Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/l8Hke_uJ5g_gJTQZ53UGFL7hN5Y.roa
File: l8Hke_uJ5g_gJTQZ53UGFL7hN5Y.roa (raw, json)
Hash identifier: 20TgETUJD0BRQPZ5SfgeGFUhINQjztDuAb/qDX5kZs4=
Subject key identifier: 97:C1:E4:7B:FB:89:E6:0F:E0:25:34:19:E7:75:06:14:BE:E1:37:96
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 38761E61
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/l8Hke_uJ5g_gJTQZ53UGFL7hN5Y.roa
Signing time: Sat 01 Jan 2022 05:54:12 +0000
ROA not before: Sat 01 Jan 2022 05:54:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15483
IP address blocks: 159.148.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947265121 (0x38761e61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97c1e47bfb89e60fe0253419e7750614bee13796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:f7:93:23:bd:e2:e7:48:b1:9d:5f:a7:f5:
50:de:28:dc:3b:f1:40:98:d4:37:d3:2f:04:1d:e8:
82:ef:fe:56:ed:b6:2e:94:6e:a6:65:67:44:df:d9:
85:0d:4f:64:e3:88:9c:cd:2d:5b:30:a5:12:75:50:
60:87:d7:b4:23:ee:d5:30:79:9c:82:9c:3b:cf:df:
f6:42:f1:4b:76:74:f2:39:e4:b8:2d:13:ab:6d:0f:
3b:c8:dc:f0:f9:a3:1e:58:df:f4:c9:16:56:42:10:
06:c4:a0:f5:ef:a8:56:2c:05:dd:c2:45:32:60:57:
26:1e:ff:7b:aa:29:c9:0e:cf:d4:c2:83:55:df:cf:
cd:5e:b6:37:7f:97:40:8e:28:9b:0d:f2:79:a6:a4:
5f:c4:d7:a7:d8:44:a7:cf:5e:b0:a6:e2:8d:1c:a3:
33:3e:d8:ef:3c:1b:bb:d8:31:fe:04:9d:0b:83:53:
c8:f6:37:7a:00:89:9b:04:cb:cc:60:ae:42:12:93:
40:ca:41:93:94:73:d9:dc:e0:c3:3d:26:58:d4:09:
e2:00:bf:30:67:c7:9f:e3:f9:bf:fb:84:ae:c5:5b:
2a:9c:34:27:5b:f8:91:5a:26:82:f8:ba:a4:5e:3d:
a9:88:80:3b:eb:23:28:3b:22:0c:64:c2:fd:27:68:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C1:E4:7B:FB:89:E6:0F:E0:25:34:19:E7:75:06:14:BE:E1:37:96
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/l8Hke_uJ5g_gJTQZ53UGFL7hN5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.160.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:9e:bf:04:4f:b8:9f:58:45:e5:bb:a0:24:88:eb:ae:9c:92:
b3:39:ac:ce:d8:75:52:38:fc:48:9f:10:1b:d7:33:03:98:e7:
1b:43:6f:85:ce:78:57:6e:34:72:a0:0f:db:f0:36:33:d7:65:
66:bf:f2:32:6d:17:a6:fa:5d:dd:c6:42:77:ec:91:c0:94:9a:
9b:66:f9:7d:47:47:a6:4d:d2:5c:53:ca:52:3a:99:8a:c3:e6:
de:d6:00:ee:23:40:52:98:59:da:78:56:bc:07:f8:17:95:a3:
37:7f:da:6e:91:6b:c7:0f:d9:fc:3a:5f:9d:1f:85:0b:ba:18:
ba:77:9e:01:bf:e5:eb:28:a7:a3:e1:67:39:1f:20:1a:a3:c9:
ce:1b:12:3a:b1:c4:68:56:b6:9c:eb:9d:99:85:c8:ad:48:0a:
2f:a2:c4:f0:cd:dc:65:ff:55:c4:23:7f:fa:3d:23:b0:d7:ad:
26:5e:ba:5a:c0:4e:48:65:2c:6b:c6:aa:08:54:61:4f:79:67:
4b:a0:7d:4e:db:0b:bc:6a:9d:57:27:55:a7:f8:83:2d:cb:6a:
a3:ff:04:33:f1:a6:54:86:53:39:aa:11:08:7e:0f:b1:85:c4:
c7:f6:2d:28:21:42:23:e1:dd:5c:e3:58:87:c8:29:cb:c2:78:
91:1a:7a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:38 2023 by rpki-client on console-ams.rpki-client.org