Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/bQzwCgtc4SygWxrQXItPDi0eJq0.roa
File: bQzwCgtc4SygWxrQXItPDi0eJq0.roa (raw, json)
Hash identifier: cWcUqU4EoAMvt+XNi2s3A8g/0X36iPeeZcHKiWXQiB4=
Subject key identifier: 6D:0C:F0:0A:0B:5C:E1:2C:A0:5B:1A:D0:5C:8B:4F:0E:2D:1E:26:AD
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01856B53244B88914027B2CD20BE192E708E
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/bQzwCgtc4SygWxrQXItPDi0eJq0.roa
Signing time: Sun 01 Jan 2023 03:14:48 +0000
ROA not before: Sun 01 Jan 2023 03:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 109.160.37.0/24 maxlen: 24
109.160.36.0/24 maxlen: 24
109.160.38.0/24 maxlen: 24
109.160.39.0/24 maxlen: 24
109.160.40.0/24 maxlen: 24
109.160.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:24:4b:88:91:40:27:b2:cd:20:be:19:2e:70:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 03:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d0cf00a0b5ce12ca05b1ad05c8b4f0e2d1e26ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:58:ec:32:05:77:4b:71:f3:4d:e5:a0:ec:
df:ae:02:10:86:e9:b4:5a:87:b2:48:c5:d5:ca:cd:
a2:e0:9a:17:ae:90:ce:08:7b:d0:5c:b2:96:d0:36:
f1:1c:0f:04:13:07:d0:16:12:19:f8:57:4c:97:63:
74:59:2d:eb:17:57:e8:0f:8d:fa:c2:f4:be:0f:08:
6f:a8:a1:c1:51:5c:c9:6b:31:52:c0:a6:18:e7:54:
92:7b:94:b0:95:f2:b9:55:30:19:55:0e:d1:c0:87:
b8:a0:44:2b:73:ad:77:61:47:bc:bf:d6:a3:73:a5:
c5:59:61:eb:5d:11:4c:31:f4:65:ce:28:a2:69:28:
8d:73:ae:72:b8:c2:4b:1d:a5:95:e8:3f:d2:5b:12:
d2:5a:f0:29:78:5c:1d:11:47:ee:a9:24:91:1b:e2:
ab:92:9d:ef:29:29:fb:23:38:d5:4c:df:3c:38:c9:
fc:55:9f:a4:11:83:30:72:38:e0:e9:45:15:bf:ae:
aa:85:3e:2b:80:5b:96:8e:63:d3:ad:48:8a:01:d9:
c8:e9:56:90:06:d5:03:fd:37:f2:5a:a0:1a:5e:9f:
ea:2a:21:9d:51:32:57:e1:ad:82:ff:c0:35:14:d7:
76:6c:8e:12:0f:8e:a7:8f:c1:3b:6e:b5:af:2b:bf:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0C:F0:0A:0B:5C:E1:2C:A0:5B:1A:D0:5C:8B:4F:0E:2D:1E:26:AD
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/bQzwCgtc4SygWxrQXItPDi0eJq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.36.0-109.160.41.255
Signature Algorithm: sha256WithRSAEncryption
44:b2:6e:15:f1:d3:eb:36:ed:e1:63:e1:ce:92:f9:49:28:b3:
c2:dd:37:96:dd:c0:7b:45:6e:57:3f:cd:d6:02:19:3d:81:ad:
da:e7:3b:4d:81:f2:43:c6:76:38:d2:9e:11:79:10:75:d3:21:
71:ad:11:46:65:f4:b6:91:fe:a2:e2:b4:e0:59:2b:64:d6:70:
a7:1d:a8:52:57:20:24:f6:ab:12:40:95:67:a9:2a:9c:e7:bc:
0a:b8:12:e6:d8:fe:8b:30:b9:43:9a:56:74:0e:24:60:18:8b:
93:ee:db:a5:f5:9a:bc:18:55:33:8a:d9:82:7e:e6:88:a0:a5:
f3:8d:ce:9e:75:c9:59:e9:35:96:51:ce:14:dc:6b:33:d5:b4:
fa:95:fb:8d:f6:d5:1d:cd:42:26:e1:22:cc:68:00:ef:ff:8b:
f3:5c:cc:2d:b9:77:69:94:6e:17:3b:c8:a6:2e:99:cc:66:20:
cc:dd:5c:20:65:ba:4d:3d:0f:e5:b3:8e:6e:2c:0c:06:5c:13:
87:94:77:fc:5f:5a:1b:6a:e6:e9:5a:bd:7d:58:bf:6c:39:9f:
62:cd:61:cb:3c:7f:7e:62:85:18:80:7f:5e:cd:f2:9f:cd:21:
29:d3:d2:bb:54:82:23:03:e4:32:be:e1:59:1a:ff:6f:cf:97:
69:88:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:39 2025 by rpki-client