Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/PrSBJ1ho4rtQumwqKRgZ9eVvb-g.roa
File: PrSBJ1ho4rtQumwqKRgZ9eVvb-g.roa (raw, json)
Hash identifier: M464D8htTtTmZ8myVftY0E45bfwkyOXFc/VPlJNdYgg=
Subject key identifier: 3E:B4:81:27:58:68:E2:BB:50:BA:6C:2A:29:18:19:F5:E5:6F:6F:E8
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 0A0839A5
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/PrSBJ1ho4rtQumwqKRgZ9eVvb-g.roa
Signing time: Sat 01 Jan 2022 03:52:35 +0000
ROA not before: Sat 01 Jan 2022 03:52:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1213
IP address blocks: 136.206.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168311205 (0xa0839a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jan 1 03:52:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eb481275868e2bb50ba6c2a291819f5e56f6fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:13:dc:31:78:07:02:76:2b:11:64:4b:60:
db:69:ac:63:92:c8:f6:be:6b:a2:05:32:62:ec:20:
a0:15:c7:e0:be:f4:81:56:a5:e9:9a:2e:81:62:fc:
73:d8:39:71:e3:e0:54:9e:ce:c7:72:9c:0c:fe:56:
56:fa:4f:4c:1a:bb:2e:3c:0c:71:25:b2:2e:10:77:
3e:a9:a2:99:ac:56:12:f1:7f:f7:fc:db:60:3e:44:
a5:72:a8:27:62:85:58:15:13:55:c1:a7:31:9f:55:
34:21:a3:0c:66:34:b6:86:df:fc:43:09:79:2b:d9:
e9:da:ea:76:38:01:15:de:80:e7:13:aa:bb:4b:d5:
57:fc:df:f0:fb:b9:3e:0c:e9:e0:85:3d:d8:cd:1a:
62:21:0c:94:32:36:e9:bf:34:67:39:52:0c:bf:9d:
61:d0:1f:b2:d9:7a:07:47:a0:63:ad:76:c8:3f:3c:
24:93:9f:aa:f2:11:a2:4b:0f:50:3f:0c:58:91:a5:
5d:db:46:6c:1c:27:d3:76:5e:1d:38:f9:f9:5c:7a:
25:bc:17:a5:fb:3f:00:ba:66:f0:18:30:87:18:b6:
ac:a3:48:a9:59:f3:54:60:31:40:f9:df:e0:a0:5b:
97:4e:78:ba:6f:b4:c0:7b:ae:a8:62:e5:49:60:d8:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B4:81:27:58:68:E2:BB:50:BA:6C:2A:29:18:19:F5:E5:6F:6F:E8
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/PrSBJ1ho4rtQumwqKRgZ9eVvb-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:34:65:12:0b:9a:15:83:d9:ba:47:93:fd:51:56:ce:d0:25:
79:27:09:e0:61:5b:c8:47:93:f7:d2:d0:c5:45:8b:41:61:3d:
51:02:f5:3c:d2:62:44:71:f0:48:cb:ed:20:47:4b:f1:d0:70:
da:c6:4b:2f:ad:5f:6a:8a:c2:cc:ae:04:b8:42:65:b8:04:48:
dd:4c:78:b7:62:5c:f5:83:ed:3f:aa:1d:1c:bf:b9:9c:26:b7:
1f:12:fe:c1:7a:40:37:b8:e9:ca:74:d2:08:be:2e:8d:e4:39:
29:aa:f8:1d:23:ee:56:0f:cd:4f:08:bb:ed:b2:87:a9:9b:7c:
b9:0a:2e:99:8a:b2:4b:4b:f2:67:3b:c6:9d:b6:4f:f7:07:6f:
7f:51:c1:22:c5:e7:8c:8c:46:f9:df:75:79:c4:91:29:6c:69:
72:67:e7:f5:58:1b:9e:1e:8c:b4:60:ad:b7:72:99:67:ff:20:
61:29:e9:c9:ec:75:ab:5b:2d:d2:70:29:18:df:d4:2e:81:45:
ec:9c:36:ad:c0:65:12:68:4a:8a:f4:9e:1f:6d:43:78:d9:5f:
42:6b:7f:d9:74:15:5d:64:8a:9b:98:bc:c2:0b:8a:9e:5e:d1:
46:36:50:87:c4:87:ae:35:5d:e7:ee:3e:8a:26:41:25:d8:34:
db:9e:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:54 2024 by rpki-client on console-ams.rpki-client.org