Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/q9PWks53MeO0HzWfy_FMXcmDyCE.roa
File: q9PWks53MeO0HzWfy_FMXcmDyCE.roa (raw, json)
Hash identifier: MHoFxlrONG2NtDQkhhQQj+M2QWnLa0v5yMjPnwPDyFw=
Subject key identifier: AB:D3:D6:92:CE:77:31:E3:B4:1F:35:9F:CB:F1:4C:5D:C9:83:C8:21
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 304C0747
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/q9PWks53MeO0HzWfy_FMXcmDyCE.roa
Signing time: Tue 08 Feb 2022 20:37:58 +0000
ROA not before: Tue 08 Feb 2022 20:37:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 109.160.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810288967 (0x304c0747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Feb 8 20:37:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abd3d692ce7731e3b41f359fcbf14c5dc983c821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:0a:75:bf:cb:8d:4e:00:ea:31:37:d8:6f:
03:58:dc:cf:81:d9:75:b8:24:55:32:c0:23:43:fc:
7d:af:4e:7f:64:8e:1a:68:a3:bf:94:21:94:7b:a6:
ab:da:b9:00:06:36:4f:cb:d9:5e:63:c3:8e:c5:ff:
c0:0b:76:d7:2d:e9:2b:50:e9:68:8e:15:f2:13:70:
8e:ef:a7:50:01:93:66:22:d5:a8:ad:2b:25:86:93:
30:98:b9:ec:57:fa:b4:c6:9a:89:ac:f4:c5:e1:fb:
21:56:82:97:a3:af:8a:00:d6:1f:08:75:62:0b:3f:
11:3f:20:04:9c:64:10:32:26:bf:c1:21:95:d4:91:
93:38:7c:bd:12:e0:0f:b9:78:1a:dd:f9:f6:b1:91:
94:b8:0b:fc:15:50:0a:ac:05:5a:94:bb:41:ea:54:
e7:e3:1d:8d:c1:b5:64:d2:58:1b:8b:7d:a9:af:b7:
83:b4:33:40:dd:93:14:7d:b3:f0:22:98:ff:77:bb:
80:b5:f6:16:1d:ac:15:a6:b6:a0:e2:a5:8a:4a:27:
a3:6d:14:83:39:2b:0a:7b:34:b8:94:e0:72:c8:11:
b5:87:08:d4:bd:b3:30:f0:42:f5:85:1b:de:02:56:
85:33:f5:e2:fd:03:3e:be:1f:8b:df:64:c9:bd:b1:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:D6:92:CE:77:31:E3:B4:1F:35:9F:CB:F1:4C:5D:C9:83:C8:21
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/q9PWks53MeO0HzWfy_FMXcmDyCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c8:17:a2:5d:eb:9c:da:9d:b2:9d:d8:e8:90:53:ed:59:1f:
69:31:f6:cc:92:08:98:d0:e1:0e:0e:26:03:35:80:ec:77:75:
52:13:91:05:ee:be:fc:94:5b:07:1e:3c:d4:06:df:55:ca:61:
1f:8c:0d:61:d6:8e:40:7e:8b:1c:74:02:10:59:13:12:88:66:
45:18:94:90:01:88:72:2e:b8:a6:0c:66:49:00:7d:a6:ff:97:
47:e5:02:b6:ae:e4:05:a4:2a:04:05:3d:44:02:10:09:77:c0:
7d:0a:79:59:f5:e1:0a:f7:6b:ff:4b:69:b7:01:e2:ef:0f:65:
5d:3a:38:22:28:5e:33:89:d0:0b:77:c9:a1:43:c3:b8:14:99:
bf:4c:9f:03:a1:45:3d:f7:a6:a9:83:34:a9:54:eb:77:3d:d9:
b3:e3:09:4d:72:44:53:90:8d:b8:fd:0f:16:ba:87:33:84:60:
0a:c5:e4:dd:e5:c4:e4:06:cc:2f:de:f5:c5:dd:93:96:a8:3c:
53:a4:1a:95:ec:d4:39:83:5b:eb:62:01:ba:86:d3:ba:8a:8b:
12:2b:f3:3e:ae:6a:41:f8:05:a8:35:2c:41:2b:07:cd:04:b4:
6f:6d:d0:9e:b0:89:42:4b:ca:dd:b6:b5:bd:1e:0e:1a:4b:c9:
d6:ae:f5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org