Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/mqL3Yl4NbnKUdWt7F-Val2gtMuY.roa
File: mqL3Yl4NbnKUdWt7F-Val2gtMuY.roa (raw, json)
Hash identifier: ievuAxq0ucQM3kkbgyIZlqmdIeDi3qqw7kmkQASCcm0=
Subject key identifier: 9A:A2:F7:62:5E:0D:6E:72:94:75:6B:7B:17:E5:5A:97:68:2D:32:E6
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 4FD099
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/mqL3Yl4NbnKUdWt7F-Val2gtMuY.roa
Signing time: Sat 01 Jan 2022 01:55:44 +0000
ROA not before: Sat 01 Jan 2022 01:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9136
IP address blocks: 143.163.64.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5230745 (0x4fd099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Jan 1 01:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aa2f7625e0d6e7294756b7b17e55a97682d32e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:04:d7:56:a8:bf:2a:fe:08:0b:0f:47:5d:
61:28:54:d7:ae:4c:49:5a:b3:9f:17:a1:5f:2a:73:
ba:02:0b:5b:ef:25:9e:52:49:03:53:06:0a:fa:bc:
51:e4:79:20:24:db:5a:fd:7c:73:5e:f2:3e:8a:72:
ce:dd:2c:6c:47:ae:39:83:25:44:6d:ef:e7:10:39:
f2:8e:01:8f:98:b2:b7:b5:4d:45:99:58:42:62:4d:
6e:9b:92:23:d8:97:bf:8f:e3:f0:da:07:a6:09:c1:
d3:a1:f5:be:c7:4b:46:ea:03:40:85:8e:b1:47:21:
8b:67:23:eb:3a:00:f9:c7:fb:6b:0b:af:f9:46:86:
c5:a9:96:7a:f0:32:4a:b3:e1:3d:05:73:48:e0:a3:
ab:bc:44:fe:2a:df:3e:2f:52:3b:fa:15:31:16:2b:
16:a5:67:c1:31:ee:5a:8f:ba:b0:d0:ed:f6:88:12:
ae:4b:9f:4b:6f:69:22:dd:ad:a5:43:8e:85:58:94:
96:51:41:15:62:96:86:c3:68:52:52:8e:fa:41:3e:
14:66:9b:ab:c6:3a:84:24:88:9d:84:78:d9:17:d6:
f2:a6:96:22:26:98:f7:9d:a0:d0:fc:4c:76:54:16:
5a:5a:5c:94:65:19:9f:be:ef:30:b0:8e:3c:65:80:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A2:F7:62:5E:0D:6E:72:94:75:6B:7B:17:E5:5A:97:68:2D:32:E6
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/mqL3Yl4NbnKUdWt7F-Val2gtMuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.163.64.0/23
Signature Algorithm: sha256WithRSAEncryption
15:86:17:d2:80:e8:db:4c:23:ca:88:aa:f5:67:4c:18:89:46:
d4:f5:b5:a7:97:1e:7c:70:da:10:86:a7:29:33:f4:eb:3d:b0:
82:f1:38:b2:24:fd:b8:d5:e8:4c:17:07:27:96:7e:ab:b6:02:
dc:ea:33:2e:14:1d:b7:89:2e:6d:55:58:15:fd:46:10:3e:56:
29:fc:27:42:44:a5:2a:61:53:2a:58:d3:ba:7c:29:f3:9d:ad:
92:66:b8:21:1c:3e:51:69:db:19:19:a8:56:4d:24:9a:6c:4f:
4a:8c:8e:47:57:fd:97:62:cd:44:65:c5:99:71:03:2c:f7:71:
e0:6d:92:3c:14:4a:df:30:75:04:fd:39:a8:c9:1c:e3:aa:5a:
ac:cf:6e:00:2f:c6:1c:de:89:3c:17:db:41:f4:2a:3a:9e:52:
67:f0:f4:d7:e2:97:e5:4a:3f:88:d7:4e:b9:ec:10:e6:a7:23:
40:54:62:59:c9:2f:0f:f3:6d:fe:91:fc:25:3a:fe:91:cf:7c:
63:9b:d3:bf:27:da:14:b8:79:6a:a2:e9:1b:94:b0:dd:29:ef:
eb:1f:f6:c8:b2:e2:50:af:95:5c:3f:79:91:c5:6b:57:38:33:
eb:cd:ca:ab:fe:7a:f0:bd:5b:82:8b:76:da:86:18:42:a8:89:
02:68:7d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:57 2024 by rpki-client on console-fra.rpki-client.org