Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/h4Al0ap653d3L3wI1O0f55a_eLw.roa
File: h4Al0ap653d3L3wI1O0f55a_eLw.roa (raw, json)
Hash identifier: QZStoFVqsdxV1B/CmYUWiHp+891vG4bEEpdcfL39iLk=
Subject key identifier: 87:80:25:D1:AA:7A:E7:77:77:2F:7C:08:D4:ED:1F:E7:96:BF:78:BC
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 048632CF
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/h4Al0ap653d3L3wI1O0f55a_eLw.roa
Signing time: Wed 02 Mar 2022 10:42:14 +0000
ROA not before: Wed 02 Mar 2022 10:42:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201125
IP address blocks: 148.81.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75903695 (0x48632cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 2 10:42:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=878025d1aa7ae777772f7c08d4ed1fe796bf78bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:3e:8c:1d:85:6d:43:09:d5:b9:ed:91:2f:
ec:86:e4:21:ca:e4:a9:ed:0f:d7:40:fc:5a:67:82:
a1:42:d7:78:44:6e:54:83:f1:85:ec:62:32:28:d0:
ca:cb:a4:8e:ae:6b:27:8c:0c:e8:05:68:99:bb:d8:
e6:45:08:eb:31:29:e7:33:04:c0:9a:93:dc:e6:f9:
70:b5:fb:cf:30:7f:99:6a:88:7d:55:62:ad:10:87:
b3:b2:1d:35:7b:6c:d5:07:42:46:44:af:16:d4:04:
3f:9f:92:f3:c2:ac:a6:3d:b0:15:b2:9a:56:4e:cb:
82:ce:c2:cb:f4:8b:ba:4d:67:f6:a7:ef:ef:94:27:
0a:a9:d7:b2:91:83:2d:47:55:b5:0f:46:54:b1:ae:
1d:24:41:b8:12:1a:7a:77:4e:a8:34:96:b3:9d:30:
91:6a:f9:cc:dc:34:7a:3e:63:48:7e:a8:d3:b6:2c:
5c:eb:13:e3:9d:e0:a9:37:9b:5a:73:a0:98:2d:90:
be:a8:96:24:0f:79:7e:0c:1f:77:77:95:15:3d:0f:
46:17:97:30:db:bc:1a:34:11:f4:9d:f3:b2:5b:a8:
dc:7a:34:78:0e:41:66:fb:d3:02:51:3b:1a:10:e3:
72:06:6e:43:ad:ba:90:5b:75:f2:be:3c:c0:f4:07:
ac:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:80:25:D1:AA:7A:E7:77:77:2F:7C:08:D4:ED:1F:E7:96:BF:78:BC
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/h4Al0ap653d3L3wI1O0f55a_eLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c9:8c:d0:b5:64:88:c5:4d:8f:bc:5e:f0:eb:24:a8:05:1f:
b0:9e:63:b0:9c:67:95:0e:8b:12:4d:62:fa:46:dc:d8:93:10:
76:55:41:b9:e7:d4:d3:a0:c3:a2:bc:bc:ed:b5:16:70:52:22:
94:b4:da:0f:5d:f5:77:f8:1f:33:ef:f7:e3:d8:51:dc:92:c7:
48:c7:d0:d6:e0:29:f4:fb:7a:27:7b:df:5a:04:cd:ba:40:73:
3e:17:a3:f2:f1:27:82:ba:42:f8:51:37:7d:6b:43:81:2a:d1:
89:9a:57:83:73:a4:53:f9:aa:ce:5b:f9:34:3f:0c:57:53:91:
fd:1e:b7:b5:6b:8e:95:60:31:75:63:75:ba:7e:83:b4:6b:29:
a1:46:65:57:43:3f:57:f7:36:df:e6:83:a7:a5:d3:6d:7e:1d:
dd:ba:76:34:76:e1:aa:9e:c9:e6:2e:ec:46:43:3b:01:9c:4f:
cd:31:d3:ae:b2:e4:4c:08:e0:a9:4d:21:c5:64:e0:6a:8f:d7:
a1:cb:ba:02:32:c2:05:d7:f1:aa:2d:1c:21:c1:d3:56:fd:a0:
69:2e:fe:b0:cd:49:62:95:0f:36:44:10:8d:6c:9e:13:f7:b9:
42:09:1f:dc:6d:48:5b:5c:f6:78:1d:e0:8b:67:85:cf:04:2f:
c0:1e:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org