Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/MEVBTwH6mjeGyZkgt4u97n5-oFw.roa
File: MEVBTwH6mjeGyZkgt4u97n5-oFw.roa (raw, json)
Hash identifier: 4XXdDoDc+DOHezMu3oQax8WiDSll4vz6S8lebJnxvvU=
Subject key identifier: 30:45:41:4F:01:FA:9A:37:86:C9:99:20:B7:8B:BD:EE:7E:7E:A0:5C
Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial: 01836497B97E7A1EC384E4EE03043112CED0
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/MEVBTwH6mjeGyZkgt4u97n5-oFw.roa
Signing time: Thu 22 Sep 2022 09:46:48 +0000
ROA not before: Thu 22 Sep 2022 09:46:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56559
IP address blocks: 147.78.96.0/24 maxlen: 24
147.78.98.0/24 maxlen: 24
147.78.97.0/24 maxlen: 24
147.78.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:97:b9:7e:7a:1e:c3:84:e4:ee:03:04:31:12:ce:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
Validity
Not Before: Sep 22 09:46:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3045414f01fa9a3786c99920b78bbdee7e7ea05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:e7:5d:a2:a6:a8:52:ae:f3:a1:9d:e0:fc:
93:c6:71:fb:2b:67:6e:f6:f5:06:bc:02:e3:2f:0e:
e3:05:4e:dc:91:75:e7:2d:63:f3:0e:10:bc:38:bd:
b1:72:82:72:50:36:3d:39:f9:14:c2:df:c9:93:da:
9d:2e:e0:7f:c3:05:3c:76:5e:72:40:08:3d:10:92:
81:e9:fb:33:77:ba:00:49:5b:63:ab:58:ef:a5:97:
d9:4b:c8:6b:27:2e:4a:f8:eb:e1:90:36:c9:9f:c8:
46:5c:5e:71:eb:b0:f9:20:3c:55:82:33:9c:8f:08:
1e:ba:e0:b2:e4:31:eb:82:53:89:20:85:49:b3:65:
ca:8d:73:97:95:4f:78:ee:ea:ba:85:fd:22:e8:c4:
cd:40:d5:25:3f:8b:5d:a0:65:f7:7a:1d:f1:39:ac:
cb:4c:89:90:cf:81:9d:02:c5:76:09:c6:4a:32:5e:
0a:d1:91:fc:87:99:54:da:e2:9a:ff:2e:7c:8a:bd:
fa:5a:05:c5:6d:2f:8c:46:08:ba:5d:f2:6a:5e:73:
6a:c2:53:0f:54:46:1e:13:79:18:15:c9:13:2f:02:
dd:dd:25:20:e2:97:43:c3:ed:e7:e3:07:1b:16:e1:
2b:1f:c5:dd:43:d4:22:49:e5:0c:66:c1:15:4f:58:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:45:41:4F:01:FA:9A:37:86:C9:99:20:B7:8B:BD:EE:7E:7E:A0:5C
X509v3 Authority Key Identifier:
keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/MEVBTwH6mjeGyZkgt4u97n5-oFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.96.0/22
Signature Algorithm: sha256WithRSAEncryption
95:ee:83:13:9f:0f:93:66:37:11:0a:66:ef:34:28:3c:66:a7:
c5:a4:36:b8:65:b3:3b:11:f4:d8:98:82:e2:44:f5:26:95:66:
f9:01:50:ca:ff:7b:1c:10:81:60:01:61:0a:bc:ba:da:9c:89:
33:b8:cd:9d:1f:a8:c9:be:46:77:84:64:e4:87:42:5a:15:60:
9a:b0:49:33:02:b0:0f:c0:14:c2:0e:9d:50:e8:53:6d:03:a9:
7a:a2:0b:04:bf:b3:fd:b3:fb:03:43:62:b1:12:4b:35:23:cd:
7f:9e:42:05:35:2f:20:f8:36:f8:11:40:53:d5:4d:e9:e8:ad:
d1:bf:58:b1:55:7f:06:89:58:dd:24:89:4d:b4:8d:77:c9:30:
52:43:ab:c0:9e:9f:65:ab:29:9c:45:db:b9:2e:f1:e5:da:de:
5f:e1:d6:19:42:cf:4f:77:0f:87:88:aa:1c:e4:e6:3c:08:d7:
3a:59:04:35:05:04:ff:e3:82:32:e5:34:1a:6a:2a:45:af:ee:
cf:f2:54:52:13:b6:c1:d4:f1:1f:16:68:04:b7:81:60:c8:6e:
2a:42:2e:7b:06:af:78:e1:9c:2d:52:91:bb:af:47:c0:ca:59:
86:a4:11:a7:c3:a2:b1:ab:d1:7f:fe:56:8f:94:b5:98:4e:ee:
bb:4b:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:20 2023 by rpki-client on console-ams.rpki-client.org