Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Fev8Iu6j-c5YHPBjMLpIDh0ksgc.roa
File: Fev8Iu6j-c5YHPBjMLpIDh0ksgc.roa (raw, json)
Hash identifier: j+bsDYshiF7Ox181ofoTEppGRR2TZP1qrW+U64rXZn4=
Subject key identifier: 15:EB:FC:22:EE:A3:F9:CE:58:1C:F0:63:30:BA:48:0E:1D:24:B2:07
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018344C83B64D43A74530FD9422008AD961D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Fev8Iu6j-c5YHPBjMLpIDh0ksgc.roa
Signing time: Fri 16 Sep 2022 05:31:56 +0000
ROA not before: Fri 16 Sep 2022 05:31:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199524
IP address blocks: 45.130.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:44:c8:3b:64:d4:3a:74:53:0f:d9:42:20:08:ad:96:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 16 05:31:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15ebfc22eea3f9ce581cf06330ba480e1d24b207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:38:6d:69:07:32:5b:16:f8:67:35:f3:f8:
28:b4:0d:c4:72:bc:8f:8a:a5:ed:91:c7:1e:1d:d9:
ef:a6:49:5f:ba:ff:4e:3b:e9:e9:d8:de:d7:df:a2:
ed:7d:5a:a8:1d:4a:da:ab:f5:1f:76:39:8f:11:b6:
fe:19:27:2a:6e:5d:35:cc:37:ab:bb:ea:4f:41:03:
4e:1c:b1:60:8f:e5:a5:f5:3e:8e:de:fa:3f:7a:d1:
1f:e2:f3:4c:c4:5b:c3:1e:9e:d8:3e:f5:f9:ed:a3:
06:cb:25:ae:32:98:c8:fb:08:92:8c:d1:43:26:2f:
be:4c:d9:3f:64:47:fe:ff:27:14:8c:a0:91:10:06:
b6:63:19:22:4a:1c:d5:55:3b:38:ef:8a:ab:f4:f4:
0e:cb:97:cc:e2:be:c2:81:56:c5:b8:e6:83:0e:0e:
2d:76:00:c9:85:88:84:af:c5:4b:2d:56:87:bb:7e:
a0:9d:0a:94:d1:97:d4:e5:88:a0:6c:2b:d1:c3:00:
fd:43:e8:64:90:83:3e:85:14:76:0f:96:5c:06:b0:
1d:de:90:31:53:c7:e0:cc:54:7d:7c:2c:4b:3f:fc:
34:0a:ab:db:f0:c0:1a:4d:80:75:fa:66:5d:af:12:
01:cc:92:7d:93:72:5e:1f:a0:ba:ad:8b:b1:89:39:
80:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EB:FC:22:EE:A3:F9:CE:58:1C:F0:63:30:BA:48:0E:1D:24:B2:07
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Fev8Iu6j-c5YHPBjMLpIDh0ksgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ff:1c:52:03:bf:b2:44:57:70:14:05:13:3a:29:d9:26:90:
ea:ac:ea:c7:3c:83:c8:da:8a:38:a2:69:5f:8a:91:93:b0:61:
3d:e4:27:0f:9a:bf:9b:f7:bf:b5:93:f8:df:c4:a5:a5:5a:bb:
42:32:bb:30:6d:b1:3e:cc:82:99:8d:a2:ff:c9:5a:f4:59:2c:
8d:03:ca:7d:c7:95:0e:79:19:80:13:a4:b6:8e:9a:21:2e:fe:
38:7f:52:26:a1:fc:38:4f:1e:6d:07:ba:af:09:bb:87:c9:40:
b8:89:3e:72:04:b5:fa:df:d4:dc:c3:56:f1:1d:66:91:7a:95:
ae:06:34:28:c9:09:30:9b:d3:0b:89:00:8d:f4:99:5d:2c:cb:
c0:fd:91:5a:3e:d5:f3:aa:a3:f2:f2:46:3a:79:fb:ff:74:a6:
c7:cc:e0:63:51:3b:51:41:06:8a:ba:bd:29:a1:4c:5e:9a:69:
84:1b:05:09:b4:3f:56:19:23:e9:93:99:18:c1:0b:cd:4f:16:
3f:cc:d7:b4:4c:31:94:0b:9d:78:bb:f7:64:59:70:f4:9a:50:
22:30:d8:05:2b:1d:bc:1d:1f:ae:dc:41:11:76:db:40:42:d8:
e7:ed:8b:8b:a2:d2:c3:ed:61:3e:50:33:78:78:df:3c:43:92:
9f:c2:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org