:75:a5:b7:4c:d3:a2:d2:19:
eb:53:ef:aa:06:cb:57:ae:d9:fc:03:34:e4:30:1c:
75:ed:c8:a4:65:07:08:ff:ec:74:c5:a5:8a:89:20:
b9:6c:72:ea:c5:64:f0:a1:c7:fe:93:8d:18:71:b7:
d6:c0:77:d7:0f:ce:0c:13:29:93:c1:6f:a2:a0:52:
fd:10:fa:f9:ea:c5:79:ef:3d:64:30:2f:eb:cd:04:
0e:84:00:53:ee:ba:e8:aa:07:b1:fb:e0:03:fc:ba:
45:89:64:69:40:a2:7b:f5:7a:42:40:24:4a:7c:69:
93:ec:aa:75:ea:7a:e2:2e:12:df:3b:33:ef:2c:8f:
58:cd:44:7f:36:c8:8c:2a:b6:6e:33:dc:fe:b6:b6:
82:91:40:c8:ad:d4:b0:43:ba:13:a3:df:a3:30:8a:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0F:29:61:88:81:40:FD:1F:4F:C1:56:6E:20:E3:69:D4:A9:E1:8C
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dw8pYYiBQP0fT8FWbiDjadSp4Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:da:88:6f:1f:a6:6a:45:91:94:5b:51:26:6e:be:b1:19:14:
f7:87:3c:8a:50:98:1e:99:c5:f9:87:2e:49:b9:c8:c9:08:e8:
10:63:55:b4:a0:2e:99:81:17:96:f1:f5:8a:4e:93:a7:3b:95:
e2:0d:52:da:6a:1a:94:09:e8:50:2b:0b:8a:9d:d7:a7:9f:16:
de:53:6c:73:d6:60:d9:65:88:3f:c3:96:d6:7b:41:97:9f:83:
c8:cb:39:b7:79:c4:8e:17:92:66:d9:14:ff:43:ce:fd:1a:5d:
42:0b:26:33:a7:0d:e5:9c:8c:ac:51:de:eb:b8:d1:85:a7:c8:
f6:e8:0b:6a:6d:7d:51:b8:30:26:99:f5:24:68:84:a4:c3:4e:
39:d5:4f:21:3d:d0:c1:c1:0b:3f:e9:e1:10:ad:cb:16:b8:56:
2c:81:ae:ee:ef:bb:1b:e1:e1:7a:7d:b6:0d:28:d0:4c:ab:56:
ac:92:9b:6d:12:10:d3:c4:6b:64:fc:df:3c:83:6a:15:da:8b:
19:7e:69:93:59:7d:e1:9b:a9:b9:3d:4f:48:21:15:00:ba:1f:
56:4c:5b:04:a6:92:0b:76:aa:b8:51:49:c7:ac:eb:0e:5b:de:
b8:47:a2:92:3b:b2:56:07:b9:b9:fd:45:fe:cb:12:a7:73:e5:
dd:ef:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org