Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ty51PGtkVjUy1iw9ttunnmzRIfs.roa
File: ty51PGtkVjUy1iw9ttunnmzRIfs.roa (raw, json)
Hash identifier: 3posGfLkgj+/aMeh5XvmpBJEWSNSQsNVqapYnEc6MGM=
Subject key identifier: B7:2E:75:3C:6B:64:56:35:32:D6:2C:3D:B6:DB:A7:9E:6C:D1:21:FB
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 38730264
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ty51PGtkVjUy1iw9ttunnmzRIfs.roa
Signing time: Sat 01 Jan 2022 05:54:11 +0000
ROA not before: Sat 01 Jan 2022 05:54:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6832
IP address blocks: 159.148.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947061348 (0x38730264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b72e753c6b64563532d62c3db6dba79e6cd121fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:f6:f9:87:c3:31:0e:1b:f4:e7:87:77:e2:
54:a3:ae:a8:0c:9c:3c:d8:5c:33:06:1c:4c:f3:c9:
57:b4:13:55:9c:26:c6:b4:ca:c0:fc:f8:34:7a:52:
cc:16:93:98:11:dc:26:df:c3:5f:1c:2d:79:c2:ba:
c8:c1:e1:8f:cf:a6:da:c1:af:45:e8:84:4f:5f:5f:
d9:61:72:ee:12:63:1a:31:e0:ef:6a:09:e4:36:d7:
81:f1:66:39:c5:6f:1c:92:91:41:1e:64:bf:ae:97:
9d:3a:3e:8a:2d:b0:11:ff:ff:f4:a9:f7:1e:f5:98:
3a:e4:7c:b3:d5:f6:0a:22:8a:8a:d6:50:d7:d5:34:
f6:85:20:72:6a:11:70:19:8b:dc:3a:18:87:cb:a0:
63:59:05:92:42:12:dc:3c:d9:00:da:4a:c1:c2:06:
85:f0:b3:ae:03:e6:f0:77:cc:e1:a9:45:23:18:4c:
63:48:7f:1d:b8:d4:53:24:51:6f:6d:d4:83:38:a6:
1a:63:e1:45:07:78:80:2f:ca:76:8b:94:a4:d0:02:
cc:fd:53:93:47:fa:82:02:13:7b:fc:1d:aa:ef:b8:
07:ba:54:06:b3:42:bc:b4:00:49:9f:9a:de:79:a8:
a4:3d:7d:3c:e6:95:a3:ee:8e:70:07:a9:90:02:87:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2E:75:3C:6B:64:56:35:32:D6:2C:3D:B6:DB:A7:9E:6C:D1:21:FB
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ty51PGtkVjUy1iw9ttunnmzRIfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.144.0/24
Signature Algorithm: sha256WithRSAEncryption
26:60:63:14:4c:af:9a:b6:94:74:11:80:7a:41:b9:81:7a:9b:
ce:d1:e2:2a:04:c0:3b:49:4e:42:1b:a6:35:2d:a5:cf:7a:ff:
8a:83:38:4b:93:a3:a0:a4:ea:7c:35:5d:07:54:b2:5a:af:53:
0b:2c:de:79:23:ce:69:80:28:f1:49:24:3e:75:91:12:bb:1d:
27:20:fb:9c:d3:3b:bc:ff:ef:7b:24:d5:77:4e:5d:b9:a0:ce:
bc:62:2b:ef:ab:2e:14:66:8d:31:dc:50:4d:98:03:d9:bb:db:
a8:ff:30:89:2f:16:9d:13:cc:5b:ae:23:6e:94:72:01:e7:76:
27:c0:74:d7:4b:fd:ba:f2:75:0e:e0:f6:7c:15:d1:05:0c:9e:
9a:c4:92:68:bb:4b:1a:ea:f4:92:2d:12:b7:5c:bb:15:9e:16:
28:b5:e9:a5:27:c2:49:e8:49:31:15:20:af:87:7e:83:65:aa:
59:74:e7:e3:51:b9:60:ee:f4:9a:84:cd:58:d7:cf:83:42:d0:
e6:ba:f1:6f:13:1c:be:c8:37:8d:a5:55:47:45:eb:10:01:21:
b1:80:5c:a4:66:e5:93:92:e7:96:9b:0c:e9:9a:84:ba:a5:90:
ea:92:50:ad:1c:8c:be:78:29:3c:1e:a5:a8:f0:68:15:29:ae:
67:cd:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:38 2023 by rpki-client on console-ams.rpki-client.org