Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/1-g_BYonJFaZnRWjOZZzUefqBC6o.roa
File: 1-g_BYonJFaZnRWjOZZzUefqBC6o.roa (raw, json)
Hash identifier: IrQgqH448Iwa/lQXWS1Aqhb8Bf23GolFnlzwbKcQCdE=
Subject key identifier: FA:0F:C1:62:89:C9:15:A6:67:45:68:CE:65:9C:D4:79:FA:81:0B:AA
Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial: 017C4266
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/1-g_BYonJFaZnRWjOZZzUefqBC6o.roa
Signing time: Thu 27 Jan 2022 20:04:21 +0000
ROA not before: Thu 27 Jan 2022 20:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 147.189.239.0/24 maxlen: 24
147.189.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24920678 (0x17c4266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Validity
Not Before: Jan 27 20:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa0fc16289c915a6674568ce659cd479fa810baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:ae:a4:24:fd:f2:43:9c:49:c9:19:46:3f:
f3:94:46:71:e2:da:42:1e:4b:39:11:ad:48:c7:31:
9b:c7:de:c3:4f:fb:f8:f4:20:c1:45:5f:f7:98:42:
45:5c:76:89:3f:57:6c:88:74:68:ba:3d:d8:e0:c3:
cf:20:cc:7b:00:c9:fa:a4:8b:14:c5:02:c2:33:8b:
f8:ce:69:53:6d:c3:53:ac:d3:08:20:aa:3f:2d:82:
93:88:96:b2:33:f8:83:5b:0b:a2:46:d1:4f:2e:6e:
cb:31:0b:9f:52:26:05:5c:03:29:e3:fc:87:6c:f8:
bb:10:80:a1:2f:34:94:30:6a:62:86:f0:32:4c:a1:
3e:3b:dc:da:f8:04:72:ee:06:3c:85:ac:f2:ca:21:
c2:6f:5c:ac:44:38:2c:e3:93:c4:e4:4e:e9:2c:09:
df:a2:fb:7d:3c:76:fa:f7:f3:16:6e:54:d9:a7:1a:
8e:41:c9:07:e4:d2:57:be:8c:73:70:04:fe:fc:dc:
ed:81:4a:bb:46:bb:10:6b:85:8f:c5:dc:f6:e7:9d:
f0:91:89:be:5a:f1:9a:f4:cf:4b:70:5a:8f:2d:37:
79:36:0b:53:3a:51:dc:fd:84:94:fe:69:72:c3:3d:
bc:1b:db:44:48:31:34:56:08:e3:21:b2:7e:1f:b0:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:C1:62:89:C9:15:A6:67:45:68:CE:65:9C:D4:79:FA:81:0B:AA
X509v3 Authority Key Identifier:
keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/1-g_BYonJFaZnRWjOZZzUefqBC6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.238.0/23
Signature Algorithm: sha256WithRSAEncryption
26:50:2f:c0:39:0e:29:91:a8:36:31:d2:c1:76:8d:90:1f:79:
82:02:8b:29:cb:8f:3f:b4:6e:bc:0b:10:bf:a9:85:ba:be:87:
c6:a0:2c:6c:91:f8:0c:e6:d7:e8:b8:da:6b:37:0d:3d:b1:fa:
e1:4a:d9:65:58:fc:fa:9a:a7:b9:a9:7b:81:b7:36:ea:e9:96:
5d:b8:29:ea:6b:20:5d:4b:40:e0:13:34:cc:da:a2:61:e8:02:
a3:84:fa:2a:9d:df:9c:9a:de:15:ad:23:e2:4e:f2:25:bb:ae:
52:f8:b5:ef:8a:01:76:f0:bd:ac:06:f4:e3:02:21:69:a0:07:
9b:62:6e:1b:c2:e9:3a:9b:44:06:7d:9b:f0:dc:e2:47:ec:9d:
64:b5:3d:2f:06:b5:cc:c4:73:4f:eb:40:81:42:e2:4e:1b:07:
b7:ff:63:d4:81:2d:1f:e0:cd:fc:54:86:35:a6:01:14:08:b8:
81:97:55:39:c5:7e:11:86:fe:6b:18:0b:22:12:ba:db:63:b6:
9b:b2:b5:50:4b:7f:a4:2d:cf:fa:91:dc:5b:5d:81:f9:59:3a:
d4:bc:6d:12:5f:78:e9:3a:ed:bb:d6:9e:32:f3:55:ef:6b:5b:
93:62:a4:ca:72:c0:e1:a3:26:2e:0e:a7:5a:df:67:45:be:a7:
01:5e:34:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-ams.rpki-client.org