Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/hOPwYmFSfdSDKM3meiAjhQvxbmU.roa
File: hOPwYmFSfdSDKM3meiAjhQvxbmU.roa (raw, json)
Hash identifier: pS3sHrlEcfJX0jGFi9DxgPzMFtHFg0cr6q1zDL0EQiA=
Subject key identifier: 84:E3:F0:62:61:52:7D:D4:83:28:CD:E6:7A:20:23:85:0B:F1:6E:65
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 03D4B0E6
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/hOPwYmFSfdSDKM3meiAjhQvxbmU.roa
Signing time: Sat 01 Jan 2022 14:08:35 +0000
ROA not before: Sat 01 Jan 2022 14:08:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 109.68.70.0/24 maxlen: 24
109.68.67.0/24 maxlen: 24
109.68.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64270566 (0x3d4b0e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Jan 1 14:08:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84e3f06261527dd48328cde67a2023850bf16e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:b6:de:fc:e5:db:98:2a:a2:10:a4:59:e1:
9c:11:87:95:86:52:92:48:dd:ea:bb:91:1a:7b:aa:
fa:9a:8c:0d:a1:9a:8e:a0:3c:df:f0:ff:08:70:f8:
45:e4:2d:e8:2b:99:5d:0b:ac:04:48:7d:04:ca:6c:
66:66:00:54:e0:e0:d6:c1:dd:52:5f:69:c3:d9:bf:
86:a1:72:4d:42:7c:84:f8:f1:2f:34:c1:5d:3d:02:
50:a9:c0:86:dd:17:97:21:ce:9b:19:a7:41:4d:f5:
86:23:20:27:61:25:99:4f:9b:1c:09:5d:fb:ca:6d:
52:00:3d:51:3e:37:da:b4:4d:fc:2a:45:6f:aa:53:
63:e0:3a:0b:58:08:f7:87:42:e1:e6:83:ff:2c:65:
6d:70:57:95:9b:48:c3:f0:6e:f6:85:40:36:f7:76:
31:5c:b1:c0:23:d7:c8:81:b8:e2:16:f0:51:13:5b:
d5:7b:48:00:4b:58:5e:01:2c:a4:2d:ca:67:0d:6f:
cf:1f:9b:95:d5:e3:89:01:4c:59:53:4f:78:6a:f2:
45:46:ea:c6:33:ef:64:ff:fe:76:71:12:ed:e7:7f:
a7:e3:78:fb:e2:6d:f7:90:82:82:40:ad:44:6e:a4:
53:34:ec:7f:ef:ae:ad:a1:60:f4:58:ff:fb:88:d0:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E3:F0:62:61:52:7D:D4:83:28:CD:E6:7A:20:23:85:0B:F1:6E:65
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/hOPwYmFSfdSDKM3meiAjhQvxbmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.67.0/24
109.68.70.0/23
Signature Algorithm: sha256WithRSAEncryption
81:2a:99:b1:cc:23:21:87:13:ad:86:c8:b8:69:b6:59:3c:24:
57:6e:8e:76:f9:4f:b6:9c:3b:26:10:f4:f1:b4:6b:1b:18:82:
7e:3c:53:a7:61:8a:4a:44:76:86:3a:af:f5:51:d8:ad:26:7e:
04:b4:ef:18:89:e4:25:c3:e4:7a:58:8d:68:f0:d8:2b:57:1b:
5c:f2:51:c4:29:19:9b:97:65:17:1e:19:0b:c1:b5:70:33:68:
d7:35:af:e2:16:b2:b8:14:a5:86:a2:8b:3b:61:9a:29:78:0c:
b8:4c:25:39:99:ca:c1:ce:a1:41:a7:18:b5:2e:d9:ac:ac:9d:
d8:c0:22:f0:bb:a5:25:e9:49:b6:d6:e2:96:da:b3:3e:53:34:
a1:b5:8b:8a:0c:5b:8f:14:e2:c3:c1:10:74:07:15:ac:b9:47:
68:62:de:7d:a6:e9:95:0f:f4:83:e1:ce:be:ec:d7:2b:c6:7b:
2c:7d:6b:14:fc:7a:54:dd:96:3c:e7:a4:88:cf:f7:2a:77:92:
5a:82:9b:1a:1f:5e:b9:03:c8:50:45:23:0c:2a:cb:64:fe:b8:
18:fc:04:82:c8:73:45:e5:9c:66:14:c4:d9:a6:d3:8e:37:0a:
67:05:0a:d4:b8:17:47:1c:88:98:25:ad:1f:56:e8:6d:0a:54:
84:ab:33:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:00 2023 by rpki-client on console-fra.rpki-client.org