Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7RVKGtQSo4f1tZBQR8LtAP90xnY.roa
File: 7RVKGtQSo4f1tZBQR8LtAP90xnY.roa (raw, json)
Hash identifier: v/ZdBYoj6Qb0hcMA8rs+UiNjNgxiKTSIjx8jK9onzKI=
Subject key identifier: ED:15:4A:1A:D4:12:A3:87:F5:B5:90:50:47:C2:ED:00:FF:74:C6:76
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 3956316C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7RVKGtQSo4f1tZBQR8LtAP90xnY.roa
Signing time: Wed 23 Mar 2022 06:02:07 +0000
ROA not before: Wed 23 Mar 2022 06:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212496
IP address blocks: 159.148.38.0/24 maxlen: 24
159.148.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961950060 (0x3956316c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 23 06:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed154a1ad412a387f5b5905047c2ed00ff74c676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:01:c6:3d:8c:49:02:d4:b6:a4:9b:10:d1:
e5:d7:60:17:a0:26:a7:ff:0a:a9:54:f7:59:a0:58:
b8:7a:01:e7:45:1f:a2:57:fe:a1:5e:e5:90:37:48:
23:7c:95:af:81:0a:f6:5e:6c:51:49:f9:30:c5:51:
59:9c:1b:90:5d:f3:36:cd:29:5d:ae:0a:70:dc:b0:
bd:47:d4:b9:32:12:1b:1b:6a:a1:a4:ea:1b:94:e6:
34:83:5c:2a:9b:3e:fe:f2:0e:b0:75:69:48:05:34:
8d:1c:fb:25:f3:ce:ae:6f:9a:ea:9d:e2:48:f9:05:
fa:98:93:41:37:6a:10:19:da:f5:69:96:9a:2b:7a:
de:55:ab:05:86:e6:b0:d5:63:dc:a5:53:51:36:e2:
ca:56:96:17:d8:27:09:af:d0:3d:c8:87:d8:f6:2a:
35:a0:42:50:b7:ff:ed:e9:92:dc:9e:cd:3f:13:7f:
29:c2:1f:45:c2:25:e2:e2:79:05:9f:cf:7b:d5:a8:
98:92:9d:71:9a:a3:b0:6c:f4:d6:72:6f:be:75:36:
df:5d:ca:0f:20:6a:87:a4:0e:4f:84:f7:3c:56:5b:
06:54:81:44:cd:c0:ef:e8:88:28:d1:da:d4:2c:d0:
79:44:89:f1:25:c6:68:7a:1c:96:38:08:4d:f0:ed:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:15:4A:1A:D4:12:A3:87:F5:B5:90:50:47:C2:ED:00:FF:74:C6:76
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7RVKGtQSo4f1tZBQR8LtAP90xnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.38.0/24
159.148.88.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:35:7b:37:32:3c:30:73:f7:de:9e:25:e8:3c:1b:d4:f1:57:
d8:c8:b1:86:31:36:c7:a7:4c:fa:15:7b:d2:79:e8:39:41:1d:
54:a3:29:81:1f:e5:42:ce:09:27:32:e6:8d:db:27:00:6e:34:
da:35:95:d7:ec:51:62:c9:20:64:d7:73:fd:a4:a2:2e:31:38:
b9:5d:d5:de:62:e9:36:e1:eb:19:a3:b5:31:79:6b:31:5a:c1:
aa:c3:b1:22:f0:b7:39:10:7e:ff:f6:a2:be:2a:62:10:fc:03:
1f:4e:d4:e3:1d:d5:f4:13:40:10:2c:c8:ea:2c:5d:27:98:b1:
17:eb:37:88:a5:57:7d:8c:a8:47:cd:39:62:e6:c5:01:99:de:
15:0d:d0:c3:99:83:40:7e:74:b9:3e:88:ef:a5:15:bd:5b:51:
97:a7:4d:93:15:c9:a7:18:36:f5:72:b9:55:0a:a2:28:ed:8f:
e8:42:c4:d2:5d:e9:93:88:09:f9:c9:f2:1a:a2:34:81:bd:0c:
18:07:bb:f2:c8:8c:00:64:31:a8:31:31:29:2e:d0:0f:12:68:
f5:14:b7:0c:c0:af:fe:b2:6d:27:0d:64:1b:88:97:f6:9c:24:
dd:c6:e1:29:a3:53:e5:bd:be:35:de:a1:86:43:ce:4d:80:3f:
d7:03:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-ams.rpki-client.org