Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/s53m0-SsY5BccVSQxnYtGA-RPgc.roa
File: s53m0-SsY5BccVSQxnYtGA-RPgc.roa (raw, json)
Hash identifier: h5VnAnk/rpaAZXdz6tLznL8EgfLP9A8+F28/WpzGsn8=
Subject key identifier: B3:9D:E6:D3:E4:AC:63:90:5C:71:54:90:C6:76:2D:18:0F:91:3E:07
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 08F3D880
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/s53m0-SsY5BccVSQxnYtGA-RPgc.roa
Signing time: Sat 01 Jan 2022 03:59:08 +0000
ROA not before: Sat 01 Jan 2022 03:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137
IP address blocks: 156.148.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150198400 (0x8f3d880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Jan 1 03:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b39de6d3e4ac63905c715490c6762d180f913e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:bd:16:5d:86:c4:7c:ac:e1:bf:c8:80:19:
c4:4a:bd:dc:d7:59:55:42:2a:e7:9c:e7:64:5b:8d:
d5:f0:2d:9c:ad:93:95:c7:59:68:55:4d:75:43:9b:
25:82:89:c5:87:48:36:f6:7b:4a:ea:53:29:67:62:
83:93:ec:90:6e:b2:d3:38:10:c8:55:46:05:25:6f:
78:a8:5f:22:9c:bf:fc:86:40:46:9b:9d:3a:86:56:
b4:b8:1b:c1:38:26:82:2f:26:ee:39:5b:d4:d8:6c:
56:76:26:45:5a:02:1e:4c:76:ac:98:1b:9d:32:9c:
9c:3b:58:5a:f7:9f:5c:84:a3:a0:9e:7d:20:2c:0d:
09:c9:46:32:0a:be:0c:53:ad:5f:0e:fd:aa:58:a1:
4e:c4:68:4d:b7:26:5c:d5:33:17:17:62:53:6a:29:
43:38:af:6e:e7:cd:e3:b4:aa:1f:82:24:c6:23:85:
82:8c:7b:00:ac:3f:10:39:d0:72:a0:6f:ed:c2:47:
07:64:79:52:ef:a9:90:1d:a8:cc:c3:aa:ac:17:88:
dd:92:3f:7b:f8:74:e2:9d:fa:e2:ff:43:a5:14:91:
1d:89:d4:c9:07:e6:de:0b:e6:21:2b:8f:e4:d6:61:
e2:1d:30:c6:83:e2:89:42:92:30:f7:79:bd:3f:05:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9D:E6:D3:E4:AC:63:90:5C:71:54:90:C6:76:2D:18:0F:91:3E:07
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/s53m0-SsY5BccVSQxnYtGA-RPgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.148.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:ab:32:50:53:f2:0d:ba:7b:ba:cf:ee:ed:e0:13:e5:e0:21:
22:89:56:86:bc:c5:81:f7:ea:61:e3:e0:b2:37:66:2c:dc:f5:
12:14:38:21:fc:86:bb:ef:f4:67:d1:6b:3c:db:81:32:f5:51:
42:52:ad:23:d6:b2:13:7e:44:5d:4e:33:16:11:e6:b5:d6:e7:
b4:c8:af:31:2b:5c:cf:49:f7:24:4b:0e:f2:bb:11:62:76:e3:
3e:46:3e:78:57:7a:81:22:c3:1c:01:d8:e6:4a:82:ce:42:80:
a6:d1:0a:3d:c5:4c:bb:59:35:29:e6:bd:76:96:f3:cf:b6:c6:
3b:f6:a4:52:cd:60:a5:cb:bf:65:81:d0:27:29:b8:04:8c:bd:
c2:f7:24:37:6a:00:99:ff:86:a1:28:ba:6f:d7:c6:8f:26:59:
8e:3f:ba:a5:e9:14:2e:1c:5d:04:3b:9b:f3:9f:c4:f5:84:02:
dd:de:77:74:7f:48:9f:9a:31:fd:99:44:3b:fb:ca:1b:f4:1d:
aa:ba:9a:72:6c:42:fc:3f:5e:7b:d6:fb:83:7a:a2:41:0c:da:
e2:b2:f7:80:0f:be:e4:6f:4f:45:12:58:42:14:e2:37:31:c5:
f5:ef:c4:a1:69:08:8e:76:a5:eb:e6:c5:0c:ca:d8:1e:4d:9e:
7f:83:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:13 2024 by rpki-client on console-fra.rpki-client.org