Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/hEy6Zszg1fhRSwiFO0f_o3UO4LI.roa
File: hEy6Zszg1fhRSwiFO0f_o3UO4LI.roa (raw, json)
Hash identifier: YyiR4kY3jQrYgufIYqOZ3Tqzaba+AlZT5Ii+BIufMho=
Subject key identifier: 84:4C:BA:66:CC:E0:D5:F8:51:4B:08:85:3B:47:FF:A3:75:0E:E0:B2
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 03DF70C3
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/hEy6Zszg1fhRSwiFO0f_o3UO4LI.roa
Signing time: Sat 01 Jan 2022 04:56:45 +0000
ROA not before: Sat 01 Jan 2022 04:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50952
IP address blocks: 151.236.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64975043 (0x3df70c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 1 04:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=844cba66cce0d5f8514b08853b47ffa3750ee0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a8:05:ad:3e:ea:9a:96:82:1a:8f:75:b7:88:
87:44:71:73:68:a2:da:1f:31:d1:90:31:29:bb:1a:
38:7c:8c:6d:6c:d6:3a:75:bc:54:b5:12:78:89:4c:
8a:3e:98:aa:fb:fb:b7:93:32:f7:3b:bc:f6:f1:a5:
22:56:05:03:46:79:6e:4e:8b:55:c9:c7:db:41:b5:
16:05:6d:10:77:c9:e8:6c:68:76:d3:78:4f:35:a4:
86:7f:d6:69:a2:25:d7:b0:b0:89:e8:f3:22:66:ce:
c6:b8:77:03:a4:4e:bd:47:15:5b:d2:26:80:f9:d3:
7d:e9:c6:41:a0:2d:bd:98:b9:cf:bf:e0:62:1e:d6:
5e:ae:15:19:90:87:02:21:b4:9e:aa:cc:77:8e:e4:
ad:ed:d3:ab:40:e3:e6:0d:37:47:a3:65:e4:2e:c8:
9c:5c:ef:2a:dd:de:c2:c2:71:0c:06:81:64:88:31:
44:78:07:88:52:0a:97:ba:f9:4d:eb:a6:85:4b:59:
88:cc:9d:79:85:6a:1c:a5:16:d9:d9:91:c1:94:79:
de:48:5f:6f:44:3d:2d:7f:35:89:82:1c:cc:a5:ca:
80:26:ef:33:5a:25:15:38:6b:6e:3d:2b:d5:84:f6:
7e:8e:c4:86:a6:a0:2b:bb:bb:9f:e0:d0:bc:d6:f4:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4C:BA:66:CC:E0:D5:F8:51:4B:08:85:3B:47:FF:A3:75:0E:E0:B2
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/hEy6Zszg1fhRSwiFO0f_o3UO4LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.236.88.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c4:3c:b0:ad:75:76:09:3c:04:1b:a6:75:1d:c4:56:03:6e:
06:8f:ff:96:18:fc:2e:5b:09:c0:01:02:25:21:b6:79:d9:be:
47:ed:17:49:02:37:55:6e:c7:84:95:ad:d9:d6:c4:43:11:b3:
c6:6e:00:9c:42:ed:ca:bb:c4:d3:46:6e:1a:e7:de:ec:fa:cf:
0c:85:1e:73:9b:e7:da:31:9b:bc:ad:40:a0:3a:28:5c:66:92:
36:22:06:f4:4a:9c:f1:8f:b9:51:ad:d6:86:f2:45:01:cb:bf:
a0:4c:de:5a:fe:b9:52:ee:1c:1f:78:fc:86:ca:2b:67:4f:74:
f0:39:53:bb:ec:fe:d2:ff:58:06:8f:c0:d7:a4:83:17:6c:ac:
a0:10:9c:c5:4b:c5:a2:7b:88:75:13:6e:9c:2d:08:54:84:b0:
48:8d:4f:70:3f:28:dd:bd:2e:82:fa:7c:6e:4f:09:a2:21:81:
0d:a7:15:36:b0:e7:f4:fc:f0:ec:c3:ce:74:40:a0:cd:ff:89:
92:1e:3a:7c:57:b3:6a:24:d7:ed:5f:55:80:3c:04:37:04:67:
f6:a0:e3:50:ff:2d:33:ab:6d:8f:46:f2:29:0d:50:c8:3e:cb:
16:26:89:b2:1c:25:ae:ae:3c:c1:b3:6b:b0:aa:79:20:b0:d0:
a8:d5:d3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:50 2024 by rpki-client on console-fra.rpki-client.org