Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wvSxb_Mc_VZHipVA44GhTDP5qtU.roa
File: wvSxb_Mc_VZHipVA44GhTDP5qtU.roa (raw, json)
Hash identifier: 7JzWsXzsEwLXqQyhDB3bdT/hBqVyyb0I5gMY7Nh0bwg=
Subject key identifier: C2:F4:B1:6F:F3:1C:FD:56:47:8A:95:40:E3:81:A1:4C:33:F9:AA:D5
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 38966C6F
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wvSxb_Mc_VZHipVA44GhTDP5qtU.roa
Signing time: Sat 01 Jan 2022 05:54:29 +0000
ROA not before: Sat 01 Jan 2022 05:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207689
IP address blocks: 159.148.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949382255 (0x38966c6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2f4b16ff31cfd56478a9540e381a14c33f9aad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:a9:76:32:94:24:76:4a:26:b9:84:4c:e0:
d2:47:9c:e6:5f:a3:01:7d:1b:35:d3:cb:9a:54:3d:
8f:be:1f:2a:20:9b:41:37:c9:d3:ba:de:8f:ec:13:
61:6b:1d:70:88:38:a0:10:9f:36:7d:93:9f:66:4d:
01:f2:eb:10:d7:13:c7:32:10:a6:ec:98:91:c4:59:
8d:15:d4:e6:93:0a:d3:4b:59:69:6e:c2:d7:53:b4:
0e:eb:b8:48:c0:7e:54:85:2c:ea:00:b8:83:7a:23:
e6:b3:7d:01:b3:f2:97:94:20:5b:78:d5:17:71:b2:
f6:b0:99:ad:31:f2:fe:d9:32:37:4c:ef:43:ae:45:
88:34:af:2d:89:59:75:84:dd:51:43:95:44:de:be:
b7:b0:0a:a3:b2:92:f3:ca:2c:46:f8:12:1c:ce:31:
4d:76:0a:f7:97:40:48:5b:bb:68:7f:3b:9d:58:2b:
8f:88:39:89:19:83:73:06:4f:92:33:7b:7a:ae:95:
44:63:32:6b:6d:63:3e:5a:5f:3e:76:c5:57:bd:45:
63:ef:fb:86:79:10:8a:98:fe:0c:d3:d8:f2:ec:b6:
96:0f:81:ae:c9:87:fc:d1:94:8a:13:92:f4:ce:04:
6e:de:5b:d4:c1:d2:db:ec:1d:17:85:37:d9:52:2b:
22:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:B1:6F:F3:1C:FD:56:47:8A:95:40:E3:81:A1:4C:33:F9:AA:D5
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wvSxb_Mc_VZHipVA44GhTDP5qtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.99.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0e:af:84:57:73:52:51:1e:15:13:56:d1:f5:7c:09:ab:e8:
61:8e:bf:30:bd:2c:fd:a3:5a:75:19:f5:11:f8:b8:88:f3:db:
72:62:b2:84:f0:2a:6a:ef:cb:f3:e1:4b:ef:a7:cb:07:ae:54:
52:4e:bd:27:bf:4f:57:17:fd:fb:c4:b3:36:7d:5b:d0:8c:c8:
92:2e:85:4f:30:4f:4a:af:23:da:d8:3a:90:70:9d:26:8e:fa:
57:e1:25:5e:c2:5b:75:e2:e7:ca:1d:55:ad:11:41:49:e0:ad:
bd:9a:54:ed:90:0e:52:0e:a1:9d:a3:e9:20:a3:00:c2:8a:37:
10:74:93:bc:94:4b:f4:46:2e:38:bb:e0:80:75:de:c2:54:07:
51:a5:a5:c8:83:5d:9b:4f:14:81:36:1d:2b:3e:e8:5b:56:82:
39:45:aa:1b:2e:ec:f4:5a:01:77:10:04:80:a7:45:92:0b:c2:
45:e0:ad:4f:72:29:e1:bc:52:33:c7:7c:76:6e:ec:1a:e2:01:
09:58:d8:a1:a6:bb:c1:4e:cb:10:48:76:20:16:d8:ab:83:40:
8b:ae:f1:7c:be:10:f2:6a:df:ea:62:8e:5a:34:76:84:b2:e1:
02:a6:d1:e7:92:31:3a:77:ee:f9:ef:b1:74:e2:d3:1f:a9:e3:
fa:4a:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:38 2023 by rpki-client on console-ams.rpki-client.org