Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/7tK22VHVBam-VqsisuFofnQq_pI.roa
File: 7tK22VHVBam-VqsisuFofnQq_pI.roa (raw, json)
Hash identifier: oi5gdD/wK0SRfaFcvH5FByg4BXGtZusXUcU8lH1bXow=
Subject key identifier: EE:D2:B6:D9:51:D5:05:A9:BE:56:AB:22:B2:E1:68:7E:74:2A:FE:92
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 3148ABFB
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/7tK22VHVBam-VqsisuFofnQq_pI.roa
Signing time: Sat 21 May 2022 07:17:29 +0000
ROA not before: Sat 21 May 2022 07:17:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 109.160.34.0/24 maxlen: 24
109.160.38.0/24 maxlen: 24
109.160.32.0/24 maxlen: 24
109.160.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826846203 (0x3148abfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: May 21 07:17:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eed2b6d951d505a9be56ab22b2e1687e742afe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:b7:42:17:ef:f8:6c:fe:5e:14:df:65:a0:
48:cd:75:01:2f:3d:5b:75:bb:23:1b:14:5b:8a:0c:
4b:3c:cb:90:9e:5e:50:65:ab:e5:dc:e8:46:0a:78:
e6:13:3e:1e:6d:59:3f:e4:83:06:99:a4:e9:31:b3:
2e:69:df:66:f2:cc:9e:f0:1c:2f:80:32:1c:a0:42:
e6:27:cb:f1:81:40:d5:85:43:28:40:20:39:fc:4a:
3b:06:e4:08:60:b9:e4:db:ab:16:28:c7:f7:1b:e6:
ac:9b:f8:c7:07:fd:ce:07:25:d4:04:2e:f2:34:ff:
e3:cb:ce:3a:e3:ab:ec:18:aa:af:8f:53:a5:50:02:
cf:07:ba:dc:b1:ac:35:52:02:96:2d:74:21:0b:78:
b1:d1:a0:3c:d6:b9:e5:29:f4:84:56:f6:a0:ba:6c:
03:fc:d6:f9:4b:84:ac:7b:ee:95:38:98:b5:17:ec:
e8:26:b2:b1:7c:d3:7a:d9:e0:31:2e:dd:17:c1:be:
f8:a3:ce:e4:68:a4:04:5f:bd:20:ae:c1:bd:9d:1f:
c8:fc:08:bf:5e:d0:6d:d2:75:68:99:ab:04:e2:e6:
67:b6:3d:12:fb:1f:04:df:f9:0a:1d:aa:23:95:45:
54:17:41:4d:5c:f0:60:22:9a:23:ee:5d:f6:7a:19:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:B6:D9:51:D5:05:A9:BE:56:AB:22:B2:E1:68:7E:74:2A:FE:92
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/7tK22VHVBam-VqsisuFofnQq_pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.32.0/24
109.160.34.0/24
109.160.38.0/23
Signature Algorithm: sha256WithRSAEncryption
46:b7:ba:d1:9e:48:b6:0e:1b:55:a8:7f:a0:bd:ce:b6:4a:cc:
ad:42:c8:74:11:fc:c6:c6:e7:e0:1c:77:cf:a8:a3:1d:d6:a6:
b2:05:03:8b:ec:49:eb:6f:61:af:66:fd:ce:0c:6d:5f:da:fc:
51:72:18:6a:8e:45:6b:7d:30:d5:57:c9:ba:e3:ba:6c:c6:29:
be:b4:a8:ca:de:bf:3e:05:ef:83:f2:03:26:8b:7b:f9:17:08:
3a:6b:56:12:06:4a:4e:60:0a:73:96:a8:f6:94:81:20:5e:0d:
02:46:60:65:9d:c4:1c:f9:12:6a:d0:a4:24:34:83:40:16:37:
70:06:b6:8b:ac:77:e2:4a:81:fb:f8:7a:04:fb:94:90:b9:88:
e8:f5:ef:6e:79:26:68:5b:d9:1b:83:18:1e:35:81:83:12:6d:
7b:66:0c:8a:3d:3b:eb:08:bc:c8:9d:53:2d:a9:47:e4:d0:8c:
83:32:c9:3c:15:d3:76:f2:c3:f4:5b:63:70:f7:db:8d:79:0f:
82:b3:80:a1:7d:e3:67:f2:64:07:95:32:38:88:e1:c3:ed:98:
d2:10:9a:cd:77:bb:ac:08:a2:d7:6a:ec:4b:ed:5f:cd:d6:f0:
9a:19:06:be:4c:3b:64:64:a4:53:d1:eb:0a:fc:ad:06:b3:7f:
7f:eb:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org