Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/88ITViLe-hdTnru-6TKxFmYoVYk.roa
File: 88ITViLe-hdTnru-6TKxFmYoVYk.roa (raw, json)
Hash identifier: kbTsAkCrpWF4sIoPZKAGbLduo9kMWLk4DHGShRRw17Q=
Subject key identifier: F3:C2:13:56:22:DE:FA:17:53:9E:BB:BE:E9:32:B1:16:66:28:55:89
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 083212CF
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/88ITViLe-hdTnru-6TKxFmYoVYk.roa
Signing time: Sat 01 Jan 2022 08:04:11 +0000
ROA not before: Sat 01 Jan 2022 08:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44882
IP address blocks: 109.230.160.0/21 maxlen: 21
109.230.176.0/20 maxlen: 20
109.230.128.0/19 maxlen: 19
2a01:98c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137499343 (0x83212cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Jan 1 08:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3c2135622defa17539ebbbee932b11666285589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:36:28:9e:4f:f2:58:ed:11:c7:64:b1:ee:
ca:b2:82:b1:d7:7a:b9:c3:c9:5e:a5:ce:90:60:f3:
e5:32:66:8f:82:a4:06:22:bd:3f:8a:58:be:a0:38:
b5:0a:dc:63:7a:fd:b6:82:8d:28:74:27:62:1f:02:
af:96:3e:97:00:83:56:50:65:4e:ab:50:30:30:8b:
e1:12:f4:af:04:20:d5:e0:2e:da:99:0b:e8:68:62:
46:6d:ee:cc:e7:f7:99:62:2f:8f:6f:b5:c7:99:08:
bd:08:9f:d6:83:8c:0c:6b:52:53:d6:cc:ba:7c:69:
69:d2:15:4f:cc:6e:dd:53:7a:2a:15:ee:f2:cb:37:
53:fc:35:cd:9d:0d:2c:e4:81:05:76:38:cc:22:69:
8b:0c:69:85:a7:58:fc:00:99:5d:66:19:23:d1:95:
9c:83:29:ba:e6:41:89:f1:13:ec:03:a0:e3:12:0a:
cd:1e:e8:f2:bf:42:b1:9e:df:f1:0b:85:ed:34:af:
d0:f0:dd:8a:3d:b8:40:dd:0b:b9:b1:40:95:91:8b:
4d:db:09:3b:49:89:4a:8b:09:5f:5f:93:40:5a:ae:
9b:26:e3:6e:4e:54:cf:f2:00:4a:d0:77:37:51:e0:
25:da:e3:30:39:c7:54:f4:27:9d:90:94:38:07:ef:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:13:56:22:DE:FA:17:53:9E:BB:BE:E9:32:B1:16:66:28:55:89
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/88ITViLe-hdTnru-6TKxFmYoVYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.230.128.0-109.230.167.255
109.230.176.0/20
IPv6:
2a01:98c0::/48
Signature Algorithm: sha256WithRSAEncryption
19:f4:0d:03:6d:1c:06:b1:6c:14:9f:1d:06:95:2a:7c:af:70:
f7:53:18:d8:ee:e6:ca:79:e5:83:dc:d7:68:84:b1:2f:2b:fd:
6d:6d:7e:6c:b9:c1:e2:f9:18:c5:72:20:fc:15:7f:f7:2b:8a:
41:26:5b:43:93:b9:77:5e:07:ec:07:1d:e6:31:2c:6e:22:23:
f2:55:d9:38:4e:38:6e:8b:e5:bb:74:9f:3d:18:f6:c1:cc:cf:
04:dc:66:19:c0:7d:fe:56:04:53:31:2b:ea:b5:8b:62:58:40:
87:4b:41:52:4e:a3:8c:bb:d2:8a:f9:87:5e:0d:74:ac:0a:4d:
fc:8a:d7:c6:4f:18:3f:32:77:c7:8c:7c:1c:50:cf:5a:10:d4:
2b:3b:bd:48:5a:85:3e:7a:69:13:f8:fa:da:2e:6f:43:e8:a7:
cc:4e:a4:11:ea:ac:63:1f:4c:1f:51:1c:0f:77:66:e9:d3:9f:
52:8a:81:2c:96:26:90:73:c0:bc:e2:3e:b6:65:c7:17:e5:2a:
88:2e:cf:e1:66:25:69:6c:9d:62:c6:0b:f3:4f:a6:d0:4b:c4:
f8:16:d2:be:be:bf:1c:56:1f:e9:b5:db:1d:58:91:28:8a:5c:
8a:a3:af:77:75:b2:8e:f1:f4:a2:1e:f0:5a:04:01:f7:81:a7:
88:f0:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:34 2024 by rpki-client on console-fra.rpki-client.org