Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/TuSo4tBJBsn4QMXtqhOcJIrARR0.roa
File: TuSo4tBJBsn4QMXtqhOcJIrARR0.roa (raw, json)
Hash identifier: 3nsixD0ye23BNG2eHjdpggBz+eZI+li87HFfd8kTR00=
Subject key identifier: 4E:E4:A8:E2:D0:49:06:C9:F8:40:C5:ED:AA:13:9C:24:8A:C0:45:1D
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 3FF8C2CD
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/TuSo4tBJBsn4QMXtqhOcJIrARR0.roa
Signing time: Sat 01 Jan 2022 07:52:46 +0000
ROA not before: Sat 01 Jan 2022 07:52:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30781
IP address blocks: 149.62.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1073267405 (0x3ff8c2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Jan 1 07:52:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ee4a8e2d04906c9f840c5edaa139c248ac0451d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:ee:69:af:28:ad:c1:07:f6:dd:2a:24:2a:
62:a3:f4:ee:90:c8:99:d0:6f:d8:08:76:b9:67:1e:
55:64:be:e5:67:94:6a:84:de:cc:e7:1c:78:5f:e9:
aa:96:f8:f2:d7:52:ae:76:f0:f2:32:97:93:f2:6d:
b1:85:02:1a:62:73:81:37:a4:51:a9:d7:b3:53:f2:
0f:25:ec:03:ba:51:57:4f:e5:91:31:1c:4c:39:e9:
40:e2:ff:f3:7f:5f:d4:1f:f6:8c:13:70:16:8a:65:
3b:f1:08:e4:94:4f:cb:5d:8a:35:5a:c9:ea:bc:ca:
55:55:97:48:09:de:af:30:1c:a9:90:26:bf:59:c9:
c5:6e:17:d1:f1:51:da:77:f2:a3:26:92:6a:23:dc:
6b:6f:76:3c:4e:e2:66:84:f0:ff:47:18:8a:3a:cb:
9b:71:66:21:dc:31:d8:4a:75:2e:1c:b8:2f:d6:93:
b6:12:a9:89:4b:df:69:aa:e1:82:40:99:4a:eb:7e:
c0:95:46:86:93:2e:d5:f3:07:52:0e:aa:99:62:50:
85:f8:92:98:85:e5:ef:9f:b5:91:6c:b2:0a:81:de:
5f:17:df:7f:4c:a1:23:c7:3c:77:b8:4e:36:b1:bf:
d0:87:a7:c3:d4:c2:45:ac:96:1d:75:e3:8b:c9:bb:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E4:A8:E2:D0:49:06:C9:F8:40:C5:ED:AA:13:9C:24:8A:C0:45:1D
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/TuSo4tBJBsn4QMXtqhOcJIrARR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.152.0/21
Signature Algorithm: sha256WithRSAEncryption
56:6f:89:dc:88:fd:cd:93:35:68:a3:da:d0:07:e7:6f:25:11:
51:ef:11:ea:83:db:15:a5:57:e1:52:1e:15:51:3a:2e:ec:64:
7c:db:e0:12:d8:ce:6b:7a:0c:d7:e1:f6:d9:77:87:23:a4:77:
5b:8f:74:58:41:84:e9:83:1c:0b:7c:a7:39:52:f8:80:a2:5e:
81:ca:5b:6a:9b:4e:33:33:65:ec:15:1e:35:57:64:da:33:c3:
ea:47:25:13:d4:4b:a2:52:25:a9:0d:80:af:e9:8f:fc:02:a4:
e4:72:14:d5:32:c4:f1:04:3a:af:d1:9e:0a:7d:16:fb:32:f4:
ea:93:74:91:4d:d4:d3:88:b2:a3:14:ae:39:7a:ff:81:96:71:
e8:2d:51:9d:0e:5b:97:d3:14:fb:23:13:61:c5:10:c0:20:e4:
e6:8c:a8:70:24:b4:e3:10:45:3c:bf:49:1d:96:f7:81:63:13:
bc:41:c9:53:e5:73:d6:bd:35:ae:5c:22:ee:c5:50:98:cc:3a:
4f:23:00:35:ef:95:24:ac:e4:a3:42:60:d8:39:de:06:09:ab:
ed:b4:40:9e:b8:8f:db:9c:34:41:b6:10:f5:42:b3:60:a0:9a:
3b:b6:f7:c4:6c:2b:eb:78:19:3a:f0:9a:c9:e9:64:ed:dd:28:
9e:84:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:13 2024 by rpki-client on console-fra.rpki-client.org