Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/JduQuiXc8djpiG-Ax1ydgXjgEyA.roa
File: JduQuiXc8djpiG-Ax1ydgXjgEyA.roa (raw, json)
Hash identifier: oOhvwC8JFj6thZcv/7J4YkGmGRsVNZwrDLYxegsXdiE=
Subject key identifier: 25:DB:90:BA:25:DC:F1:D8:E9:88:6F:80:C7:5C:9D:81:78:E0:13:20
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0391C15A
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/JduQuiXc8djpiG-Ax1ydgXjgEyA.roa
Signing time: Sat 01 Jan 2022 08:05:44 +0000
ROA not before: Sat 01 Jan 2022 08:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204720
IP address blocks: 163.171.153.0/24 maxlen: 24
148.253.60.0/24 maxlen: 24
148.253.62.0/24 maxlen: 24
148.253.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59883866 (0x391c15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jan 1 08:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25db90ba25dcf1d8e9886f80c75c9d8178e01320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:58:fd:2f:17:af:b1:fb:11:00:93:ea:7a:
00:02:83:f2:77:5f:e7:38:38:83:5a:90:23:bf:c9:
b3:36:ae:29:fe:d2:a1:6e:3d:fa:00:92:ce:7a:3c:
c0:f4:4a:85:51:99:fd:12:b5:15:60:09:a1:db:e8:
2a:79:b4:67:38:35:07:b6:eb:3a:6f:09:d9:f6:82:
8f:3b:27:e3:28:7d:08:47:08:67:1a:c7:bd:e4:e9:
b9:7f:87:a6:ee:70:72:4f:e7:ed:ce:01:61:c2:cf:
d6:c4:84:80:58:41:bb:ee:3a:79:e7:b9:1a:44:08:
cd:a6:ef:e7:00:02:5c:4c:eb:88:bf:8f:5e:00:8c:
60:3d:84:03:cf:ce:d2:8e:d7:9f:bb:9a:5d:77:29:
e0:d3:d7:ed:17:d5:e1:6c:1c:5d:94:1e:16:5d:95:
09:ae:e2:aa:1c:47:33:ed:35:01:b7:51:2e:5a:73:
2c:50:34:38:95:11:4b:74:15:6a:87:4a:28:d2:7d:
e7:cb:da:6b:18:c0:9a:81:5b:31:ce:6f:a4:32:b7:
3d:91:05:95:04:03:55:f9:d7:60:e7:94:e9:15:4e:
19:06:63:f1:50:6c:6c:0b:4f:06:ca:f9:08:e8:85:
e4:42:bb:69:89:bd:fa:59:30:17:1c:ab:9e:12:f4:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:90:BA:25:DC:F1:D8:E9:88:6F:80:C7:5C:9D:81:78:E0:13:20
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/JduQuiXc8djpiG-Ax1ydgXjgEyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.253.60.0-148.253.62.255
163.171.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1a:7f:2b:e8:4d:48:8a:ab:5f:12:a5:12:4f:66:79:a5:ef:
c0:dc:da:c2:a0:99:18:6a:ea:f9:d1:c3:cb:0c:b7:ef:73:da:
7d:7c:1a:cb:d3:28:67:f4:f6:75:e4:19:2c:35:99:70:d4:c2:
9d:9c:ac:8a:cd:e8:ef:2a:e3:ff:24:50:b8:35:68:9e:2b:1c:
e1:74:e0:4a:4b:24:73:cc:2b:49:4d:23:23:fd:5c:bc:39:b7:
46:ff:0a:1e:a3:60:f9:3e:26:db:c6:4a:a8:3b:d5:32:98:02:
2b:c8:d1:65:ee:ad:ce:df:9f:37:93:32:2a:d0:a0:31:e9:ab:
d1:9e:5c:fc:8b:89:9b:6a:98:18:b0:54:9b:48:6f:75:85:78:
f6:98:86:90:fd:ec:2f:6a:e4:49:17:a0:dd:77:aa:8a:19:23:
9f:18:73:3f:36:67:2d:ab:40:c2:b3:2b:8f:f7:f9:b8:5e:fc:
fd:64:8f:08:ba:5d:bd:16:3c:78:80:3c:fb:ac:b4:fb:46:1f:
72:4d:e7:e4:37:ba:b6:ff:c4:da:22:0c:c4:e2:3a:3e:5d:98:
b5:c1:2b:1c:42:29:29:14:db:42:da:64:4e:5f:3e:01:7b:4b:
72:bd:61:15:25:57:09:ba:c8:63:c1:46:81:ad:dd:b4:22:52:
5d:0c:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org