Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/1U6KSkv9bAre_da6_kLgDA9Xrio.roa
File: 1U6KSkv9bAre_da6_kLgDA9Xrio.roa (raw, json)
Hash identifier: Nzm+dnoBEHr+qApXVyHysTnRFXTh0y+g7PCS8VcrIbw=
Subject key identifier: D5:4E:8A:4A:4B:FD:6C:0A:DE:FD:D6:BA:FE:42:E0:0C:0F:57:AE:2A
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 0988D331
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/1U6KSkv9bAre_da6_kLgDA9Xrio.roa
Signing time: Sat 01 Jan 2022 04:03:19 +0000
ROA not before: Sat 01 Jan 2022 04:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 153.96.140.0/24 maxlen: 24
153.96.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159961905 (0x988d331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 1 04:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d54e8a4a4bfd6c0adefdd6bafe42e00c0f57ae2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:a6:4f:a4:08:6d:fb:12:ca:29:2c:41:5a:
05:02:68:14:34:28:f1:bb:61:90:14:d1:2c:0e:dc:
8a:63:fd:f8:be:c5:ce:2c:51:00:c6:bb:c8:8d:b1:
25:ff:e2:81:91:05:0e:4a:60:e9:f8:86:82:39:66:
3e:cf:3e:09:14:50:f2:5d:ce:c2:c0:96:bb:97:36:
fd:1c:05:30:25:8b:51:46:c3:e1:9c:4d:d2:ef:3e:
c5:70:df:cd:0b:5e:02:db:f9:c3:e2:1d:2e:57:3c:
1e:c6:22:31:89:f8:f3:17:21:06:ae:e8:97:2e:41:
83:45:ab:29:8a:f8:e7:f0:cd:96:fa:41:26:c4:ab:
f9:34:2c:19:4d:33:3a:b1:16:3e:3f:a1:50:5b:41:
3d:c8:66:de:67:7c:d2:eb:9a:60:99:7e:88:57:42:
c3:49:53:2c:cd:ee:2a:69:9e:a4:83:46:d6:f0:35:
9d:bb:95:af:3f:8c:a6:35:fe:ac:11:73:0b:6d:e5:
29:6c:9d:6f:31:fc:9f:82:78:7c:de:5b:07:80:fc:
4b:52:5a:df:9e:42:57:a1:86:38:ca:1d:41:30:5a:
bf:7b:52:00:5d:10:4c:40:db:00:f9:0a:4c:83:e9:
52:9d:9f:16:19:0e:f1:e7:af:13:9a:a8:b3:35:7d:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4E:8A:4A:4B:FD:6C:0A:DE:FD:D6:BA:FE:42:E0:0C:0F:57:AE:2A
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/1U6KSkv9bAre_da6_kLgDA9Xrio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.96.140.0/23
Signature Algorithm: sha256WithRSAEncryption
19:ca:17:99:3d:89:b7:fa:0f:d4:26:f7:70:35:e7:6d:e4:7f:
80:02:75:a2:33:e6:e6:44:9f:73:18:b7:98:ed:05:11:ac:b8:
eb:c9:6b:ce:cd:eb:5c:4f:05:d2:ca:8f:cb:91:9d:bf:e5:52:
70:09:95:ad:94:0b:22:ec:5c:48:1d:a1:a7:3a:7e:c6:9e:c3:
8a:c1:12:e5:62:88:cb:07:6a:e8:e1:a9:62:26:d9:04:6e:6e:
87:16:8a:28:3e:d0:8f:06:e5:b4:c2:73:8c:62:1b:e5:18:52:
2a:13:d3:d7:ae:e8:0b:6f:f1:14:fc:a4:7a:c0:04:34:ab:3a:
02:d8:00:f0:47:a5:15:c7:69:78:39:d3:09:7d:39:34:6d:5f:
e5:17:94:ef:39:7f:61:58:ed:2b:4a:a8:c4:e5:55:bc:f8:57:
97:8d:b8:87:c1:5e:4a:bc:0a:d7:27:31:cc:b4:55:e6:85:19:
8d:c0:45:b5:97:68:cf:0b:0e:4c:fb:7c:c7:59:75:61:3a:4b:
12:84:c2:c5:51:2d:21:7e:5b:79:ca:92:e2:f3:69:72:d7:5f:
a4:85:fa:47:c7:15:a2:d9:8a:d8:ba:3e:f2:44:25:a2:77:ce:
4f:3a:47:3e:59:3d:a7:c8:b3:97:76:6a:34:73:74:50:9f:5e:
49:fa:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:13 2023 by rpki-client on console-ams.rpki-client.org