Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/AH0lob47csfJPICqYsTPASXD3jk.roa
File: AH0lob47csfJPICqYsTPASXD3jk.roa (raw, json)
Hash identifier: kF2fgf9pwVFKdmwMyFfGldO0S+bfnrTtDpio3ftEYnY=
Subject key identifier: 00:7D:25:A1:BE:3B:72:C7:C9:3C:80:AA:62:C4:CF:01:25:C3:DE:39
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 04E5BBA5
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/AH0lob47csfJPICqYsTPASXD3jk.roa
Signing time: Sat 01 Jan 2022 02:55:23 +0000
ROA not before: Sat 01 Jan 2022 02:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55163
IP address blocks: 144.2.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82164645 (0x4e5bba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 1 02:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=007d25a1be3b72c7c93c80aa62c4cf0125c3de39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:58:c3:48:52:7b:39:91:93:9d:66:c0:02:
4c:c0:3e:c1:e1:65:96:c6:f2:00:4f:6e:af:d2:61:
a1:d6:bf:56:40:d4:c7:3d:08:53:13:69:52:d3:76:
8e:f9:5e:5c:3a:13:a4:7f:ef:54:f7:23:e0:99:9f:
4b:71:44:c3:76:d1:18:5f:d4:bd:ef:df:ad:cf:1d:
6b:ab:71:1c:24:13:20:6f:32:3b:9b:bc:b9:80:8c:
73:bc:d5:7f:e1:b4:0e:27:75:b9:be:9a:ac:3d:da:
41:d7:01:17:80:3e:0f:40:17:81:d2:16:bd:46:f0:
e3:11:00:d1:40:9d:38:33:53:c4:d2:a0:46:5f:ca:
0b:3c:f9:4c:a6:ef:32:58:4b:97:be:e0:b8:09:6c:
22:ae:8d:e1:75:d0:01:3a:41:81:e6:c3:a3:42:2d:
be:30:ad:61:b6:82:01:b4:31:0f:ba:e5:68:6d:2d:
60:f9:d1:8e:bd:4f:6d:18:48:14:58:4e:35:d7:8e:
e0:18:3c:b4:74:a7:1a:74:33:4d:34:3d:21:ff:12:
e5:0c:5c:4c:e7:37:0a:df:6e:53:19:dc:01:a7:73:
c8:7c:c3:ca:d7:d3:ca:79:b1:f2:3b:e8:57:06:d0:
1c:6f:21:8b:58:bd:b3:13:6b:18:91:05:d4:3a:73:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7D:25:A1:BE:3B:72:C7:C9:3C:80:AA:62:C4:CF:01:25:C3:DE:39
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/AH0lob47csfJPICqYsTPASXD3jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.18.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5e:5c:b7:59:a0:f7:eb:51:c3:df:eb:75:6a:22:99:7c:0b:
60:cf:73:04:a8:e1:9d:21:67:5a:75:d4:03:30:a2:51:76:69:
c7:18:1d:5c:4f:44:8e:32:96:13:4b:26:a7:c2:32:39:60:c5:
6a:5a:ca:97:c8:02:8b:4f:68:5c:64:72:a2:fe:1b:4f:5e:7c:
bd:c4:49:26:e8:0f:65:cc:d8:b6:d2:ce:98:1a:38:67:08:b6:
d7:7f:61:9a:1d:bc:94:7f:65:5b:bb:8f:13:31:92:1a:df:a1:
3b:13:8d:8f:c3:2e:1c:2e:29:83:af:6d:18:74:b0:26:f1:a7:
a7:54:0f:25:c9:e3:6c:dc:d0:49:c1:28:d6:45:4d:48:06:55:
75:13:95:1a:9b:60:04:76:42:c4:86:86:1b:cd:58:25:be:f5:
1c:6d:52:ff:19:a1:91:eb:6c:1e:fe:03:e3:82:45:c2:1b:95:
4a:57:d9:58:a4:7e:8b:7f:d5:8c:15:03:0c:73:71:0b:8b:81:
01:09:c0:90:15:46:55:0e:77:fc:2e:97:1a:70:b6:77:69:2d:
c0:c8:28:9f:2e:ad:9e:99:e4:ca:93:ba:ec:46:31:15:37:d3:
ad:15:9b:2f:18:f1:31:01:23:eb:48:19:1f:79:dc:61:08:fd:
2f:5f:98:8b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBOW7pTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MWU4NmZmOTk3M2M5M2FiZTYzOThmMDMxOTY2YzI5ZDc1YTNiYTg2MB4XDTIyMDEw
MTAyNTUyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDA3ZDI1YTFiZTNi
NzJjN2M5M2M4MGFhNjJjNGNmMDEyNWMzZGUzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALS5WMNIUns5kZOdZsACTMA+weFllsbyAE9ur9Jhoda/VkDU
xz0IUxNpUtN2jvleXDoTpH/vVPcj4JmfS3FEw3bRGF/Uve/frc8da6txHCQTIG8y
O5u8uYCMc7zVf+G0Did1ub6arD3aQdcBF4A+D0AXgdIWvUbw4xEA0UCdODNTxNKg
Rl/KCzz5TKbvMlhLl77guAlsIq6N4XXQATpBgebDo0ItvjCtYbaCAbQxD7rlaG0t
YPnRjr1PbRhIFFhONdeO4Bg8tHSnGnQzTTQ9If8S5QxcTOc3Ct9uUxncAadzyHzD
ytfTynmx8jvoVwbQHG8hi1i9sxNrGJEF1Dpz++0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQAfSWhvjtyx8k8gKpixM8BJcPeOTAfBgNVHSMEGDAWgBQh6G/5lzyTq+Y5
jwMZZsKddaO6hjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0llaHYtWmM4azZ2bU9ZOERHV2JDblhXanVvWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMmY2ZGQwLWI3NmYtNDdkNS1hNGFiLTMyZmVlYjU2NmVlNi8x
L0FIMGxvYjQ3Y3NmSlBJQ3FZc1RQQVNYRDNqay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MmY2ZGQwLWI3NmYtNDdkNS1hNGFiLTMyZmVlYjU2NmVlNi8xL0llaHYtWmM4azZ2
bU9ZOERHV2JDblhXanVvWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJACEjANBgkqhkiG9w0BAQsFAAOC
AQEAeF5ct1mg9+tRw9/rdWoimXwLYM9zBKjhnSFnWnXUAzCiUXZpxxgdXE9EjjKW
E0smp8IyOWDFalrKl8gCi09oXGRyov4bT158vcRJJugPZczYttLOmBo4Zwi2139h
mh28lH9lW7uPEzGSGt+hOxONj8MuHC4pg69tGHSwJvGnp1QPJcnjbNzQScEo1kVN
SAZVdROVGptgBHZCxIaGG81YJb71HG1S/xmhketsHv4D44JFwhuVSlfZWKR+i3/V
jBUDDHNxC4uBAQnAkBVGVQ53/C6XGnC2d2ktwMgony6tnpnkypO67EYxFTfTrRWb
LxjxMQEj60gZH3ncYQj9L1+Yiw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:47 2024 by rpki-client on console-fra.rpki-client.org