Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/feQwq6oxT62tic4lHQc-klydqC0.roa
File: feQwq6oxT62tic4lHQc-klydqC0.roa (raw, json)
Hash identifier: /RZfhMeqNfH+JRzCbAd0BlSpl5Td791yaRcn5+Wl5lA=
Subject key identifier: 7D:E4:30:AB:AA:31:4F:AD:AD:89:CE:25:1D:07:3E:92:5C:9D:A8:2D
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0E8A769D
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/feQwq6oxT62tic4lHQc-klydqC0.roa
Signing time: Sat 01 Jan 2022 04:55:16 +0000
ROA not before: Sat 01 Jan 2022 04:55:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196875
IP address blocks: 79.99.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243955357 (0xe8a769d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jan 1 04:55:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7de430abaa314fadad89ce251d073e925c9da82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:50:8e:3b:1f:20:f9:d9:78:d2:a2:06:95:
05:2e:5c:f2:22:0a:ce:a0:2c:65:70:31:b9:84:11:
54:2e:82:1c:51:f8:d8:3e:9f:e1:62:c3:29:03:ba:
22:94:14:1c:6b:26:0b:d6:d9:39:08:04:80:39:00:
36:57:72:c9:bd:3e:c2:6d:0c:a3:54:4f:c3:8a:a8:
bf:0b:ae:62:24:24:cd:46:a8:00:d2:05:1b:bf:2f:
00:a6:dc:66:51:08:4f:c5:74:4c:50:bc:1a:8c:a8:
a3:66:4f:9d:ae:5e:13:d7:4b:f1:a0:d0:ec:5a:e7:
71:0a:c1:83:72:30:f1:69:4f:e8:11:23:8b:ef:8e:
f1:d5:d4:3f:b7:d6:2e:fc:5c:dc:37:e4:d4:8c:d8:
06:ed:8a:ed:b2:5b:6d:0e:11:ea:69:43:55:b7:b9:
8e:c5:b0:24:f3:27:14:61:e6:2c:0d:9f:97:cf:8d:
26:c9:68:f0:86:d5:9c:2e:9a:d1:41:3f:2f:e5:83:
6b:90:fc:4c:5c:79:46:7f:d7:17:13:c5:48:cf:2b:
5b:3c:30:8f:08:9b:a9:37:b3:e7:77:f8:0a:a3:ec:
cf:10:61:2d:9f:08:03:3a:b8:a8:cf:1f:59:ee:37:
88:ee:87:fd:b1:f5:4d:c6:4d:9f:45:00:3d:ad:0d:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E4:30:AB:AA:31:4F:AD:AD:89:CE:25:1D:07:3E:92:5C:9D:A8:2D
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/feQwq6oxT62tic4lHQc-klydqC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a7:01:bf:82:58:21:8e:d3:61:a4:70:02:84:58:25:c1:02:
ca:c6:19:24:e5:db:a9:94:80:65:6b:d0:20:4f:57:9d:5a:39:
d6:ae:c3:5b:19:d3:ac:98:27:de:d9:b8:26:0e:17:f8:65:e1:
1e:93:a5:26:0a:b6:68:ba:48:9b:50:88:6f:6e:0d:b3:52:7d:
44:ea:45:f2:5a:c3:40:9a:25:56:a8:bc:1b:9f:81:61:61:3e:
d6:a8:96:a0:a1:e6:b6:73:20:68:29:5b:51:43:21:8b:a2:3a:
c8:1a:c0:0d:4e:15:db:1a:f9:09:f9:5e:9f:7d:93:62:be:63:
f1:bf:69:dc:f3:fb:28:6d:38:75:b7:80:c9:c4:98:ed:f6:f6:
f8:10:79:27:6d:de:b0:cf:77:4d:0b:fb:04:c1:16:68:d5:49:
02:b4:10:b6:c5:c0:2d:53:6b:20:0d:3d:84:4d:6c:27:c7:93:
bd:fd:97:61:84:57:5f:c2:7b:dc:5c:62:6c:60:08:3e:a4:32:
8b:3c:19:3f:7c:3f:83:d0:33:35:07:9b:b2:51:cb:a9:e8:a4:
6b:d1:cb:25:9d:de:b0:11:a8:7f:15:ea:36:4d:95:07:b5:88:
83:cf:10:9c:d1:58:68:58:06:9e:57:26:ea:a1:49:22:f9:b7:
85:a9:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org