Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/H_0pUiQhgA4mEAevdT6wemWlLSo.roa
File: H_0pUiQhgA4mEAevdT6wemWlLSo.roa (raw, json)
Hash identifier: Ll5H6eoxkXY+WCUXXvw5VjJJnRLl65BI4LXVQM+FKHs=
Subject key identifier: 1F:FD:29:52:24:21:80:0E:26:10:07:AF:75:3E:B0:7A:65:A5:2D:2A
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 03CC6E9C
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/H_0pUiQhgA4mEAevdT6wemWlLSo.roa
Signing time: Sat 01 Jan 2022 14:04:23 +0000
ROA not before: Sat 01 Jan 2022 14:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59580
IP address blocks: 147.78.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63729308 (0x3cc6e9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 14:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ffd29522421800e261007af753eb07a65a52d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2a:b4:b5:32:1b:72:47:f9:2c:a8:c2:eb:85:
47:a7:05:13:4f:3a:a2:99:08:d0:bc:cd:56:0e:41:
ff:3c:dd:af:90:25:ee:07:2a:9a:62:58:6b:0a:50:
f6:4e:83:66:c0:71:5e:62:49:50:20:6a:47:f3:c5:
7a:e2:b6:cd:75:12:25:e8:1e:25:f5:d6:8a:c8:a9:
ca:8e:bf:19:8a:18:07:06:5a:66:d6:2e:2d:f3:e3:
72:4c:fe:e1:80:aa:96:b2:4a:85:3d:20:ad:e1:ed:
5c:b7:b0:bf:74:01:75:9c:db:58:ea:a6:fe:1f:2f:
17:b6:b9:0c:bf:77:04:43:6c:b5:0b:aa:74:8e:cf:
01:b3:cd:50:06:71:af:46:3f:e7:2b:1f:53:3b:6d:
29:b8:71:bd:1c:c3:ab:b4:a1:65:cc:19:c8:cd:25:
c2:4a:68:c3:c2:bb:da:48:2f:ca:96:e5:66:00:4e:
c7:d6:74:a3:30:95:1d:dc:28:fd:26:66:d1:a6:d7:
54:32:41:90:59:ce:8b:ca:20:d0:69:43:68:ad:39:
cc:2c:32:1f:a7:23:6f:d7:8b:e2:e6:b2:91:3f:d9:
bf:d9:0e:40:ac:bd:54:d7:8e:01:37:c0:79:68:61:
3d:9f:03:1a:f0:ca:3b:26:ba:ff:8c:07:e8:52:04:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FD:29:52:24:21:80:0E:26:10:07:AF:75:3E:B0:7A:65:A5:2D:2A
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/H_0pUiQhgA4mEAevdT6wemWlLSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.46.0/24
Signature Algorithm: sha256WithRSAEncryption
48:89:b0:89:36:53:72:87:46:55:9c:ba:72:da:24:42:c6:dc:
af:bb:ff:0b:5d:b3:78:f9:c7:a6:62:5c:fd:83:2b:97:5f:23:
35:b2:4e:32:59:04:eb:a0:0b:49:b3:1e:ce:52:81:d4:b8:44:
33:3f:3c:84:f1:b7:10:c6:62:4d:c5:26:47:ea:98:9c:45:d9:
98:96:23:40:a4:eb:07:9e:5c:3f:08:d2:a3:ad:30:c0:33:bf:
88:cc:b8:9f:e4:9e:f6:53:b8:b6:f5:61:de:7c:81:9c:35:98:
04:a8:d5:66:2a:31:35:2e:56:5a:b5:ca:41:04:bb:26:9a:b1:
3e:75:1e:05:2f:3e:6c:cb:e3:18:ac:82:c4:88:2e:34:43:e2:
29:c5:82:5f:e7:1e:dd:a5:93:b5:11:98:9c:28:ac:ae:ec:d2:
03:8d:fb:2f:3d:97:4c:f6:36:92:e4:a9:3d:e1:3f:13:c0:c5:
af:00:85:99:77:1a:61:29:e5:2b:7a:ec:76:60:79:e7:38:2b:
38:d3:3d:20:2e:3b:65:3e:ff:52:52:2d:51:dc:d3:12:58:fa:
b8:d7:0e:79:7b:10:03:f9:22:1a:8c:98:e4:11:a1:84:d6:76:
a7:c7:e2:01:c8:71:0d:3f:84:04:55:01:e3:10:93:72:ec:43:
42:59:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:35 2023 by rpki-client on console-fra.rpki-client.org