Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/_7m3UZB0H7vgK_LDe7_9LuKntK4.roa
File: _7m3UZB0H7vgK_LDe7_9LuKntK4.roa (raw, json)
Hash identifier: k5aF9nqDrBeGBfkjy8H/aOvWBnNhPF9QgzzvBZSWG6U=
Subject key identifier: FF:B9:B7:51:90:74:1F:BB:E0:2B:F2:C3:7B:BF:FD:2E:E2:A7:B4:AE
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 1C0907D1
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/_7m3UZB0H7vgK_LDe7_9LuKntK4.roa
Signing time: Fri 20 May 2022 15:14:29 +0000
ROA not before: Fri 20 May 2022 15:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 198.105.124.0/22 maxlen: 24
198.105.126.0/24 maxlen: 24
155.254.36.0/22 maxlen: 24
107.181.128.0/22 maxlen: 24
107.181.140.0/22 maxlen: 24
198.105.100.0/22 maxlen: 24
198.105.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470353873 (0x1c0907d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: May 20 15:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffb9b75190741fbbe02bf2c37bbffd2ee2a7b4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:8e:3f:00:f6:b9:b0:91:bd:78:f3:89:9d:
a6:bc:61:bf:57:cf:3a:08:dc:15:dc:a4:34:83:5a:
8a:9a:bd:7f:ac:e0:a7:8c:5a:20:2b:b4:69:89:db:
4e:b6:4e:49:15:30:11:d9:6c:ce:bf:ea:a9:63:fc:
07:1b:d6:24:c9:e6:92:7d:5e:12:85:8a:68:6c:22:
99:83:91:26:72:f6:16:dc:bb:a4:8f:4b:63:f5:7e:
2e:84:8b:a4:f3:ec:ac:82:e1:5d:9d:8b:cf:e8:ae:
42:aa:74:fc:83:c9:48:05:60:5f:97:45:15:56:c2:
8a:88:2d:3a:24:79:53:99:d1:41:cf:d4:79:5e:b8:
76:10:5d:9f:44:17:d2:b7:88:3c:f9:44:d8:1e:99:
51:9a:b2:21:0e:9f:cb:a0:00:c2:f5:19:d0:9e:79:
24:43:22:b4:e8:75:62:87:bd:e5:72:d7:50:ef:ee:
ed:d6:ac:e0:1a:6b:db:3b:8e:4f:bf:c1:68:95:21:
48:83:6c:95:b6:d0:8f:c0:79:ab:0e:dd:91:da:f7:
e1:ad:ba:bc:e4:ec:d6:cc:2b:0b:2e:81:06:94:1b:
06:30:6d:23:12:01:2d:82:6a:87:b0:39:4c:b9:14:
e4:0d:ef:4a:50:26:59:1d:f5:cb:de:09:3c:6a:05:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:B7:51:90:74:1F:BB:E0:2B:F2:C3:7B:BF:FD:2E:E2:A7:B4:AE
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/_7m3UZB0H7vgK_LDe7_9LuKntK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.128.0/22
107.181.140.0/22
155.254.36.0/22
198.105.100.0/22
198.105.116.0/22
198.105.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:14:40:1b:a0:78:4e:cf:a2:ef:16:11:06:2f:62:32:d6:be:
54:cf:c8:36:c0:b7:e8:d8:f5:a3:9e:d5:24:9d:74:23:24:dd:
b5:b8:e1:9f:6e:8f:44:ce:5c:e6:60:e7:b7:06:43:fa:c7:7e:
bf:2f:9d:8e:64:9f:b6:b0:6b:58:e0:0e:48:8e:ee:f1:bc:f9:
14:3d:eb:32:f0:c2:75:b1:3b:c4:73:87:12:61:a2:f2:2c:52:
b3:ab:1a:14:9d:d0:b8:68:78:1c:3a:ab:2a:dc:9e:06:f5:ec:
10:a0:e1:7b:f1:9a:26:95:dc:dc:0f:b1:5c:84:5d:af:d6:8d:
f6:d1:44:c1:e8:bc:c6:76:7b:83:42:a2:45:fb:b4:59:45:d0:
34:00:dc:de:e4:f7:62:ab:60:d2:fd:46:91:fb:de:42:d2:28:
eb:05:c3:d4:f5:eb:fb:c1:d2:20:5a:75:7f:10:7a:73:71:28:
eb:64:f9:e4:76:4a:7e:c4:07:a0:be:8f:f7:ba:8e:5c:ac:97:
92:46:26:64:dc:ae:c8:c6:b6:0f:b2:f3:82:d4:22:00:94:f0:
06:bb:ed:c6:65:2c:80:bb:b1:5d:bc:a7:1b:27:8a:ac:d0:a3:
48:79:f8:4a:bc:2c:18:66:c3:cb:67:95:e1:98:4e:00:17:c8:
79:4a:f9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-ams.rpki-client.org