Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RDXE5Bd6D0Wv_enfQNqvxZKyEkA.roa
File: RDXE5Bd6D0Wv_enfQNqvxZKyEkA.roa (raw, json)
Hash identifier: TfkakiIig1Red94yR/BVuBwaSJqUIyKhInT9EVUXmQE=
Subject key identifier: 44:35:C4:E4:17:7A:0F:45:AF:FD:E9:DF:40:DA:AF:C5:92:B2:12:40
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018410531D4C8484F6A7EA32029C25427BD4
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RDXE5Bd6D0Wv_enfQNqvxZKyEkA.roa
Signing time: Tue 25 Oct 2022 18:06:33 +0000
ROA not before: Tue 25 Oct 2022 18:06:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210574
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:53:1d:4c:84:84:f6:a7:ea:32:02:9c:25:42:7b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 25 18:06:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4435c4e4177a0f45affde9df40daafc592b21240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:90:9c:9e:30:64:c1:9d:f2:d2:10:b9:7d:e3:
e1:59:7c:68:13:8d:e5:ec:43:74:e4:ca:15:4f:30:
9c:77:14:67:e5:1c:57:a3:79:36:c3:40:46:b5:2a:
f2:00:36:35:84:30:bb:52:bb:39:c5:c5:a5:3e:2a:
aa:ed:98:52:47:5f:db:40:d8:df:aa:62:0a:32:b8:
1b:5a:52:f2:63:95:a3:eb:ca:50:08:f1:b7:98:f8:
29:6f:5d:7d:44:2d:a4:aa:9d:1b:9e:87:df:5f:db:
e8:56:35:c2:51:d4:fb:7c:f0:95:35:72:2a:91:7e:
43:ae:d1:27:6b:fe:2c:73:e1:9e:7b:6e:15:db:c6:
b7:69:9f:7b:ce:46:97:90:73:81:d3:5c:a4:07:6b:
df:ad:be:74:99:b0:db:a9:16:45:d4:2c:5f:0f:38:
47:1b:da:91:41:7f:63:08:8e:d5:c8:10:c3:85:79:
5c:5d:3d:e2:e8:e9:99:b6:bc:66:78:cc:ed:ca:64:
b3:1f:f8:ad:cf:07:e7:23:39:f5:1a:e5:e6:bd:67:
a8:9d:ce:67:70:a4:e7:59:f8:60:85:ad:67:8a:7d:
c0:4e:80:44:58:1f:f3:d3:47:f9:3e:f3:67:1e:e1:
30:15:e8:7c:66:e1:49:85:73:0f:1f:12:71:b2:64:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:C4:E4:17:7A:0F:45:AF:FD:E9:DF:40:DA:AF:C5:92:B2:12:40
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RDXE5Bd6D0Wv_enfQNqvxZKyEkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/24
141.98.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:95:cc:85:b7:70:f5:9f:fd:31:ae:36:4c:8e:a1:2d:6f:aa:
c3:d5:28:a3:ec:95:8d:40:42:5c:7c:48:25:ff:48:25:8b:1c:
bc:ea:7b:41:02:fc:7d:e2:16:a9:b5:38:04:e0:06:b8:9c:f7:
06:fa:54:f6:55:52:5a:bf:83:f3:79:71:eb:39:24:60:46:50:
c2:43:78:58:73:ba:87:4f:a9:78:19:ec:b4:42:d9:0f:ce:f3:
8e:40:82:02:8f:1b:f1:4a:e5:b5:a7:3f:8f:59:8f:52:df:26:
60:b5:45:c9:89:db:88:74:52:d2:39:d8:01:0b:ff:66:7e:b3:
64:da:a9:5a:a0:fa:71:09:77:b6:b8:99:9c:0b:ff:0f:77:08:
a2:47:c6:b9:7a:0f:6c:3f:2c:2a:cd:2d:4a:70:f6:d9:19:9e:
69:4f:d6:20:42:d5:bd:5f:cc:92:74:78:f7:86:e3:4c:3d:bf:
0f:93:56:ce:a5:40:5b:79:43:a6:de:3c:8b:88:23:02:07:a9:
e2:75:31:00:8e:2d:74:ab:07:89:73:15:89:e3:4a:00:c8:ce:
82:24:3e:65:28:fe:b2:11:cc:6e:e0:27:55:94:d8:da:1c:5d:
89:b4:58:2f:dd:5d:06:d1:bc:6a:7a:f9:27:36:c4:c3:7f:f6:
c0:ed:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org