Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/cPh2zfRdQ_7yHrY2vXtld54kQkw.roa
File: cPh2zfRdQ_7yHrY2vXtld54kQkw.roa (raw, json)
Hash identifier: JP+I70nTN4qt9l8DCEFmCu/lTylHNTNAwnwVjfobiNA=
Subject key identifier: 70:F8:76:CD:F4:5D:43:FE:F2:1E:B6:36:BD:7B:65:77:9E:24:42:4C
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 615DA8
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/cPh2zfRdQ_7yHrY2vXtld54kQkw.roa
Signing time: Wed 09 Mar 2022 07:08:18 +0000
ROA not before: Wed 09 Mar 2022 07:08:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39308
IP address blocks: 109.162.246.0/23 maxlen: 23
109.162.248.0/22 maxlen: 22
109.162.252.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6380968 (0x615da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Mar 9 07:08:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70f876cdf45d43fef21eb636bd7b65779e24424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:b6:fc:05:c5:f1:c2:58:7f:1d:f9:c1:8a:
46:d6:82:30:e8:f3:e5:77:95:29:6d:df:41:4f:60:
5a:bb:42:03:d8:98:06:16:3d:91:5a:9d:25:b6:9c:
a4:7b:00:a6:d0:84:63:99:c1:44:98:33:79:ea:c4:
17:ff:09:60:04:bc:a0:ca:fa:33:2d:b2:6c:fb:9f:
31:27:e8:d8:02:08:4a:c3:31:de:34:77:be:2c:1a:
e2:3d:57:0b:0c:5b:3b:f5:6e:54:74:0f:6b:53:08:
1c:45:76:62:c5:60:1e:28:79:fc:be:2a:64:d4:a2:
85:a9:da:25:63:98:b3:dd:28:ec:e4:63:10:57:3f:
a3:9f:76:25:8b:8d:8e:90:91:2e:87:11:2f:ed:fe:
fc:dd:cd:c9:ee:f7:0a:4c:02:a2:7d:f7:39:dd:f8:
59:17:5e:2a:30:21:c3:97:5b:59:fc:51:25:5f:69:
61:3f:a3:45:b9:3e:03:47:6c:ad:3b:a1:14:26:e1:
2a:4c:87:32:ff:10:eb:01:c0:7b:ed:68:1d:2d:33:
80:74:7e:ec:82:a5:a9:da:63:a5:9f:21:a8:46:30:
bc:15:ae:29:b3:3a:98:ba:39:39:4c:5b:e1:29:a3:
f7:66:f2:c3:9b:d6:1e:fd:6a:48:b4:b2:2c:06:50:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:76:CD:F4:5D:43:FE:F2:1E:B6:36:BD:7B:65:77:9E:24:42:4C
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/cPh2zfRdQ_7yHrY2vXtld54kQkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.246.0-109.162.253.255
Signature Algorithm: sha256WithRSAEncryption
74:ce:9e:a5:39:e4:8e:75:9e:96:17:87:78:a3:9c:b4:94:af:
b7:6c:41:4d:5c:cf:38:d7:3f:ae:f0:0c:7d:c2:9d:5c:28:f5:
fd:4f:46:91:40:34:0c:68:e8:c6:f1:25:f2:5b:b9:a6:27:e1:
c6:dd:b5:f6:03:47:6a:47:ba:9a:25:1a:aa:be:e6:ce:e7:ab:
85:dc:68:31:ca:79:6a:e0:51:d4:67:aa:37:97:2a:0c:88:c9:
a7:03:13:3f:eb:87:e6:ff:8e:e4:de:20:6e:69:ae:94:f3:44:
1d:ff:f4:e5:f1:57:13:ef:f5:3d:d9:ee:ef:34:29:00:83:46:
4f:5b:4b:be:ef:8d:e4:98:25:f0:8d:49:e0:a4:e6:e7:84:8e:
21:57:ee:85:58:ba:66:50:bc:34:d3:84:85:e7:ee:31:c5:4f:
16:52:62:5a:eb:d4:df:73:25:fc:f8:ad:4c:b7:b9:40:48:49:
b6:f1:5a:5a:65:c7:ca:4d:0b:4d:27:bc:68:a2:e7:68:95:a4:
a6:27:7f:e4:c7:bd:03:9d:72:66:16:ae:89:7c:18:b2:81:64:
b7:31:8d:c0:f1:f3:b9:ce:48:d4:3d:72:a7:a7:69:52:cb:fc:
07:57:c0:8a:72:91:a9:b7:4f:52:3c:a1:ab:44:40:b2:2a:a6:
0d:1e:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:21 2024 by rpki-client on console-fra.rpki-client.org