Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/Kkq7j8nTyxcnuOY17apEs0ztb2E.roa
File: Kkq7j8nTyxcnuOY17apEs0ztb2E.roa (raw, json)
Hash identifier: 87YtPr/wwjTutLy6uSi3IpKtGE32UFnGFsmjNDaieIs=
Subject key identifier: 2A:4A:BB:8F:C9:D3:CB:17:27:B8:E6:35:ED:AA:44:B3:4C:ED:6F:61
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 165A3B7D
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/Kkq7j8nTyxcnuOY17apEs0ztb2E.roa
Signing time: Sat 01 Jan 2022 10:01:22 +0000
ROA not before: Sat 01 Jan 2022 10:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47583
IP address blocks: 141.136.33.0/24 maxlen: 24
141.136.36.0/24 maxlen: 24
141.136.35.0/24 maxlen: 24
141.136.34.0/24 maxlen: 24
141.136.39.0/24 maxlen: 24
141.136.44.0/24 maxlen: 24
141.136.44.0/23 maxlen: 23
141.136.41.0/24 maxlen: 24
141.136.47.0/24 maxlen: 24
141.136.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375012221 (0x165a3b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Jan 1 10:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a4abb8fc9d3cb1727b8e635edaa44b34ced6f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:3f:1f:60:89:62:2f:ca:38:86:8a:90:b3:
ab:14:e1:b6:8c:bf:8c:01:5b:dd:b9:79:19:54:87:
a8:59:50:5c:a4:0f:0f:6f:f0:0e:82:4a:82:53:d1:
9d:6a:02:b0:88:38:0b:a5:a4:25:46:32:28:85:fe:
e4:0b:e4:0d:c2:af:7e:88:cc:63:40:33:0e:f0:04:
4d:7a:9f:d9:8b:4f:ad:cd:da:a2:19:c9:33:b8:e6:
d7:18:e4:d1:93:36:f1:a3:b8:2a:fe:53:0a:c4:c0:
ca:09:ef:e8:c2:10:ee:0a:2a:06:0a:8d:bd:31:b7:
c9:a1:39:1d:c1:49:74:a7:fc:ac:e9:85:df:d0:5a:
35:1b:e5:aa:e1:93:cd:2a:50:e4:33:38:44:10:2b:
89:5c:3d:53:a3:4b:1f:1e:ba:46:87:80:b5:a2:15:
2a:c8:46:4d:a9:c1:9a:93:f5:8b:11:57:56:b8:9e:
9f:b3:11:bf:ac:06:4d:48:df:60:1b:41:02:6e:1a:
26:f5:45:75:da:f7:02:de:5d:00:2f:0e:6f:ed:c4:
22:2f:16:35:ae:56:9b:72:cc:b9:9f:3f:58:e5:05:
c6:4c:a3:1e:8c:00:75:41:db:93:f1:39:7f:a0:2d:
03:35:b6:b6:8f:28:bd:92:8d:e1:5a:5c:2d:60:10:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4A:BB:8F:C9:D3:CB:17:27:B8:E6:35:ED:AA:44:B3:4C:ED:6F:61
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/Kkq7j8nTyxcnuOY17apEs0ztb2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.33.0-141.136.36.255
141.136.39.0/24
141.136.41.0/24
141.136.44.0/23
141.136.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:35:a3:8f:c3:f3:ae:a2:72:7b:a5:ff:23:c9:c5:bc:45:90:
84:0a:ed:b2:b3:59:c9:96:90:1d:4b:c7:09:45:a2:e8:22:0d:
af:39:7c:c2:65:b0:78:31:41:ac:65:a2:11:ae:c7:20:56:fa:
35:8f:65:d0:ed:31:51:f5:a1:37:4e:48:f0:48:0b:d2:59:f3:
3a:a4:88:c8:16:12:b5:72:f0:0a:ff:f2:4a:ec:38:99:35:c9:
24:97:4e:2f:71:29:4f:20:40:36:3b:65:3c:f2:d2:2a:6f:6e:
bb:cb:8b:f2:ee:70:c8:94:2f:e4:ef:df:fd:eb:8c:8f:2e:a7:
3c:7f:4c:ae:6b:f6:2f:4c:b4:fc:31:15:81:85:e0:66:9e:68:
ef:e1:19:79:97:85:0e:12:36:74:8c:73:10:19:24:69:e4:3c:
1c:96:15:13:bd:d7:dc:08:df:55:70:34:e7:8a:79:52:3f:fd:
52:30:5b:72:fc:25:16:88:54:d6:2e:fe:c2:5b:09:e1:8e:df:
d9:f1:ea:84:90:96:d4:ef:3c:50:ee:31:df:c9:f3:d3:3c:9f:
cc:34:a0:a9:9c:a8:2b:26:c8:ca:e8:b3:80:41:95:39:9e:a5:
c8:ef:d5:5a:a7:89:3c:1f:67:e3:69:21:e9:5e:1e:0c:d7:8c:
5a:00:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:16 2023 by rpki-client on console-fra.rpki-client.org