Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/RjSxhP0M89k0qV9HAk3zxbeKRhY.roa
File: RjSxhP0M89k0qV9HAk3zxbeKRhY.roa (raw, json)
Hash identifier: Xa2ffBA7eixtv3Qs42I6/BaoTONzVxXdPXQMbf67t7I=
Subject key identifier: 46:34:B1:84:FD:0C:F3:D9:34:A9:5F:47:02:4D:F3:C5:B7:8A:46:16
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 0834A7
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/RjSxhP0M89k0qV9HAk3zxbeKRhY.roa
Signing time: Tue 01 Feb 2022 08:59:46 +0000
ROA not before: Tue 01 Feb 2022 08:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34636
IP address blocks: 109.162.248.0/22 maxlen: 22
109.162.247.0/24 maxlen: 24
109.162.252.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537767 (0x834a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Feb 1 08:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4634b184fd0cf3d934a95f47024df3c5b78a4616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:7c:dc:c3:2a:f6:61:40:1a:cf:65:63:5c:
72:24:ee:97:2f:0f:ec:7c:c6:fd:18:e8:95:06:fd:
29:55:8b:80:c2:84:56:b6:f6:66:25:3d:24:9c:ba:
1f:bf:ba:00:e8:16:96:92:58:58:80:fa:61:3c:78:
e7:e2:87:4c:ad:cf:de:de:f5:51:43:9f:8c:e9:1c:
82:1b:e6:61:60:16:e3:6e:eb:cd:85:f1:32:6a:a6:
b9:dc:da:4e:4a:60:d1:5a:3d:7e:9b:81:45:69:e1:
11:52:bd:5a:ae:8f:35:55:cd:d5:34:be:cc:38:e1:
33:1a:78:28:25:25:1d:5e:c0:be:8b:96:dc:fe:1a:
c9:2f:90:30:4f:11:ef:81:ba:23:e4:7e:a1:da:62:
f8:02:2d:7a:d0:9a:4c:9e:b3:05:84:de:b2:88:f0:
51:52:90:98:b4:92:e7:77:33:ea:19:0f:60:fd:73:
c2:56:bc:b3:fb:2f:78:2c:54:0e:e8:62:53:6d:d3:
bf:03:08:f5:b4:23:8f:6a:e7:d6:5a:97:18:fa:c2:
d5:98:15:5a:de:db:d5:b6:9f:f6:b6:a9:92:6b:43:
f6:78:06:0c:c9:d3:97:be:9e:28:c7:74:39:99:21:
18:f8:65:34:be:27:9c:6f:80:be:7d:10:6a:38:ac:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:34:B1:84:FD:0C:F3:D9:34:A9:5F:47:02:4D:F3:C5:B7:8A:46:16
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/RjSxhP0M89k0qV9HAk3zxbeKRhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.247.0-109.162.253.255
Signature Algorithm: sha256WithRSAEncryption
3f:46:cb:c6:56:6c:f4:a2:39:13:de:de:53:2e:e6:7b:63:30:
aa:69:cb:18:c7:e4:b3:d5:68:a5:81:53:78:33:6d:bc:f8:49:
77:7a:2f:3a:e9:68:f5:e9:b5:98:be:fc:c7:82:6b:25:97:06:
d4:bc:56:6b:eb:05:ec:3e:d2:f9:6a:cf:84:4a:0b:12:99:d6:
d2:6e:61:af:16:99:99:60:48:51:6c:ef:39:30:a5:99:35:1f:
19:57:98:85:00:58:1f:58:f4:73:2e:49:e6:f6:df:fa:31:fb:
92:d4:77:18:4d:f7:db:73:ab:24:78:5d:eb:87:7d:47:04:97:
76:4c:84:6d:4f:71:bc:30:27:8e:09:09:4e:7d:1a:ec:39:60:
30:04:b7:25:ad:9b:2c:35:5d:ef:10:78:f3:e3:6a:a2:58:aa:
03:0d:e0:fb:d3:5f:c3:a2:ce:47:3e:38:75:63:18:d2:c2:07:
2e:35:4d:3a:b0:5c:ac:eb:44:15:dc:75:e1:33:65:64:e5:2c:
e7:cf:0f:e3:a9:c6:41:ea:4e:ea:5a:f6:87:f6:49:2e:cc:a3:
e5:cd:a2:28:de:9f:1b:6f:56:a4:2e:15:25:67:5f:95:de:82:
14:b3:86:73:08:fb:39:77:ad:2a:91:f2:59:57:c1:e3:a0:13:
65:1c:c6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:21 2024 by rpki-client on console-fra.rpki-client.org