Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/S1SsAZ6vqiCp7_uRHjbQwo69Mm0.roa
File: S1SsAZ6vqiCp7_uRHjbQwo69Mm0.roa (raw, json)
Hash identifier: gfRESCaYMpi95oPSAL92inFEttV4dt0A+g67EWRCaRw=
Subject key identifier: 4B:54:AC:01:9E:AF:AA:20:A9:EF:FB:91:1E:36:D0:C2:8E:BD:32:6D
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 37071BEA
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/S1SsAZ6vqiCp7_uRHjbQwo69Mm0.roa
Signing time: Sat 01 Jan 2022 11:00:21 +0000
ROA not before: Sat 01 Jan 2022 11:00:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49478
IP address blocks: 109.248.252.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923212778 (0x37071bea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 1 11:00:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b54ac019eafaa20a9effb911e36d0c28ebd326d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:ca:26:30:2b:85:74:11:d8:73:ee:86:f4:
dd:21:b7:b7:6f:83:0a:01:df:ee:26:31:28:b2:73:
99:3e:bb:24:86:1e:e2:c6:20:5d:90:cb:81:52:24:
30:e7:d7:6c:82:99:2c:c7:d9:d9:01:a8:6f:8d:dd:
b7:e5:00:ca:fa:dd:86:a7:43:d2:29:84:2b:8b:1f:
77:92:7b:cc:6a:34:8f:55:10:86:31:2a:f1:51:c9:
57:d1:3b:9e:3d:58:76:6d:84:94:53:42:bd:f1:32:
0a:89:86:92:1e:e9:5e:f9:39:bd:6e:70:21:97:5b:
39:34:b1:25:7f:b1:88:26:2b:a0:d0:bb:7c:83:8a:
b4:21:eb:eb:61:df:20:f2:d8:cc:74:ca:32:69:b1:
36:0d:b0:bf:f2:97:a8:8a:da:71:49:f0:93:4f:9a:
33:b8:07:ef:9b:15:bf:3b:15:e8:66:4a:7c:28:91:
7d:bb:73:69:f0:bc:9e:f3:59:2d:f5:46:cc:09:85:
19:77:d6:4b:2d:c7:eb:1e:17:4e:a9:2f:a5:d5:11:
ef:e0:67:dc:40:68:7c:5c:bc:98:ae:08:00:93:9e:
8d:80:17:b1:aa:6d:cb:03:cf:0c:35:d1:f9:8c:c7:
24:1e:2a:03:6a:4c:13:1e:fe:a0:47:30:94:66:85:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:54:AC:01:9E:AF:AA:20:A9:EF:FB:91:1E:36:D0:C2:8E:BD:32:6D
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/S1SsAZ6vqiCp7_uRHjbQwo69Mm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.252.0/23
Signature Algorithm: sha256WithRSAEncryption
00:e3:81:5e:a1:74:9e:92:f9:55:c9:bd:66:e9:14:b1:ef:c5:
8b:51:6e:e8:4f:ba:e5:e9:f7:a1:34:4e:24:72:0e:a5:90:56:
d0:a7:fd:04:87:63:33:45:d3:78:d7:96:14:2a:9c:bb:b7:64:
36:2f:ec:00:d2:de:81:ef:13:cd:c4:65:dd:83:53:ae:43:0b:
ba:a6:21:36:39:8d:08:ae:2a:98:b8:95:11:4a:85:8c:6a:21:
13:91:65:4e:72:d0:b8:b3:7d:1e:3e:e9:82:bb:7b:cc:44:95:
00:e0:5b:38:f0:40:fc:0f:4b:60:1a:29:49:d0:cd:c7:d9:be:
9b:da:1d:32:12:f0:78:3b:83:81:57:8b:32:c0:1b:20:8e:60:
18:61:74:10:05:38:39:ef:f1:3b:af:48:b3:3e:c2:89:28:61:
9c:d9:60:e6:0e:7f:40:66:fa:16:e7:db:b9:f0:d1:55:ed:97:
fc:c5:ea:b8:f4:b1:99:2d:d3:dc:c8:80:d3:28:14:a7:d0:e6:
7c:1f:4a:8d:f6:43:6a:46:88:c7:2b:7d:e2:76:fc:97:43:bb:
23:fc:e2:98:1d:ae:6c:b3:2d:ff:dd:f7:76:f8:3f:ce:ad:0c:
9c:f8:55:0f:bf:8a:c7:67:63:ed:93:d5:70:ba:59:2c:40:e7:
4f:3d:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org