Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/mAsCUdTqs7toIMA1FFOOEc3w6YA.roa
File: mAsCUdTqs7toIMA1FFOOEc3w6YA.roa (raw, json)
Hash identifier: Ou/Fa/suvr4r4rDmAAbu6xmzk5zlj/vMQdK8XHnlrGU=
Subject key identifier: 98:0B:02:51:D4:EA:B3:BB:68:20:C0:35:14:53:8E:11:CD:F0:E9:80
Certificate issuer: /CN=555d742d527f9700cc0047d7d61bfd822878db1f
Certificate serial: 05EDE22B
Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/mAsCUdTqs7toIMA1FFOOEc3w6YA.roa
Signing time: Sat 01 Jan 2022 14:08:08 +0000
ROA not before: Sat 01 Jan 2022 14:08:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44075
IP address blocks: 194.147.159.0/24 maxlen: 24
194.147.156.0/22 maxlen: 22
194.147.156.0/24 maxlen: 24
194.147.157.0/24 maxlen: 24
194.147.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99476011 (0x5ede22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f
Validity
Not Before: Jan 1 14:08:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=980b0251d4eab3bb6820c03514538e11cdf0e980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:79:5d:46:24:82:db:ba:8d:92:53:f2:b1:
3a:80:18:47:fd:de:74:4c:51:d8:14:27:02:fc:fa:
61:43:9c:76:9b:c0:d5:35:5e:29:60:13:1d:9b:f5:
ff:9b:aa:05:40:d0:da:d8:1b:41:78:ab:0e:d4:b2:
40:b4:20:3f:6d:26:0e:d1:14:49:ac:6d:22:e2:8a:
62:b4:05:20:51:60:49:bd:ce:33:02:ed:54:1b:cf:
03:c7:75:e1:a3:02:27:1a:3e:dd:08:94:7e:1e:46:
3f:0d:74:6e:14:c3:bf:da:0c:fe:03:8c:ac:aa:1a:
86:1e:48:df:cc:22:12:be:51:f7:e8:fc:f1:8b:3d:
15:b3:cd:5d:14:aa:f2:51:8d:2e:3d:24:34:a5:45:
5d:2e:7a:38:c1:e1:11:27:13:7d:56:e3:20:c9:23:
72:1b:78:6b:0b:13:cd:92:27:3e:12:c8:c1:ba:02:
88:a8:43:85:50:fc:59:33:d0:e4:6d:aa:3d:6a:78:
d7:bf:12:66:56:fa:18:cb:fb:00:ce:12:9f:59:fb:
c8:e3:00:df:01:93:1f:b7:17:5a:64:d7:48:0c:34:
a3:c7:8d:cb:b0:90:db:44:8b:5b:3e:62:79:cf:6d:
9f:27:4b:e0:30:33:f8:fb:2d:07:f7:9b:94:06:e6:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0B:02:51:D4:EA:B3:BB:68:20:C0:35:14:53:8E:11:CD:F0:E9:80
X509v3 Authority Key Identifier:
keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/mAsCUdTqs7toIMA1FFOOEc3w6YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.156.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:1a:14:ec:82:05:ce:fd:72:65:29:cf:3e:a1:80:32:1e:0a:
e0:a0:c5:3a:b6:34:a8:a1:c3:86:39:d4:59:7d:36:91:3e:9b:
41:6b:1b:f5:25:43:f6:fc:02:14:1d:6f:06:a5:4a:cc:1a:7d:
68:48:eb:30:39:4f:af:55:b8:07:a7:cf:e4:24:03:7b:d9:1c:
97:16:64:e8:03:c4:5a:39:72:81:1b:34:17:6d:ca:d6:c3:0d:
aa:09:fa:02:c0:6a:a3:c8:ae:22:70:a4:f2:91:dc:d5:ea:7d:
e9:14:a4:78:cd:40:16:3c:0c:dc:4f:26:b3:f8:be:c9:b9:d2:
fe:31:ec:e4:d7:dd:81:c0:4a:9a:b4:8b:d6:98:58:70:44:c0:
5a:6e:33:14:5d:9d:58:15:1b:a6:41:f2:6b:58:f3:4f:b4:50:
b4:92:4f:f6:23:51:e3:e2:3a:ac:fb:b4:e8:05:47:71:ef:c4:
0f:2e:96:c4:00:6f:87:28:e2:bf:97:49:7b:50:94:c6:88:32:
cc:02:58:2e:3d:8a:05:2f:a5:7b:83:aa:ea:d2:61:99:09:bc:
ca:bb:d9:20:ac:0a:6c:ae:5c:4b:61:d0:46:e9:d3:95:b8:06:
ef:fe:98:1c:3f:86:9d:17:00:ba:a6:4d:41:95:47:96:0d:de:
b8:f1:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:03 2024 by rpki-client on console-fra.rpki-client.org