Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/AAsUC9nQgBgcaZs0fUg0WTauhwY.roa
File: AAsUC9nQgBgcaZs0fUg0WTauhwY.roa (raw, json)
Hash identifier: EGY8z9Q1yDxbxbYQsJRDNDq27EpNTTLLrJbVF/5HJZ0=
Subject key identifier: 00:0B:14:0B:D9:D0:80:18:1C:69:9B:34:7D:48:34:59:36:AE:87:06
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 04566796
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/AAsUC9nQgBgcaZs0fUg0WTauhwY.roa
Signing time: Mon 28 Feb 2022 20:22:36 +0000
ROA not before: Mon 28 Feb 2022 20:22:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209588
IP address blocks: 147.78.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72771478 (0x4566796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Feb 28 20:22:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=000b140bd9d080181c699b347d48345936ae8706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:03:2c:c6:87:5f:54:ad:bb:30:6b:5a:31:
f4:6e:5c:2e:3b:77:48:7d:dc:9c:6b:18:22:44:cf:
06:f6:bc:b1:0f:ce:7c:1c:7b:eb:6c:d8:d6:1b:81:
95:a5:8a:2d:8c:eb:fd:41:d6:38:ad:a3:13:21:eb:
d7:f7:88:d8:51:49:54:a4:77:ae:95:bb:22:af:0d:
e4:5d:df:21:0f:5c:11:8c:58:a6:9a:e3:41:ee:30:
fd:e5:cc:bd:a1:ee:7d:2c:e1:b4:9d:05:9a:ea:48:
8b:2f:4e:65:b2:ad:1c:5b:4c:14:59:73:12:61:4a:
1d:53:76:f5:dd:6d:30:0d:cc:01:d6:85:32:3a:17:
96:33:9b:b7:31:b7:38:4a:11:b5:93:27:85:0a:af:
9f:23:cf:b7:05:4a:79:7a:3a:85:4e:6e:07:ff:a4:
4b:e5:04:0e:e6:4f:a3:57:ee:fe:50:e6:19:d5:ed:
da:07:83:ce:bd:e1:94:92:af:bd:bd:6d:a1:32:b1:
f1:e8:a9:28:25:cd:00:1d:b1:30:2c:54:28:92:8a:
73:1c:fa:b4:ec:2f:74:bd:b7:2c:f8:29:4b:5a:31:
b5:82:09:1e:47:d9:59:0f:8b:bf:84:18:35:23:c8:
0d:79:08:90:32:fd:ce:6a:18:29:f6:85:58:ae:f0:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0B:14:0B:D9:D0:80:18:1C:69:9B:34:7D:48:34:59:36:AE:87:06
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/AAsUC9nQgBgcaZs0fUg0WTauhwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:9f:a9:33:05:ae:11:4d:51:6a:d1:9d:25:36:d5:3f:41:23:
bb:36:0f:fe:0e:b7:d9:05:07:e3:f6:65:2a:4e:62:d2:4b:47:
93:c5:ad:58:b5:3d:9c:8a:e9:4f:00:e1:65:f5:2c:f3:2f:f2:
80:e2:17:1b:db:d3:e9:cc:db:3b:90:ab:4b:d7:b4:77:a8:7a:
ea:1a:6d:53:46:2c:cc:c3:19:3a:88:de:8a:32:b6:f3:58:77:
af:93:29:05:be:dd:c7:af:6d:1e:27:6e:2f:ae:7b:50:11:1e:
79:65:ef:62:7e:c9:0b:aa:db:88:37:c1:8d:8f:7e:85:0a:ac:
01:de:f6:d1:13:b2:bb:e1:73:8a:28:d1:f1:09:26:42:e9:70:
11:71:65:e1:9c:a5:a7:fd:2c:7f:60:81:04:17:51:57:1b:50:
1e:9c:2e:f1:be:3a:58:a4:75:35:09:c5:12:83:7b:7e:1a:1c:
11:4d:d4:62:86:3b:aa:37:45:7c:36:65:22:e9:c7:d2:ca:ea:
04:0a:cb:89:44:4a:67:c9:c7:9c:b1:a5:35:51:f3:b3:a1:f8:
99:60:bf:6f:24:5a:47:e3:4c:09:81:d2:dc:4c:c2:7f:fe:f6:
5a:30:47:ae:0f:0c:a2:f2:c1:65:bf:74:92:29:8e:ec:df:40:
97:68:8f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:27 2023 by rpki-client on console-ams.rpki-client.org