Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/A8X4jaNaVR_Fk0UcILahruTLfIs.roa
File: A8X4jaNaVR_Fk0UcILahruTLfIs.roa (raw, json)
Hash identifier: 4WGFDCNj1woQ/v+byznEfcL/9YUtcYye508++2kljwA=
Subject key identifier: 03:C5:F8:8D:A3:5A:55:1F:C5:93:45:1C:20:B6:A1:AE:E4:CB:7C:8B
Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial: 0B5FA8DE
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/A8X4jaNaVR_Fk0UcILahruTLfIs.roa
Signing time: Sat 01 Jan 2022 10:57:47 +0000
ROA not before: Sat 01 Jan 2022 10:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34572
IP address blocks: 156.28.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190818526 (0xb5fa8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Validity
Not Before: Jan 1 10:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03c5f88da35a551fc593451c20b6a1aee4cb7c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:f8:d3:21:a0:b0:ff:16:7e:4f:79:81:ee:
d6:5e:22:a1:f4:1c:3d:e4:3a:49:87:1f:6d:58:b0:
33:99:79:5e:15:bd:8b:65:9f:07:5f:d4:18:fd:00:
20:5c:f9:4f:5f:3f:fb:f6:fe:22:5e:7f:d8:39:c4:
c0:95:0b:ac:06:39:23:99:62:5f:1d:b4:ac:72:0a:
fc:a7:c5:8a:fe:93:7c:d2:74:14:af:b9:b8:a9:d0:
ca:f4:f0:a5:11:31:d2:87:f7:ba:fe:ec:8f:ab:50:
a5:af:ce:e3:ba:8c:78:3d:89:23:5b:ec:0f:85:48:
e1:55:d2:ec:6f:0a:4d:7e:9f:7c:ef:42:e1:74:20:
8a:92:f4:87:70:f8:f5:0f:91:e0:61:ab:71:92:a2:
eb:e7:8b:a2:29:bd:98:26:7f:a4:72:17:7e:87:e2:
a2:55:80:90:35:89:e3:a1:6f:d3:a0:ec:cb:8e:6b:
d9:bb:36:41:79:be:b9:c3:f7:b6:32:c3:4a:b2:c5:
32:4a:f7:8a:64:3d:20:08:53:42:62:7a:a2:04:c7:
5e:70:fb:eb:5f:f2:4a:32:eb:39:2c:3d:77:44:ef:
9a:f1:65:f5:96:c8:59:c7:16:cc:11:78:e5:6d:2b:
91:57:41:e2:96:ac:2c:b8:de:15:ba:7d:c5:15:6f:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:F8:8D:A3:5A:55:1F:C5:93:45:1C:20:B6:A1:AE:E4:CB:7C:8B
X509v3 Authority Key Identifier:
keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/A8X4jaNaVR_Fk0UcILahruTLfIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.28.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:50:b1:d0:50:3f:f3:8a:ed:43:cb:ab:5f:c7:4b:66:0a:06:
cd:25:85:76:0a:2a:5a:78:bc:c5:ed:23:f1:fa:23:a2:d0:d1:
9d:44:16:09:b6:b2:1e:20:f5:03:1f:0f:44:d5:4d:6d:0d:2f:
4a:d5:ec:ca:89:34:e0:fc:b9:50:a2:de:6b:be:9b:13:03:b3:
d1:fa:f1:07:c0:b1:4a:8a:31:e3:20:f2:60:55:36:82:4f:d0:
e6:60:aa:76:02:22:a2:ed:83:b8:d4:dd:fe:aa:9e:e7:b8:0e:
37:9b:f9:e0:08:23:01:e2:25:d9:eb:d5:4a:68:1a:0c:60:f6:
27:94:c5:7a:63:98:6a:00:0b:86:39:c8:32:dc:7a:1a:b1:e0:
c8:0c:ad:a7:ef:af:c1:00:70:ee:5a:51:2b:04:5c:f0:4d:67:
fc:d8:f9:f4:6e:6f:e2:bd:f4:b4:d0:28:1e:78:ce:79:06:6d:
0b:d8:8a:f3:e3:d2:4c:08:a6:4e:dd:54:82:dd:90:b7:5b:25:
6e:57:36:a0:57:ac:30:e1:4b:b0:72:76:84:3f:30:23:16:e6:
ac:54:57:e9:51:4e:bc:24:89:0a:ca:12:f6:f6:5a:1f:62:ff:
cc:0a:a8:60:4d:71:ec:a2:d7:72:39:6c:64:35:ce:23:67:43:
28:5f:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:34 2024 by rpki-client on console-ams.rpki-client.org