Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/pMuF63GDmrpQpAEr4bKBf0MVJhQ.roa
File: pMuF63GDmrpQpAEr4bKBf0MVJhQ.roa (raw, json)
Hash identifier: BWfW+Sjso1uj2XGpkwUztLatPVVpE2iq7fzM5P05YwU=
Subject key identifier: A4:CB:85:EB:71:83:9A:BA:50:A4:01:2B:E1:B2:81:7F:43:15:26:14
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 09D33033
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/pMuF63GDmrpQpAEr4bKBf0MVJhQ.roa
Signing time: Sat 01 Jan 2022 16:11:28 +0000
ROA not before: Sat 01 Jan 2022 16:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 786
IP address blocks: 134.226.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164835379 (0x9d33033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jan 1 16:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4cb85eb71839aba50a4012be1b2817f43152614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:10:a7:ad:eb:2f:59:79:ea:75:6a:86:27:
bd:ea:98:f3:68:f0:78:7b:e2:5c:4d:e0:d1:b6:69:
93:7f:93:8a:e8:20:bf:00:57:a8:4b:b1:5d:14:c3:
4f:90:6b:d9:fe:f8:6b:50:b5:4a:ab:b0:52:85:21:
df:fc:87:43:cd:af:11:6c:11:81:58:39:93:e5:71:
48:bb:e4:5c:66:c1:20:b2:dd:be:4c:84:a4:b0:b7:
29:ff:77:05:ae:8f:1d:7b:aa:c6:6c:86:2d:b4:79:
2a:0b:2b:d9:6e:43:f8:bc:1b:d2:d2:5b:d9:e4:d3:
a1:34:39:a6:15:71:ca:7d:ea:36:c1:6a:7f:af:82:
b1:06:4f:0c:eb:28:13:b2:0b:53:61:c8:9e:7a:25:
d7:a3:8a:1c:03:d2:6f:f6:3e:2b:d6:7b:64:3f:e3:
7d:2f:40:84:66:12:74:42:ea:c3:5b:9f:87:6f:41:
cb:7d:81:2b:22:41:4e:40:0f:64:b4:4d:25:26:f7:
c3:f4:1f:ce:ce:63:9e:e3:4f:6d:67:f8:d0:58:59:
66:79:00:dd:22:35:ad:1a:ea:79:e3:34:4f:1d:02:
d5:aa:69:22:cf:0d:0d:f6:53:a8:97:fb:54:97:63:
89:af:4e:8d:47:02:74:b6:85:99:e7:f8:e3:0a:c7:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CB:85:EB:71:83:9A:BA:50:A4:01:2B:E1:B2:81:7F:43:15:26:14
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/pMuF63GDmrpQpAEr4bKBf0MVJhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.226.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:1f:61:86:72:35:c5:09:77:7b:30:a0:7a:63:bd:65:ab:c4:
bc:4e:af:93:00:07:63:93:67:d6:ed:55:7b:c1:c0:57:8f:70:
a4:5d:29:a1:e0:6b:17:6b:7f:b1:d4:f2:48:4f:a0:0a:fd:0d:
e1:e2:ba:71:77:19:16:88:52:85:ae:52:ca:55:41:48:95:1e:
3b:57:b7:cb:7c:ed:35:50:e9:fe:e1:b9:dc:ca:b7:c9:50:1a:
40:8a:6f:a4:a3:ec:7c:64:d0:c6:36:a2:d6:fd:a6:fb:75:05:
0f:19:3a:0f:59:a8:4d:1a:1d:51:96:da:d8:f7:bd:eb:9b:24:
79:4f:d1:13:d3:21:e8:59:70:0b:06:99:e5:78:cb:fb:31:9a:
23:23:cb:00:e6:19:a2:2f:d3:07:52:12:13:5e:88:1d:d6:50:
d0:51:2d:bc:a0:a8:ce:b9:d6:50:08:76:1b:7c:de:51:08:55:
e0:45:20:f2:73:58:7b:9b:5d:f3:e7:80:09:05:2b:59:af:12:
ac:dd:93:51:82:8b:8a:bb:78:f9:ed:40:18:10:bc:db:6d:24:
a6:3d:bc:bd:d7:22:d0:97:a3:9d:c3:11:e5:35:22:9f:d8:d1:
74:ca:26:40:0e:28:86:d5:82:8b:a2:aa:5b:9b:20:6e:36:0a:
3e:9a:76:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org