Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/YEFkoZWTWcdq0-oA0Oov-F9SGD4.roa
File: YEFkoZWTWcdq0-oA0Oov-F9SGD4.roa (raw, json)
Hash identifier: SoeSpvqECBRL3ByPb8+JhwR7MO2Hs0D6YJMOREikEMg=
Subject key identifier: 60:41:64:A1:95:93:59:C7:6A:D3:EA:00:D0:EA:2F:F8:5F:52:18:3E
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 01837F2DC521C54835568279297E05A44544
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/YEFkoZWTWcdq0-oA0Oov-F9SGD4.roa
Signing time: Tue 27 Sep 2022 13:40:49 +0000
ROA not before: Tue 27 Sep 2022 13:40:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32875
IP address blocks: 109.166.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:2d:c5:21:c5:48:35:56:82:79:29:7e:05:a4:45:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Sep 27 13:40:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=604164a1959359c76ad3ea00d0ea2ff85f52183e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:ab:08:62:41:b0:b1:6d:71:24:fe:1f:55:
21:01:03:e9:24:d5:4d:74:62:85:96:47:a2:0f:08:
6e:c2:4c:01:81:90:18:d8:6c:81:31:0b:2e:84:3b:
37:60:81:4d:c6:b7:67:72:25:42:94:09:d8:ae:1f:
82:b5:12:f3:12:8f:d6:dc:65:e1:ef:cd:a6:25:35:
d7:62:f4:f9:f8:1d:8d:f1:06:11:14:b4:be:4c:9f:
63:2c:bd:9d:f9:7b:b8:40:9f:a4:c7:d2:7a:a1:c4:
13:e9:fc:40:97:fa:96:39:15:a1:e6:47:c7:2c:5e:
a0:57:b1:e7:ce:54:56:d1:1d:33:24:6c:f0:10:db:
34:23:2c:ef:05:54:7c:50:34:f4:38:7b:ec:ef:81:
31:af:b4:d9:e6:bb:19:d1:dd:13:b5:5c:2e:b2:e8:
08:a9:0a:6c:a7:8a:83:ea:38:86:59:f7:bc:da:47:
46:24:f7:a2:42:b0:97:01:40:ea:08:c4:ce:e4:28:
c4:21:12:8b:88:c7:c4:72:be:db:16:f5:a7:d4:fe:
e4:26:b1:83:89:92:93:5d:4d:1d:7d:f2:7c:ee:17:
60:9a:19:db:0a:a1:20:8b:e4:f8:87:d2:84:27:b1:
63:17:2a:46:aa:c1:d1:0e:84:84:25:c0:df:7f:88:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:64:A1:95:93:59:C7:6A:D3:EA:00:D0:EA:2F:F8:5F:52:18:3E
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/YEFkoZWTWcdq0-oA0Oov-F9SGD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.166.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e9:97:04:dc:49:94:69:5a:7b:8c:d3:1f:0f:53:5a:b6:d6:
74:53:fe:df:75:13:97:ec:7c:56:83:45:23:8a:37:cf:1a:13:
1b:76:c0:cb:10:d4:9c:2d:94:13:b4:b4:5c:6b:03:c5:fc:f3:
84:21:39:15:a1:82:32:ed:4b:cf:38:d6:21:a1:01:f2:02:3d:
ac:c3:7a:a4:87:a7:d7:a6:5b:b5:52:29:89:29:88:9c:f5:e5:
1d:06:8b:36:d8:28:c1:b8:50:f7:c2:f9:66:2a:f7:87:9f:c7:
2f:07:f7:db:47:60:af:3c:bc:40:50:76:4d:a9:3f:67:57:1d:
26:eb:ce:8c:7d:bb:55:f0:16:0d:7f:e6:0f:42:ce:20:d5:7c:
04:36:10:56:fa:fc:7b:bc:8e:f1:34:8c:9e:74:aa:46:20:59:
35:e2:aa:cc:b6:24:7e:f9:26:96:e9:8e:7b:c3:ad:eb:4a:e7:
91:9d:7e:16:db:a9:fc:26:fd:d9:7b:21:5d:91:72:12:f9:4d:
b1:3f:2d:74:87:2f:12:2b:ac:38:14:8e:f1:43:2d:95:ba:e4:
3f:8d:53:b6:1b:c8:70:32:4e:22:d6:f8:88:47:00:45:b6:18:
23:9a:af:89:ad:04:c7:7d:f5:5a:c1:ab:e2:bf:c8:05:38:a4:
19:7c:0a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:21 2023 by rpki-client on console-fra.rpki-client.org