Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_F7M2LN2rlo9Pp2FeJFmYuWAz7k.roa
File: _F7M2LN2rlo9Pp2FeJFmYuWAz7k.roa (raw, json)
Hash identifier: dY5AK3v1/95i9GJuWygkHL6Raa4Yxt3A0Ck0QxFUbk8=
Subject key identifier: FC:5E:CC:D8:B3:76:AE:5A:3D:3E:9D:85:78:91:66:62:E5:80:CF:B9
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 387547AF
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_F7M2LN2rlo9Pp2FeJFmYuWAz7k.roa
Signing time: Sat 01 Jan 2022 05:54:11 +0000
ROA not before: Sat 01 Jan 2022 05:54:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 159.148.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947210159 (0x387547af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc5eccd8b376ae5a3d3e9d8578916662e580cfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:00:71:2f:e6:5b:2b:53:72:09:1b:cf:b3:
de:18:24:5f:8a:2b:29:3f:d8:a8:0b:ad:47:aa:bc:
ad:25:10:12:24:e0:9b:50:c5:96:ff:38:03:f8:8b:
2f:00:ee:6d:04:e3:15:6d:87:8d:6d:da:1f:bd:40:
aa:52:fc:59:7b:60:40:3e:4a:68:6f:8a:d4:d1:e2:
5c:4f:aa:f9:a8:c8:b4:a6:e8:20:34:31:95:aa:57:
5a:ce:67:1a:9c:0d:51:b9:dd:1e:47:c8:33:8d:56:
6a:10:2d:e2:32:9b:bd:7f:ba:c4:c2:6a:db:3a:49:
bc:56:19:34:5a:93:4f:16:ce:8e:82:1d:f4:0e:8c:
b3:e4:39:1e:9f:44:3a:2a:e3:bb:a2:d6:0a:3e:be:
e2:e7:8c:4a:b9:c3:af:d1:0a:76:62:4f:72:48:99:
36:84:d0:b0:a1:6c:ef:50:0c:2a:5b:fa:9d:7c:9c:
9d:29:d9:84:d1:fa:58:92:9f:54:0d:6c:c2:85:63:
c2:b1:ea:61:93:93:22:96:75:31:64:42:58:71:02:
d4:60:07:59:b3:89:19:55:1d:86:07:0a:8e:27:40:
99:36:f7:7a:b4:80:e8:ef:1a:3b:f3:c0:24:d4:2c:
59:af:36:0a:2c:8d:e2:dc:67:24:a8:88:81:c9:b4:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:CC:D8:B3:76:AE:5A:3D:3E:9D:85:78:91:66:62:E5:80:CF:B9
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_F7M2LN2rlo9Pp2FeJFmYuWAz7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.137.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8d:8a:a6:c0:d7:ad:03:f3:ec:52:40:6f:7c:8a:69:51:20:
c9:09:75:37:42:a0:82:d0:d0:1c:4b:11:c2:5c:3f:da:57:dc:
14:23:93:f7:3f:96:89:8b:aa:3c:ca:76:7d:c0:f6:a3:b5:5b:
ba:dc:8f:3f:c3:7b:28:d0:d9:49:f8:22:9f:ee:ef:e1:db:48:
e4:0e:da:f7:fd:96:2c:6d:3f:56:8e:9f:dd:80:4d:49:fa:d1:
85:49:11:36:be:a3:69:4e:d8:b4:0f:44:45:e1:bf:61:f6:60:
f8:0c:f6:f3:71:81:fd:7b:be:00:a5:0c:19:12:89:82:cb:5d:
cd:ff:b0:eb:77:85:42:a3:66:8d:b8:35:4e:a2:04:f0:e5:06:
c3:1f:a8:e6:ec:22:29:07:0b:66:b7:d4:b2:a3:41:97:ea:49:
49:62:5f:e2:8a:88:9a:10:8c:bf:c8:6d:24:cf:21:df:69:b4:
e1:51:90:b4:86:e8:fb:84:2d:f1:4f:cb:39:a0:4e:00:da:03:
29:53:ab:c6:86:55:2b:75:62:55:64:39:78:98:9a:ac:6c:3b:
1e:a0:9a:e5:94:05:eb:cd:82:a4:bb:28:42:dc:dc:39:a8:f2:
3e:5e:3a:23:f3:8e:b2:eb:80:6f:13:6e:35:02:ee:cb:13:51:
bb:c7:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-ams.rpki-client.org