Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-77P124L2CtBBxyPPuT_EuHVXHY.roa
File: 1-77P124L2CtBBxyPPuT_EuHVXHY.roa (raw, json)
Hash identifier: STxT0zzueSngmAS6dUBY25LAQYL/j7WwU69Jpac1xO0=
Subject key identifier: FB:BE:CF:D7:6E:0B:D8:2B:41:07:1C:8F:3E:E4:FF:12:E1:D5:5C:76
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 39A6CE00
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-77P124L2CtBBxyPPuT_EuHVXHY.roa
Signing time: Fri 22 Apr 2022 10:55:09 +0000
ROA not before: Fri 22 Apr 2022 10:55:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35478
IP address blocks: 159.148.216.0/24 maxlen: 24
159.148.218.0/24 maxlen: 24
159.148.222.0/24 maxlen: 24
159.148.169.0/24 maxlen: 24
159.148.177.0/24 maxlen: 24
159.148.179.0/24 maxlen: 24
159.148.180.0/24 maxlen: 24
159.148.195.0/24 maxlen: 24
159.148.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967233024 (0x39a6ce00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Apr 22 10:55:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbbecfd76e0bd82b41071c8f3ee4ff12e1d55c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:36:1e:f6:f3:e9:82:3a:98:7f:4f:e4:d4:a5:
8e:7c:34:43:26:3d:ca:23:13:9f:ba:3f:d4:46:40:
fa:8d:39:d0:61:d1:13:e8:26:36:f3:72:38:1d:83:
8b:b9:47:3b:0e:b6:1e:41:a0:d8:9f:40:7b:af:3c:
d2:0e:46:01:43:96:05:7a:b1:f9:ae:37:20:bd:3a:
90:ab:c7:e9:9c:87:0b:c0:23:85:33:e2:ae:a6:ba:
ea:91:6b:40:3f:d8:ec:1d:02:32:1e:87:2e:61:56:
0e:72:13:f5:28:65:70:d1:3b:63:27:b3:44:29:5d:
6e:6c:76:ab:4c:e6:ef:ba:1a:82:3f:c0:97:3e:a7:
3c:90:08:69:85:89:88:33:09:45:2a:13:1c:8e:33:
3e:c3:fc:d8:66:bf:a5:c5:a7:09:6e:86:be:fd:7e:
f9:ce:85:2e:2c:72:cd:b1:30:70:51:3d:a3:8e:28:
b6:fb:05:01:27:ce:61:02:04:23:8b:b9:ee:49:73:
49:10:db:f4:4c:91:64:f6:b5:bb:ed:21:b8:e6:a7:
c6:62:7b:d2:94:76:63:5e:a9:41:99:30:9b:c6:6e:
66:d7:0d:13:1b:c9:30:71:81:44:e7:a8:97:e6:b1:
96:04:32:b5:db:04:1b:a2:e4:f1:9f:ac:74:6a:97:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:CF:D7:6E:0B:D8:2B:41:07:1C:8F:3E:E4:FF:12:E1:D5:5C:76
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-77P124L2CtBBxyPPuT_EuHVXHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.169.0/24
159.148.177.0/24
159.148.179.0-159.148.180.255
159.148.195.0/24
159.148.204.0/24
159.148.216.0/24
159.148.218.0/24
159.148.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1b:f3:bb:73:ee:46:ac:bf:c0:3e:ec:47:2e:27:87:a1:b4:
8b:78:02:7b:7b:85:f6:c4:cf:ec:2a:3a:c6:6b:29:a7:4c:0d:
b9:63:b4:af:24:cc:81:05:6f:f5:31:32:b5:60:c6:bf:db:74:
cb:9e:4b:fa:74:2c:5a:2f:45:3e:dd:09:da:4d:68:5a:f3:20:
ac:eb:54:bd:9d:71:5b:ca:28:e0:cb:c2:d9:c8:89:06:c2:23:
0b:c7:d3:ae:29:67:0a:6c:9f:31:9e:b6:c9:c3:f2:53:9b:7b:
ac:ae:5f:60:4f:79:c1:41:25:b8:a4:51:06:02:c2:30:c4:fe:
ad:b5:83:17:e4:b0:a9:f5:1f:5d:c3:13:32:44:0f:b9:f7:0a:
7f:a8:63:40:d2:44:c7:91:33:53:65:33:85:17:ac:df:2c:cc:
9a:9a:fb:0a:83:68:e9:d6:60:ff:5e:34:9c:15:0c:43:d1:31:
ac:c8:d9:4d:bd:3d:25:57:76:e4:ae:8c:92:a9:a4:7e:9d:fb:
5a:06:21:f1:66:50:5b:fd:7a:b3:0b:e6:24:c5:6a:2d:a8:ad:
6e:79:05:53:76:8e:d4:ea:5c:9b:12:9f:88:c4:34:36:68:dd:
5e:c0:f8:df:36:93:58:75:97:07:34:9e:80:82:b2:e5:93:35:
c2:d1:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-fra.rpki-client.org