Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/b-dsmaedEbQZ36uahAmx0QLMJk8.roa
File: b-dsmaedEbQZ36uahAmx0QLMJk8.roa (raw, json)
Hash identifier: EpaIOJmGrz9jOHU65pOgISaSW77PwdBtt/NO7h/0bYs=
Subject key identifier: 6F:E7:6C:99:A7:9D:11:B4:19:DF:AB:9A:84:09:B1:D1:02:CC:26:4F
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 0865A068
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/b-dsmaedEbQZ36uahAmx0QLMJk8.roa
Signing time: Sat 01 Jan 2022 08:54:00 +0000
ROA not before: Sat 01 Jan 2022 08:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201225
IP address blocks: 109.232.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140877928 (0x865a068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Jan 1 08:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fe76c99a79d11b419dfab9a8409b1d102cc264f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:ef:80:06:19:c6:02:cb:2b:44:f4:2d:4b:
77:4d:46:73:01:55:ff:ca:77:da:77:99:6a:5d:4b:
8a:f7:55:16:0b:0e:77:d8:c6:09:d2:bf:0a:24:f0:
85:3c:69:8a:50:a0:82:15:11:0a:af:76:2b:64:e9:
dc:cb:e9:a4:a6:f4:a8:ed:48:76:f1:7a:bd:d9:90:
07:41:ba:eb:0f:2e:59:2b:d8:64:34:2b:71:5f:e8:
09:14:50:eb:47:ef:55:c6:eb:0c:31:1d:fe:ca:da:
15:ed:73:87:9b:f0:dc:f2:05:14:65:1e:a1:de:ec:
14:56:b1:99:73:0c:51:57:3b:f2:00:17:31:0d:e5:
0b:fa:ab:9d:b0:f8:bd:27:21:39:a7:08:03:46:65:
d4:43:4e:d8:27:45:c7:0a:14:bd:cb:41:2c:47:ab:
1c:eb:e0:6e:95:d6:78:99:8e:f8:23:93:48:8f:6d:
4a:b9:ff:03:64:0b:a1:ae:fb:40:35:62:3f:3a:3d:
a3:46:53:2a:eb:cf:ee:d3:dd:8b:aa:78:12:05:98:
f8:7d:84:da:3c:a1:a2:3c:45:47:4d:5d:af:60:db:
ae:fd:9a:77:c7:8b:74:c1:0c:77:82:08:2e:2b:20:
7f:01:88:64:78:8a:e0:84:b3:1e:27:ac:66:54:12:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:6C:99:A7:9D:11:B4:19:DF:AB:9A:84:09:B1:D1:02:CC:26:4F
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/b-dsmaedEbQZ36uahAmx0QLMJk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e5:0b:93:c4:ef:75:81:68:77:70:1c:cb:34:49:79:e9:e5:
e0:f2:02:8f:d5:a9:ce:08:6b:17:1d:56:0a:71:2b:1f:c3:38:
0c:97:92:98:1d:d6:25:7c:af:cf:71:b1:bb:61:5e:26:d6:f1:
12:70:f8:62:a6:14:7e:54:6a:09:4d:4a:42:4f:4c:e3:59:dc:
3a:23:f2:91:4e:47:9b:cb:f7:95:67:55:ce:c1:1f:9e:37:a3:
7f:d2:03:87:29:67:62:0c:ce:b3:11:e5:ba:01:b5:55:cd:09:
04:bf:01:df:6a:86:46:85:2b:c6:0e:38:90:96:e1:85:0b:9e:
46:0d:68:6f:19:1f:2c:c2:87:e7:43:fd:6e:11:a8:56:78:f0:
46:d1:67:03:9b:40:cf:c0:75:c8:43:5d:6c:ea:e2:76:cd:24:
1e:ea:e7:6f:61:b8:b5:0e:a2:13:4c:de:ec:5b:e7:2e:52:73:
06:cb:ea:0c:03:95:6c:3b:e3:e0:43:dc:97:31:df:01:74:59:
19:85:68:cf:2b:ff:7c:ec:5e:bb:9f:27:df:61:eb:37:e3:6c:
73:7c:95:b7:24:dd:ed:11:16:6a:bb:f9:35:74:0b:f4:0d:43:
b7:4c:ad:fe:2b:4f:17:39:ec:12:ff:56:b2:38:c1:d2:d6:08:
6e:1b:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:34 2023 by rpki-client on console-ams.rpki-client.org