Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DS7Sbogglzs_3Uz764GsJ1Ek048.roa
File: DS7Sbogglzs_3Uz764GsJ1Ek048.roa (raw, json)
Hash identifier: /oU+4Rcc+2zRxAXBVlc32xJX97ILynC8CxVDfOOuj2Y=
Subject key identifier: 0D:2E:D2:6E:88:20:97:3B:3F:DD:4C:FB:EB:81:AC:27:51:24:D3:8F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018349EA7CAED0B861C60B1B3BD2BE907BDF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DS7Sbogglzs_3Uz764GsJ1Ek048.roa
Signing time: Sat 17 Sep 2022 05:27:27 +0000
ROA not before: Sat 17 Sep 2022 05:27:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56309
IP address blocks: 203.159.92.0/22 maxlen: 22
141.98.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:49:ea:7c:ae:d0:b8:61:c6:0b:1b:3b:d2:be:90:7b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 17 05:27:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d2ed26e8820973b3fdd4cfbeb81ac275124d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:30:48:3a:fc:12:c9:b2:b5:70:37:bb:95:
6d:35:e8:97:7d:79:fe:d8:9d:32:04:84:2c:fa:7b:
3a:35:57:0e:47:9a:da:d6:ba:f2:30:fc:6d:c3:d2:
a9:44:a4:9d:da:ed:52:2c:50:32:01:a8:70:e2:0e:
2b:7a:b2:71:ca:a6:4c:22:c3:4f:94:7f:4d:c4:74:
e8:da:17:8c:85:11:e3:a2:63:70:9d:2e:ea:c6:a7:
93:a8:31:60:19:98:a6:35:c5:98:2f:14:65:a2:14:
d9:30:b2:4b:ee:bc:c0:88:5a:13:8d:82:77:1a:8f:
25:dd:3a:af:71:eb:58:49:af:4e:68:c6:21:6c:80:
85:9a:a6:ee:e4:7e:c0:fb:43:0e:0d:04:c4:3e:8d:
78:1d:6d:7d:98:57:e7:54:b3:0d:4c:f0:7f:74:22:
90:83:77:5e:76:f5:f8:ca:61:c9:d4:fb:14:a3:95:
79:6c:8f:3f:09:6c:33:19:5c:51:d9:2d:10:38:2d:
cb:de:67:ab:05:f0:27:1d:ad:1c:d5:f8:17:36:af:
bf:a2:ad:34:93:00:f2:ea:e0:bb:df:d2:97:c6:e2:
3c:2a:ee:8f:e0:63:c0:05:4a:7b:e9:c5:05:9a:2b:
52:03:cc:6a:99:01:24:82:c7:30:5f:f1:ab:e2:5d:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2E:D2:6E:88:20:97:3B:3F:DD:4C:FB:EB:81:AC:27:51:24:D3:8F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DS7Sbogglzs_3Uz764GsJ1Ek048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.16.0/22
203.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
02:a0:94:a1:e3:7a:30:e4:31:85:bc:e5:a6:5a:ee:89:d3:08:
9e:22:db:9f:46:45:d4:2a:83:68:44:7f:ec:ab:e5:d2:02:86:
d2:41:7f:3f:54:ca:d3:ad:ca:07:05:b0:a6:cf:ce:df:e0:db:
9e:25:ca:6c:3b:d7:3e:80:c0:3c:ef:41:e5:bd:8a:72:8c:0e:
45:8e:17:68:b1:52:b8:fc:3c:1f:d1:4d:77:9e:15:d3:53:b0:
7a:69:b3:cc:a1:8d:4a:d7:77:9d:d8:68:d2:56:ea:32:0f:16:
f1:07:13:87:b6:4e:ba:67:9a:af:e8:5e:a2:72:85:30:49:17:
89:b4:1e:20:ad:c6:e0:6c:9e:61:a6:90:92:ea:64:ff:c8:1c:
f1:38:b2:c5:c0:94:e8:f7:ea:db:4d:50:85:92:39:47:46:a0:
6c:f6:54:7e:f0:24:bf:91:1b:84:5b:5c:18:7e:ae:55:ee:37:
ac:73:c3:ca:75:b5:67:23:a1:e2:4b:7c:cc:65:b3:97:78:85:
e6:50:e8:6f:de:71:1f:23:09:df:86:2a:e1:6c:6a:21:50:78:
7e:43:8c:94:3f:42:4c:55:3f:7f:08:5f:55:a7:b6:1b:9e:b2:
f2:8f:dd:00:c5:24:67:80:c5:90:79:eb:35:ea:57:c1:8b:6f:
60:78:62:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org