Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/4dFdSiJV7WF9Qw2cZlDdsePeils.roa
File: 4dFdSiJV7WF9Qw2cZlDdsePeils.roa (raw, json)
Hash identifier: uU2AXG91SSD981cyIh41jyJ6MmjAqw+KRRwNRG3mH1U=
Subject key identifier: E1:D1:5D:4A:22:55:ED:61:7D:43:0D:9C:66:50:DD:B1:E3:DE:8A:5B
Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial: 230ADA58
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/4dFdSiJV7WF9Qw2cZlDdsePeils.roa
Signing time: Sat 01 Jan 2022 12:01:19 +0000
ROA not before: Sat 01 Jan 2022 12:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15753
IP address blocks: 149.177.228.0/22 maxlen: 22
149.177.176.0/21 maxlen: 21
149.177.192.0/23 maxlen: 23
149.177.194.0/23 maxlen: 23
149.177.212.0/23 maxlen: 23
149.177.218.0/23 maxlen: 23
149.177.214.0/23 maxlen: 23
149.177.216.0/23 maxlen: 23
149.177.224.0/22 maxlen: 22
149.177.128.0/22 maxlen: 22
149.177.148.0/22 maxlen: 22
149.177.152.0/22 maxlen: 22
149.177.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587913816 (0x230ada58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Validity
Not Before: Jan 1 12:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1d15d4a2255ed617d430d9c6650ddb1e3de8a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:89:7d:b3:89:0b:bf:00:19:2f:7f:b9:92:
fc:e1:56:79:64:39:8f:df:26:6d:56:7f:90:29:bd:
ac:d1:ef:30:03:b9:0a:3b:00:0b:74:7c:82:7d:45:
22:b2:a9:92:d7:5f:0a:45:ed:b6:fe:86:63:17:b9:
bb:ea:8b:9f:cc:5f:d4:97:52:b7:da:9e:07:72:c4:
bd:b5:3c:de:e5:d0:6b:95:8b:e0:92:85:e5:09:b7:
52:e8:92:ed:96:83:cb:81:d8:1e:6b:48:e4:fd:ab:
98:19:2e:54:45:b9:ea:3e:d6:53:62:19:57:b6:46:
1e:86:73:9f:e5:b4:51:f4:f3:b7:e7:74:95:57:8e:
59:68:b8:43:b8:2f:78:f6:cf:7a:45:b4:aa:f7:f3:
e1:e9:2d:40:2e:33:04:d3:bd:d0:90:b4:32:b5:17:
20:6b:23:90:63:84:50:a6:1e:ae:dd:3b:e7:bc:47:
da:23:30:08:8f:e4:35:d7:5b:2b:a5:0b:27:62:cf:
e9:1a:92:f3:c3:ad:e3:5e:19:d7:fb:b2:fc:b6:18:
07:7b:a3:69:16:28:13:95:ee:ec:1b:cc:1c:af:1d:
2f:96:9a:42:88:9c:6e:c1:71:db:d8:ef:2b:21:2c:
43:64:f1:d3:d4:64:2a:6e:fd:09:f1:6f:d1:37:83:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D1:5D:4A:22:55:ED:61:7D:43:0D:9C:66:50:DD:B1:E3:DE:8A:5B
X509v3 Authority Key Identifier:
keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/4dFdSiJV7WF9Qw2cZlDdsePeils.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.177.128.0/22
149.177.148.0-149.177.155.255
149.177.164.0/22
149.177.176.0/21
149.177.192.0/22
149.177.212.0-149.177.219.255
149.177.224.0/21
Signature Algorithm: sha256WithRSAEncryption
24:32:2f:d2:53:c8:1c:7d:f1:71:ba:8a:eb:48:26:7e:92:ca:
93:26:d1:88:0e:8a:ae:9e:45:46:eb:75:6b:c5:44:26:db:4b:
08:a0:3d:0f:a1:6a:52:fd:0e:b4:3b:74:f2:80:4f:f9:94:ac:
2f:7d:b5:d4:94:b0:e3:19:eb:80:f2:fc:ed:1f:ff:b3:03:1b:
fa:3d:51:c7:d4:ef:bb:64:90:11:a2:21:26:fa:3c:ff:4f:ab:
c4:67:63:cb:1f:57:6a:b4:3c:b0:6b:42:50:d2:4d:4d:1c:28:
9b:27:6e:e9:60:63:8d:5d:18:51:22:9f:f2:65:d8:46:8c:80:
7f:ce:f6:a4:7c:65:65:d8:b5:a8:ef:1a:cb:4f:e2:6f:b1:fc:
0a:16:3a:ac:16:5c:b4:64:93:e6:26:06:1f:a2:01:34:3a:b9:
e7:64:42:fa:b3:d9:a1:88:86:da:8e:50:d9:b3:d3:eb:2f:43:
9d:6f:ef:37:97:a1:00:07:9b:4e:72:8e:29:fd:50:ea:a6:fc:
99:ea:7e:9e:47:ce:93:db:70:ca:39:64:1f:02:11:9f:a6:ab:
1c:b5:1f:ea:32:8a:a3:55:90:8e:bc:04:53:97:86:fc:96:50:
d5:e9:ef:69:66:87:84:41:10:72:7f:e6:93:95:4e:d6:c8:f5:
58:72:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:05 2023 by rpki-client on console-fra.rpki-client.org