Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/47Vd0pF4TVwVZuKnju8aHXd0yOU.roa
File: 47Vd0pF4TVwVZuKnju8aHXd0yOU.roa (raw, json)
Hash identifier: TFRgyaIXLmYvUP6/TX8RvxNk1p3rHsUvMCvROUHFf8s=
Subject key identifier: E3:B5:5D:D2:91:78:4D:5C:15:66:E2:A7:8E:EF:1A:1D:77:74:C8:E5
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0182D58F3A34A850573082F7D69556D1BD43
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/47Vd0pF4TVwVZuKnju8aHXd0yOU.roa
Signing time: Thu 25 Aug 2022 15:11:49 +0000
ROA not before: Thu 25 Aug 2022 15:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 155.254.36.0/22 maxlen: 24
107.181.130.0/24 maxlen: 24
107.181.140.0/22 maxlen: 24
198.105.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:8f:3a:34:a8:50:57:30:82:f7:d6:95:56:d1:bd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Aug 25 15:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3b55dd291784d5c1566e2a78eef1a1d7774c8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:16:a4:f0:d8:e2:dc:60:c3:f7:94:58:cc:
e2:9c:9e:29:12:5b:9c:01:0a:83:be:41:c0:56:82:
cf:33:ac:71:14:2e:cb:4a:41:6c:90:57:83:18:0e:
ef:ca:68:d4:27:cb:b6:e7:3b:ce:13:dd:cc:f3:02:
8b:52:4e:5e:09:ca:03:3e:24:6f:66:30:f9:11:fa:
6a:b6:1f:91:7b:cb:83:fb:7a:fc:97:c4:f2:70:ed:
e1:73:be:97:66:03:30:5d:95:0e:d4:e9:45:0f:5c:
2e:46:79:8b:8d:2e:64:92:4f:85:58:3b:22:d4:1a:
58:12:01:2c:81:a8:34:7b:9c:49:2c:3b:fc:41:91:
f4:c4:aa:2b:5a:6f:38:ad:c8:d8:e2:cd:b5:84:56:
ff:a6:ee:7c:60:ac:60:99:2a:f0:e4:1a:7c:21:c3:
32:a7:10:d8:83:7b:b1:86:7a:cc:3b:c1:ce:90:59:
ae:0f:d1:d8:30:cc:72:e0:a8:0e:b8:65:e4:5f:65:
76:4d:b8:71:13:df:31:06:07:8e:44:a2:5d:55:64:
12:ff:cd:02:4d:76:88:69:89:22:f3:7e:ff:2e:d8:
6c:08:fb:59:c0:f9:c4:9a:82:07:1e:4f:1a:de:51:
db:7c:4f:32:d4:a9:35:9c:cd:9a:3d:17:e8:85:b9:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B5:5D:D2:91:78:4D:5C:15:66:E2:A7:8E:EF:1A:1D:77:74:C8:E5
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/47Vd0pF4TVwVZuKnju8aHXd0yOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.130.0/24
107.181.140.0/22
155.254.36.0/22
198.105.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:58:81:52:2b:c4:3a:67:bc:43:6f:eb:29:63:32:9c:22:32:
0c:2a:fb:5f:26:bc:7f:3d:63:b9:7d:ec:08:0f:cb:30:de:ba:
0d:6b:13:18:b5:24:b8:bd:d3:14:16:6d:31:56:e1:91:96:45:
8c:12:90:a0:d0:71:91:3e:ce:e7:98:aa:64:70:c7:b2:18:b2:
4d:72:e1:f0:d2:8f:70:39:50:5c:a1:58:e3:4a:22:f6:77:47:
38:cb:d9:82:e1:12:e7:35:58:e1:dd:f9:a6:f6:d3:9c:4e:10:
76:44:42:44:81:f4:18:0d:8a:0e:b6:17:fc:8e:5a:f3:7c:42:
39:ab:8b:c8:56:af:d6:10:dc:d5:68:a8:46:c4:9f:fc:4c:68:
62:c5:be:b9:8b:aa:f6:31:60:6a:1e:c2:67:14:af:63:d8:5c:
2e:be:71:28:d2:66:be:3d:48:5a:89:4c:32:73:87:75:41:12:
03:d2:41:10:74:e7:45:5c:23:07:94:6f:ef:85:c5:c3:7f:9b:
96:f0:1a:7a:db:06:50:4f:3f:3f:6f:ee:bf:09:67:de:0e:79:
9f:58:12:72:80:1f:14:ce:30:3a:8b:e5:36:f8:61:2d:80:93:
ec:e5:07:c8:ee:c0:b9:15:cd:c0:87:b7:79:71:df:a8:fc:b2:
c7:db:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-ams.rpki-client.org