Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/fvw7F2UXaOdoyD-4d14oPLB7ZOg.roa
File: fvw7F2UXaOdoyD-4d14oPLB7ZOg.roa (raw, json)
Hash identifier: 2GOyLO4g55cuChekqylDuRGJy+x0bue/jEiW5XP36bA=
Subject key identifier: 7E:FC:3B:17:65:17:68:E7:68:C8:3F:B8:77:5E:28:3C:B0:7B:64:E8
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 03D5B205
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/fvw7F2UXaOdoyD-4d14oPLB7ZOg.roa
Signing time: Sat 01 Jan 2022 14:08:36 +0000
ROA not before: Sat 01 Jan 2022 14:08:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 109.68.71.0/24 maxlen: 24
109.68.67.0/24 maxlen: 24
109.68.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64336389 (0x3d5b205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Jan 1 14:08:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7efc3b17651768e768c83fb8775e283cb07b64e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ba:ee:f6:a9:8f:11:2f:60:03:38:bb:1d:c2:
f2:29:06:52:4a:e0:f0:fc:c0:6a:c9:57:5a:a8:b2:
39:6c:7a:7e:24:b6:1c:90:c8:1f:8b:6d:47:59:87:
46:a1:fe:91:5d:36:28:92:1e:1b:0b:40:5a:a7:a5:
b2:24:eb:f0:b1:df:6e:76:f7:06:08:01:78:5f:45:
49:1e:0a:e9:50:aa:7e:1d:43:3f:dc:28:f2:9c:8e:
cc:22:6f:cb:67:c5:94:97:e3:17:eb:95:36:e8:5e:
54:99:53:29:5b:69:6f:d5:63:02:16:8a:b1:f9:2b:
40:41:1e:36:3d:5f:c1:ce:17:8f:88:53:5f:e7:77:
15:df:f0:97:47:2a:27:42:d1:b2:59:4a:56:2b:03:
4a:bb:79:af:5b:c6:ca:95:02:71:29:ef:a3:20:9f:
2f:19:52:7d:cd:73:30:f9:32:39:cc:da:fa:17:b0:
a6:85:44:d3:4e:cc:aa:fc:21:8b:ae:ec:4b:60:d1:
25:ce:8b:e8:80:a4:a1:cb:3a:93:9c:c6:21:3f:e6:
95:bb:66:87:84:49:41:d8:fe:9e:b9:51:9f:1f:88:
29:b9:c4:c9:d4:c4:6f:6f:af:c2:2a:9c:db:f2:46:
93:a4:75:bf:58:f0:e6:f2:30:0a:19:81:3b:97:01:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FC:3B:17:65:17:68:E7:68:C8:3F:B8:77:5E:28:3C:B0:7B:64:E8
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/fvw7F2UXaOdoyD-4d14oPLB7ZOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.67.0/24
109.68.70.0/23
Signature Algorithm: sha256WithRSAEncryption
24:b9:34:72:d5:e5:2c:08:10:a2:f7:53:2f:6f:3c:f5:5d:c4:
ea:73:2b:a5:23:13:e3:cc:eb:1b:dd:b6:ea:38:cb:c4:e7:a7:
6d:81:71:3e:f0:d4:7b:74:3b:b8:7e:63:8d:af:a6:42:c1:f2:
80:ad:6c:16:ba:9b:18:c9:06:ea:16:b9:bb:9d:74:8f:9c:93:
72:b5:04:35:b2:fe:f8:37:c5:61:df:8c:f5:5a:00:25:97:3a:
5f:6b:49:15:52:11:3a:92:01:b0:f9:c6:2e:f4:bb:70:57:f1:
90:77:f9:cb:05:28:d6:2e:43:d5:69:71:7c:5d:3a:0a:e1:e9:
15:ff:12:c7:9f:5b:ad:aa:e2:bb:0b:51:61:44:42:9d:19:fb:
c9:25:95:ab:ba:27:15:e6:59:30:70:89:14:b2:57:19:7d:71:
f7:39:a1:a2:ee:24:50:7d:08:0b:0a:c4:e7:94:3b:25:3b:34:
10:4d:2f:ae:86:3d:f0:85:e7:f0:60:48:80:14:2c:02:5f:02:
d6:a2:1a:b1:d3:53:9a:0b:34:9f:8c:79:88:1c:15:ef:f6:1d:
7a:54:a1:c3:62:64:15:b2:ee:b7:df:7a:cf:45:c5:27:d4:ec:
c8:0d:af:85:d9:4a:28:4d:c1:75:9c:4c:14:45:7d:ba:e6:3d:
ea:7a:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:00 2023 by rpki-client on console-fra.rpki-client.org