Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/fIArkcRBC9tA1gZF93nOQkuv1sQ.roa
File: fIArkcRBC9tA1gZF93nOQkuv1sQ.roa (raw, json)
Hash identifier: JjR+Lcs2SGGinissW+HTotA6dFO03IDVqn2N+fe+ZjI=
Subject key identifier: 7C:80:2B:91:C4:41:0B:DB:40:D6:06:45:F7:79:CE:42:4B:AF:D6:C4
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1B01C058
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/fIArkcRBC9tA1gZF93nOQkuv1sQ.roa
Signing time: Mon 11 Apr 2022 05:29:56 +0000
ROA not before: Mon 11 Apr 2022 05:29:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 136.144.35.0/24 maxlen: 24
136.144.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453099608 (0x1b01c058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 11 05:29:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c802b91c4410bdb40d60645f779ce424bafd6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5e:64:69:d3:e7:5d:73:da:8c:72:36:f7:46:
f6:34:a4:37:39:2c:bf:2b:b5:ed:c8:f1:87:b8:97:
fb:1a:f1:d5:54:19:9f:d4:39:34:7a:7c:23:2c:4b:
35:5e:69:cf:8b:03:90:92:3a:7f:6c:56:62:8c:b0:
4f:9a:b8:19:a1:ff:5f:58:82:06:92:87:91:37:14:
cd:02:fd:c5:48:d3:c1:93:32:10:60:47:2f:2d:e1:
2f:00:8f:6a:5e:82:40:7e:47:42:5e:b4:82:db:4e:
91:33:4c:37:ce:ee:6e:67:17:9c:ed:23:d0:58:d6:
b7:c0:4d:58:82:e6:a4:7c:8e:25:2c:0b:30:11:2c:
40:a0:02:d0:e3:bf:a0:07:dd:9d:ab:e0:22:c2:c6:
f1:85:5f:34:d6:bb:d2:ca:44:c2:48:b7:0a:cd:dd:
9a:a6:c5:9b:24:48:6d:3d:70:c5:b7:05:e9:84:2e:
16:a6:2d:c6:11:52:cb:fe:cb:78:7b:60:56:ec:a4:
19:c1:b2:1b:3b:1c:87:28:fb:6f:c3:c1:10:c8:02:
9b:a3:fe:d1:dd:09:8b:fe:a8:ad:6c:b4:5a:6a:ee:
f8:00:5f:d1:cb:79:f9:fa:9c:43:62:12:0d:99:a6:
06:55:36:1c:77:28:5d:69:4b:ac:6b:14:ab:f2:e3:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:80:2B:91:C4:41:0B:DB:40:D6:06:45:F7:79:CE:42:4B:AF:D6:C4
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/fIArkcRBC9tA1gZF93nOQkuv1sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.144.35.0/24
136.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b0:22:59:d3:fb:8e:f8:30:b7:1f:e5:03:07:f2:c6:6f:b0:
16:9d:5e:70:53:95:35:fc:25:9d:3a:c7:93:8d:42:e6:33:61:
82:c1:da:aa:97:70:d9:ba:08:78:c6:7b:4b:a6:6d:10:e3:e9:
1e:b0:00:98:62:60:8a:14:aa:c6:8c:b3:79:85:aa:1a:db:0c:
61:04:56:d1:4d:21:f3:57:89:b7:87:83:69:4d:f9:b3:21:e8:
e5:ad:f1:ef:0d:2c:d8:ce:c6:5e:a6:a5:b3:3a:22:73:5e:9f:
a5:cf:50:cb:cf:6a:aa:c9:f9:6e:99:4e:6b:68:6e:da:2d:15:
6a:9f:fe:2f:b6:0c:94:04:3f:d4:98:df:32:22:98:8f:fa:68:
3c:de:f9:04:a9:f2:6a:3a:f0:de:e7:a0:4c:b6:3e:d4:c4:19:
f6:b8:5c:21:4d:43:be:25:e4:a6:fa:71:4d:70:aa:fb:5c:e2:
1b:d8:28:e2:13:fa:26:eb:6c:9e:5f:a0:81:4a:f8:f8:f0:a6:
87:f9:aa:06:02:ec:e4:e8:62:c6:f7:f3:31:c6:22:4f:08:ac:
62:bc:1f:a3:51:c4:d8:e9:c3:4c:fd:06:c6:cc:d5:6e:eb:97:
d6:8c:2a:b3:c1:9c:43:61:dc:d2:d6:d7:24:23:7d:71:c6:1a:
cd:27:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org