Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/eW5NJok3mygRnlqVEEWQ196Xmfw.roa
File: eW5NJok3mygRnlqVEEWQ196Xmfw.roa (raw, json)
Hash identifier: ieE5OH88RcLB21LvAdi37pRzrVqvHm4adXo3tjMYpzc=
Subject key identifier: 79:6E:4D:26:89:37:9B:28:11:9E:5A:95:10:45:90:D7:DE:97:99:FC
Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial: 0140C59D
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/eW5NJok3mygRnlqVEEWQ196Xmfw.roa
Signing time: Sat 01 Jan 2022 00:56:37 +0000
ROA not before: Sat 01 Jan 2022 00:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 147.189.19.0/24 maxlen: 24
147.189.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21022109 (0x140c59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Validity
Not Before: Jan 1 00:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=796e4d2689379b28119e5a95104590d7de9799fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:1a:c9:de:33:97:53:71:32:43:96:74:77:
64:66:ab:19:87:ee:8a:b9:a4:b6:75:d2:75:5e:a8:
d7:8d:37:68:eb:36:97:9a:04:4c:bf:2d:b2:46:5f:
08:16:d8:0b:8d:95:4b:1a:2d:01:ea:4d:a0:59:20:
e6:84:0d:1e:b1:09:61:1c:8c:53:34:e3:00:79:63:
d7:4f:0e:2e:35:3f:be:47:0d:70:fb:da:99:fa:8f:
4b:e9:d3:92:77:7e:d0:36:35:1c:d7:6e:a8:26:a8:
b0:57:7d:a5:4c:b5:c2:d2:62:a3:48:23:62:8a:76:
88:af:62:e1:70:2b:5e:ea:bb:80:49:ee:b1:44:9a:
0f:07:70:71:bd:06:d7:0b:2e:81:37:08:03:ef:e0:
34:d6:a0:56:12:db:ea:70:97:77:00:17:87:7f:d8:
83:5f:8e:b4:32:d3:5c:36:79:3f:fa:ae:28:a0:25:
9e:ed:db:70:94:83:0b:04:0e:2b:fa:b2:c5:a6:c9:
9d:c8:50:2b:45:2a:6b:15:2c:56:8e:d7:09:b4:11:
63:98:f7:be:65:1c:96:a2:46:b4:8b:08:18:57:2d:
c8:eb:62:d3:24:ff:08:f0:e3:31:56:eb:31:5f:6a:
f2:53:31:5f:0b:d2:7b:c4:13:23:95:d3:cc:b1:04:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6E:4D:26:89:37:9B:28:11:9E:5A:95:10:45:90:D7:DE:97:99:FC
X509v3 Authority Key Identifier:
keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/eW5NJok3mygRnlqVEEWQ196Xmfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.18.0/23
Signature Algorithm: sha256WithRSAEncryption
25:de:a6:7f:ae:d3:47:7d:3a:50:84:d1:19:c7:90:92:26:71:
a5:a0:af:5d:f8:e3:93:d2:29:c7:80:98:d6:1a:30:ca:aa:78:
b3:6d:60:65:ee:4e:21:05:e9:61:50:fd:1c:a3:d9:e2:5c:ae:
9e:70:a6:c4:d0:cf:b0:87:ce:6f:28:c3:50:55:6a:6b:e3:23:
6d:6d:e8:c0:2f:25:2d:49:13:e5:84:74:17:2d:d9:ed:b2:37:
a2:29:ba:fd:0d:b3:3d:e8:4d:41:9c:c3:11:05:e9:a5:93:f9:
7c:02:b5:04:bd:c6:61:20:83:ae:4f:86:90:cf:cc:72:5f:fb:
d4:79:c6:0f:9d:91:a3:c8:7b:7f:49:3a:68:06:f4:28:91:cc:
2c:22:00:30:7f:55:c6:8d:85:48:5d:06:98:f0:bf:d6:8b:11:
98:4b:90:94:1d:2b:71:e5:30:2b:52:87:5e:35:6a:c3:f0:39:
92:29:9a:d4:a9:d0:b9:ef:6c:a4:0b:60:e7:72:19:2e:90:5a:
07:66:d8:c3:3b:29:3d:65:c3:42:69:c5:7e:0d:71:5f:6a:96:
e4:2e:42:a2:61:63:6c:73:a3:37:f2:ef:db:cf:ba:f7:43:6a:
18:e3:b2:6c:17:e9:59:11:bc:57:61:18:92:65:7d:14:f5:a2:
cd:5e:35:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org