Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/XDs-29_NPuOZ4yp0HShnS03hPL8.roa
File: XDs-29_NPuOZ4yp0HShnS03hPL8.roa (raw, json)
Hash identifier: 8m36JqSGFLrpKd8xeCcJQe2aqkNRtrh2lLTYDfX0AaQ=
Subject key identifier: 5C:3B:3E:DB:DF:CD:3E:E3:99:E3:2A:74:1D:28:67:4B:4D:E1:3C:BF
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 018544B6FFD211A382FEA20AE89696C39567
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/XDs-29_NPuOZ4yp0HShnS03hPL8.roa
Signing time: Sat 24 Dec 2022 15:18:41 +0000
ROA not before: Sat 24 Dec 2022 15:18:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58192
IP address blocks: 109.122.251.0/24 maxlen: 24
109.122.250.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:44:b6:ff:d2:11:a3:82:fe:a2:0a:e8:96:96:c3:95:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Dec 24 15:18:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c3b3edbdfcd3ee399e32a741d28674b4de13cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:a6:4d:f4:16:3d:d5:0d:db:1b:80:f1:aa:
a2:d6:0c:90:f9:68:1a:80:e3:cf:fc:ab:b6:7d:2a:
f9:39:5b:33:23:18:b3:39:85:d3:a5:bc:db:1c:a0:
86:e9:a6:22:2a:b9:21:fa:b5:eb:f6:03:93:9a:be:
3e:bd:25:f2:5e:65:6f:2e:ee:62:35:8a:28:4f:4d:
14:06:90:1f:32:87:0f:c4:77:05:09:5f:56:33:9d:
7f:4b:c0:cf:7a:f4:b1:a3:0b:1b:6e:6f:90:97:b4:
4f:89:35:f0:df:ec:89:be:b2:7c:24:4f:51:d6:ca:
a5:14:b4:4d:47:6a:96:2a:4d:0a:08:21:c9:19:19:
4a:8c:c3:72:a6:d1:75:dd:cd:40:7d:8d:8e:31:b1:
8b:b9:4f:0a:dd:0e:72:4b:3a:1b:d3:74:c3:09:df:
9d:29:c7:5a:47:d6:f8:92:78:25:fc:8d:1a:ce:1b:
13:7c:7d:24:dd:7c:a9:51:00:f9:37:bd:b1:23:83:
a3:d1:f2:19:a9:fc:1f:00:16:0b:01:d6:29:1e:b9:
78:04:18:76:9f:ec:c6:6f:7c:20:23:ae:64:2e:5d:
db:dd:e2:a0:02:ce:94:0c:63:66:5f:0f:2d:18:c6:
c4:d0:4a:65:6d:74:bc:6a:99:d4:b2:fb:3d:15:47:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3B:3E:DB:DF:CD:3E:E3:99:E3:2A:74:1D:28:67:4B:4D:E1:3C:BF
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/XDs-29_NPuOZ4yp0HShnS03hPL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:e0:0a:f2:40:26:3b:2d:37:67:bd:65:0f:0e:f1:ba:57:22:
85:64:ca:7b:d2:30:8e:d3:eb:9b:42:94:52:24:70:ce:7f:06:
e2:f7:07:04:b4:18:a2:c0:ad:d1:97:8a:7f:ce:bc:ed:fb:2d:
26:ef:d4:37:fb:f3:66:34:99:d3:67:56:4f:2f:ec:da:10:8c:
6e:47:e8:de:de:d7:a2:2e:71:63:d5:a9:61:00:c5:64:3f:ea:
1c:00:21:3f:15:b7:84:13:8d:4b:e6:31:d0:ea:e1:fe:31:77:
1e:f3:01:35:b7:6f:91:5d:b3:79:7b:aa:9c:f0:f4:dc:2b:02:
d0:04:d9:26:3c:9a:5f:34:ad:7c:59:9b:2b:65:8f:ee:de:2c:
e5:50:74:54:6d:e0:29:1d:da:d9:1b:c7:f7:68:48:46:19:02:
ad:c0:be:77:fc:48:ea:85:c7:08:62:12:d4:98:bb:16:26:27:
95:01:29:b0:c4:78:86:60:bc:8b:1e:4e:68:1b:da:2d:fd:5f:
b3:94:e6:bb:47:28:9e:74:1b:2a:4c:c3:9b:99:ea:30:d9:78:
1b:d3:8e:9b:2b:7e:5a:d6:f9:e8:fe:91:e6:9f:90:0a:96:35:
4a:c4:6b:c3:ef:d9:d0:50:34:51:2b:28:d7:5d:67:36:3f:16:
9b:8a:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:29 2023 by rpki-client on console-ams.rpki-client.org