Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_skhnb4tRkxUfj72TSi9ApHplBw.roa
File: _skhnb4tRkxUfj72TSi9ApHplBw.roa (raw, json)
Hash identifier: gE6Um2u4r5eIKd6MUVq/ONGXY/g3VWCBiCFoxQrCwsM=
Subject key identifier: FE:C9:21:9D:BE:2D:46:4C:54:7E:3E:F6:4D:28:BD:02:91:E9:94:1C
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 388090D1
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_skhnb4tRkxUfj72TSi9ApHplBw.roa
Signing time: Sat 01 Jan 2022 05:54:17 +0000
ROA not before: Sat 01 Jan 2022 05:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35685
IP address blocks: 159.148.131.0/24 maxlen: 24
159.148.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947949777 (0x388090d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fec9219dbe2d464c547e3ef64d28bd0291e9941c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:41:7f:d3:59:dc:2b:e8:39:a3:e8:28:ff:
2b:9b:2d:cf:83:8b:4a:a7:8a:1d:4d:21:28:b0:a3:
e2:1a:77:5b:22:80:ab:1f:f1:cf:8f:e0:6a:97:9e:
d2:59:b5:a7:f1:5b:c8:b7:3f:9a:e6:70:f5:2d:2a:
27:22:1e:13:62:06:e0:04:7a:6a:83:c0:01:30:ad:
7a:a6:0f:bc:eb:15:20:63:62:e4:6f:42:3d:ab:20:
0e:eb:4c:a2:51:17:42:e3:15:a6:a0:60:0f:b6:8f:
7e:f5:9d:e4:e5:38:0d:9e:42:97:b9:cd:0d:f4:38:
3a:c1:04:9c:e3:a5:15:d5:41:32:ba:d7:27:4e:b7:
1b:db:0b:b8:34:9b:1e:5e:0d:7b:a2:b3:2f:71:a6:
8b:c4:99:e7:d7:32:e5:36:8b:ae:a6:10:2d:56:1d:
ab:a9:db:06:f8:09:59:6f:c9:6c:2b:b1:e4:93:3f:
ee:81:79:77:79:1b:20:d4:53:ea:7f:c9:14:d7:47:
1c:a8:1a:7f:ea:eb:9e:21:fb:12:3f:5c:15:16:c4:
ba:93:53:d3:03:e2:df:85:7e:73:fb:f9:06:04:b6:
9a:81:45:87:b5:a9:0c:43:48:50:58:22:22:93:dc:
93:22:f0:30:9e:93:72:dd:8f:55:24:40:af:66:20:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C9:21:9D:BE:2D:46:4C:54:7E:3E:F6:4D:28:BD:02:91:E9:94:1C
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_skhnb4tRkxUfj72TSi9ApHplBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.82.0/24
159.148.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:15:17:e6:ad:83:f5:6b:23:18:6f:3d:04:6f:bf:6e:33:18:
2c:1a:8c:67:93:42:d3:bf:52:70:26:0b:31:1d:8e:26:b5:19:
7f:42:bb:12:f3:ad:a9:2e:ed:8c:ea:f5:65:44:ae:91:bb:f6:
b7:f6:60:f9:fa:3a:bc:60:5d:34:5c:49:b1:f2:e2:aa:12:84:
e5:bc:c5:c8:30:d9:4b:e7:72:2c:3b:54:9c:9b:fd:43:71:b6:
1a:bf:28:75:43:59:6a:56:fe:90:07:b3:48:99:c7:49:45:d7:
1b:38:22:24:c3:b0:84:db:fc:1c:5a:fe:db:2c:7e:5d:6f:ba:
25:dd:38:7c:e3:54:f6:f7:ba:32:df:bd:8f:94:87:a2:1a:53:
7b:2e:23:d1:89:23:64:0a:91:3f:eb:ca:6e:8f:ce:2e:48:ef:
68:5f:b0:ab:2e:87:26:5b:22:ae:d6:70:63:39:23:c1:b0:b3:
b0:ad:41:6a:38:67:79:40:60:25:77:3d:14:76:27:94:43:7d:
bf:df:42:0d:9e:f2:c8:30:87:42:bd:f8:b1:7d:82:95:f5:50:
e8:26:71:05:04:92:2c:59:d4:f5:a9:0c:a8:8d:45:7d:69:82:
a9:9c:15:54:0e:49:a7:69:51:07:b9:e4:37:46:3a:ef:c6:ff:
72:3a:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:57 2025 by rpki-client