Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/0l0WPekH2otLjmDLy3ku00VwRDY.roa
File: 0l0WPekH2otLjmDLy3ku00VwRDY.roa (raw, json)
Hash identifier: +6jFrpvybizPf2/wUAzFIReBTJ6lrDz8RMChz/mzSUU=
Subject key identifier: D2:5D:16:3D:E9:07:DA:8B:4B:8E:60:CB:CB:79:2E:D3:45:70:44:36
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 018379A2AEA99DBFD53D8932AD959502E342
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/0l0WPekH2otLjmDLy3ku00VwRDY.roa
Signing time: Mon 26 Sep 2022 11:50:48 +0000
ROA not before: Mon 26 Sep 2022 11:50:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212152
IP address blocks: 198.205.14.0/24 maxlen: 24
198.205.13.0/24 maxlen: 24
198.205.12.0/24 maxlen: 24
198.62.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:a2:ae:a9:9d:bf:d5:3d:89:32:ad:95:95:02:e3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Sep 26 11:50:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d25d163de907da8b4b8e60cbcb792ed345704436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:f9:cc:e9:71:36:a6:cf:77:73:3f:0b:d8:
46:c1:62:fc:05:75:f8:03:58:b4:88:e7:62:df:f8:
e2:83:e1:72:37:b2:a4:49:44:d8:b5:6b:da:95:c9:
f4:c0:23:c6:02:26:db:62:10:f6:df:bf:ab:e8:67:
8d:d1:95:a6:f1:ae:00:1d:c2:39:fb:8f:47:79:3c:
b5:c1:73:64:d9:53:de:00:f1:31:bc:97:1d:99:d4:
8e:f0:61:71:6e:b7:aa:17:d3:2f:ba:2d:65:30:a3:
32:f4:26:cd:4e:22:b3:92:f6:ab:17:45:cb:fd:ff:
58:c9:01:2c:cf:c5:19:03:3c:5d:87:97:9d:84:c9:
b1:3a:ea:19:46:c2:99:69:bd:ad:31:e7:fc:ea:8d:
86:ac:55:12:66:20:8c:c5:13:20:8f:ab:93:39:ac:
72:c1:f2:b6:8d:30:24:8e:98:83:b6:7e:be:98:41:
68:c4:56:df:60:04:93:8f:6d:3b:a9:16:ca:41:76:
bf:d8:8d:d2:40:78:32:04:46:3e:5f:6f:2b:33:84:
19:43:68:77:83:35:7d:4d:75:c7:07:e0:52:c0:8f:
98:aa:f2:08:7a:1b:96:29:d5:5f:19:b7:d3:4b:5d:
f0:e7:2b:d0:f3:95:ab:1e:8e:e9:be:40:d1:82:8a:
25:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5D:16:3D:E9:07:DA:8B:4B:8E:60:CB:CB:79:2E:D3:45:70:44:36
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/0l0WPekH2otLjmDLy3ku00VwRDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.62.104.0/24
198.205.12.0-198.205.14.255
Signature Algorithm: sha256WithRSAEncryption
1c:c7:98:74:3d:c0:ed:68:b0:15:10:d6:52:70:d0:28:19:08:
85:03:78:cf:a1:3e:ee:cd:5a:b3:72:6f:a4:04:93:78:dc:78:
d3:62:5f:a7:77:62:0f:92:8e:84:57:45:a2:e3:65:30:3e:3a:
af:c7:42:20:79:86:7d:c4:e4:67:d5:02:b4:15:d0:86:4b:05:
4e:b1:d0:63:4f:d2:4a:68:eb:1f:6a:17:b0:25:2b:41:e5:46:
06:b8:00:c5:2b:1d:55:e5:f7:7f:a1:9c:80:7a:0d:f1:f4:b1:
91:70:a9:33:24:df:fd:94:bf:ab:4b:de:9c:fe:dc:f7:b1:86:
0a:09:99:88:47:ee:c7:bf:12:39:10:2f:c8:52:24:36:b8:11:
e6:a1:ff:1e:00:2a:75:95:6c:30:be:72:5d:4b:d4:04:76:7c:
9c:32:9e:8d:92:33:00:65:a4:df:98:3e:b7:ab:a3:00:62:bb:
12:68:9b:b3:02:90:da:8d:e1:04:45:cd:23:7a:ea:55:3a:07:
ce:a0:37:4c:50:8c:0e:2a:67:79:66:c7:88:cf:f0:eb:f4:94:
9f:54:a3:a0:9a:40:3e:a1:2b:68:b4:02:d1:2d:e5:3f:8a:15:
62:be:e3:27:a4:75:b2:d0:08:34:66:b8:57:75:c3:48:91:3f:
d3:49:67:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:49 2023 by rpki-client on console-fra.rpki-client.org