Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/0yVJdRYvUmiRsbEYjyWbh1GOjuE.roa
File: 0yVJdRYvUmiRsbEYjyWbh1GOjuE.roa (raw, json)
Hash identifier: wHYxh03bvw6jJrzJ3c2TAPz/Gy/hZOmQRjSJFGOSzXw=
Subject key identifier: D3:25:49:75:16:2F:52:68:91:B1:B1:18:8F:25:9B:87:51:8E:8E:E1
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 0A02667F
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/0yVJdRYvUmiRsbEYjyWbh1GOjuE.roa
Signing time: Sat 01 Jan 2022 10:05:07 +0000
ROA not before: Sat 01 Jan 2022 10:05:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 786
IP address blocks: 149.153.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167929471 (0xa02667f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Jan 1 10:05:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3254975162f526891b1b1188f259b87518e8ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:26:0e:ab:1e:e0:bb:56:b1:06:40:11:22:67:
ac:75:21:78:a8:55:ed:20:16:5f:51:de:ee:f7:73:
af:66:3f:83:1f:3c:14:8e:cc:00:ab:b1:88:ad:e4:
a9:c3:cf:46:e9:87:52:41:ac:c4:e6:e7:43:4a:f2:
17:bd:d5:c8:7c:15:13:b6:74:2d:e5:dd:45:21:e4:
c8:03:24:b0:1d:52:34:84:aa:78:c6:cd:6a:22:c4:
9b:fe:3f:7a:84:45:06:5c:9c:a2:2e:24:a3:77:32:
7e:0b:eb:e8:8f:37:8c:30:7f:3f:fa:25:a3:df:41:
08:38:ef:99:42:9c:7b:26:ff:2c:44:bf:5b:94:30:
d8:a0:0b:26:96:8a:ef:ff:6b:ec:de:b1:97:08:b0:
5b:0f:f8:a8:72:75:d0:65:75:79:47:a5:4c:48:3a:
3e:d4:d8:52:7c:bb:44:7f:3c:06:cf:1c:f2:5a:27:
9e:af:ba:3c:4c:b9:b4:2e:30:6f:89:b6:9d:bc:62:
d5:3f:16:78:aa:98:0f:50:98:fd:ea:ff:99:3d:73:
b8:29:08:6f:5c:d2:23:9a:11:f8:0a:3a:23:d7:b0:
78:9b:79:69:78:d1:98:69:c1:41:78:0b:18:9f:9e:
da:f9:09:df:8d:ff:c7:68:fd:75:4e:2e:d6:67:11:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:49:75:16:2F:52:68:91:B1:B1:18:8F:25:9B:87:51:8E:8E:E1
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/0yVJdRYvUmiRsbEYjyWbh1GOjuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:d8:74:48:6a:58:ce:77:bd:97:a9:4c:58:1c:31:cd:c6:20:
9a:f8:82:d9:3b:d8:ab:32:62:d1:f4:48:66:1a:78:ba:b6:73:
92:8b:a1:0f:40:ac:32:5c:4a:0f:fa:3d:0d:66:1c:be:bd:a3:
72:35:6a:c7:91:38:bf:ea:8b:b6:ad:12:99:16:43:38:d7:f6:
a7:e9:bc:ed:3e:49:d7:15:44:b4:05:c0:6d:63:c7:db:be:ca:
22:43:fc:c5:8f:2b:26:a1:34:f8:f4:38:15:94:00:34:40:07:
6e:b6:89:73:05:0d:68:58:f2:fe:8b:fe:03:27:75:f5:27:9e:
5e:41:1e:14:8a:7c:e0:93:cd:29:be:8f:36:83:03:87:ad:db:
83:c2:4e:da:cb:2b:66:a5:b8:c0:d7:71:b6:5f:44:1c:0e:a6:
bc:25:2d:01:4b:2b:2a:74:30:16:0b:de:6b:3e:7f:3e:e6:1b:
a3:dd:ec:97:12:5d:fd:6b:e3:c1:89:b0:87:ae:72:11:e5:c4:
b6:d6:62:8f:1a:22:68:b1:8d:73:c2:d7:ba:19:76:e0:eb:ef:
0f:ce:47:97:cf:f3:ad:6c:84:78:66:bb:89:65:d6:03:2a:56:
91:66:b4:15:bd:88:02:a9:b3:c5:af:09:6f:ce:df:2f:b8:f3:
0e:60:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org