Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/RkhJWYwi8ywRNDQBE3BMI8JXbS4.roa
File: RkhJWYwi8ywRNDQBE3BMI8JXbS4.roa (raw, json)
Hash identifier: 2lsaumtSbv30rfklsuZ5XjeU0GLpTGArOIntspH1kfU=
Subject key identifier: 46:48:49:59:8C:22:F3:2C:11:34:34:01:13:70:4C:23:C2:57:6D:2E
Certificate issuer: /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Certificate serial: 0185718C1ED30E798C92B6752EF1319E17F9
Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/RkhJWYwi8ywRNDQBE3BMI8JXbS4.roa
Signing time: Mon 02 Jan 2023 08:14:46 +0000
ROA not before: Mon 02 Jan 2023 08:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2259
IP address blocks: 134.158.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:1e:d3:0e:79:8c:92:b6:75:2e:f1:31:9e:17:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Validity
Not Before: Jan 2 08:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=464849598c22f32c1134340113704c23c2576d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:0a:47:19:c4:21:81:95:b1:37:18:f1:10:
67:64:05:3f:c3:98:8f:fa:f8:cb:ab:66:c9:60:8a:
b5:a9:bc:69:89:16:fc:3d:43:fd:88:bf:40:bb:18:
d0:da:ca:bb:67:1e:7f:06:a9:ff:aa:a8:29:99:14:
8c:a5:81:2d:3e:e3:f0:1d:9f:ba:55:50:04:34:fd:
b2:0b:10:10:6d:6b:65:c1:d1:43:d9:3b:98:a6:b1:
af:99:18:55:ce:6d:87:91:90:b7:21:51:9b:4a:db:
c9:d2:fd:ad:f6:40:22:8b:c5:ad:65:e0:91:49:13:
51:b2:dc:ba:1d:c6:b1:65:8f:cf:fa:e8:1f:54:99:
f7:5b:16:7d:47:bc:c1:82:c0:fd:26:5c:73:1a:2d:
b5:6e:07:74:7a:a5:de:78:cd:14:2d:50:39:ae:5b:
89:34:fb:22:fc:49:67:17:9c:56:20:39:74:7d:06:
c9:00:c4:19:1f:18:28:7c:2b:65:54:e4:10:13:dd:
aa:10:cb:60:df:18:f3:dd:c6:12:27:7a:2d:eb:cd:
40:45:1c:d9:b0:ff:72:d4:a7:49:c8:eb:2d:7a:d5:
03:fe:13:46:c8:1d:95:5d:ee:98:95:1d:fa:1f:24:
da:28:ed:1b:f0:5f:e4:98:d8:b8:a4:a6:ea:c4:71:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:48:49:59:8C:22:F3:2C:11:34:34:01:13:70:4C:23:C2:57:6D:2E
X509v3 Authority Key Identifier:
keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/RkhJWYwi8ywRNDQBE3BMI8JXbS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.158.144.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:c8:30:33:e6:33:6d:de:56:94:fa:42:7e:43:35:4a:fe:85:
c3:0b:1b:58:a8:89:7c:2e:7a:b1:69:76:f3:8b:17:71:f8:a5:
81:b9:b5:b7:74:7a:30:5a:c9:a9:ef:9c:a0:28:e4:42:44:b2:
5d:aa:db:4a:d6:d1:aa:6d:6b:f7:c1:9e:f2:d8:e4:3c:a0:de:
fe:ab:ac:6f:9a:76:b0:e7:74:28:dc:74:cd:e1:68:86:ff:81:
a0:27:2c:dd:26:ab:b5:7b:32:19:30:a0:6a:5e:86:ca:6b:ea:
6f:26:bf:c2:12:ae:6a:15:8f:33:e9:e1:bc:fb:5a:82:f6:e7:
4b:da:89:ff:0e:66:85:29:08:4e:6f:ad:f4:ca:67:80:1c:ee:
bc:46:e2:a5:64:20:5d:12:c3:06:bf:75:39:14:43:76:b4:b1:
b1:d9:71:cc:16:d6:de:0e:37:6d:d7:76:8e:c7:8f:5f:f3:20:
c1:67:0d:cd:03:78:46:bc:a8:ed:bb:01:8d:15:16:06:43:8f:
c7:23:50:95:ff:74:66:a2:17:cf:d9:7c:56:d2:c1:a2:4f:37:
73:76:eb:02:e7:26:55:22:a6:17:15:f5:ce:d8:6a:79:5e:5a:
20:f2:f0:74:30:06:b8:6d:16:1b:54:e5:c5:7f:c6:84:82:db:
ef:a8:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:19 2025 by rpki-client