Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/5WTA8fIfnzGOGjjtiXIcunE6IvM.roa
File: 5WTA8fIfnzGOGjjtiXIcunE6IvM.roa (raw, json)
Hash identifier: EklmO0GpEO22OUnbLp7bCsKx/Vfe+F39oXNHXtSl8Mc=
Subject key identifier: E5:64:C0:F1:F2:1F:9F:31:8E:1A:38:ED:89:72:1C:BA:71:3A:22:F3
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 08DB3314
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/5WTA8fIfnzGOGjjtiXIcunE6IvM.roa
Signing time: Sat 01 Jan 2022 07:57:34 +0000
ROA not before: Sat 01 Jan 2022 07:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41289
IP address blocks: 141.38.0.0/16 maxlen: 16
141.38.12.0/24 maxlen: 24
2001:67c:1364::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148583188 (0x8db3314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Jan 1 07:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e564c0f1f21f9f318e1a38ed89721cba713a22f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:92:cd:46:f0:73:04:71:91:c3:f3:97:75:
e0:7a:c3:d7:89:d6:0f:6e:cc:01:af:59:19:37:64:
80:8e:04:c6:c2:ff:7c:88:86:88:48:5c:cb:3d:1f:
72:21:63:18:b5:e8:56:2a:92:e1:5b:c2:a6:6e:10:
dd:ca:c4:68:7c:4b:6f:46:98:72:75:48:10:a3:38:
a4:e2:72:6d:3c:67:0e:57:49:f8:af:93:4b:61:d5:
ee:83:ac:a8:9d:65:af:70:cf:7a:40:62:f0:f8:01:
84:65:6a:36:65:84:6b:da:51:2a:3b:cd:79:7e:0b:
19:08:6a:b2:a8:0a:a8:7f:b7:e0:b3:18:fb:68:ab:
71:95:46:94:ce:91:1f:12:05:33:bc:19:53:cf:75:
c1:06:be:a1:42:0d:c0:b8:22:be:e4:0b:2a:1a:ea:
44:d4:08:65:0f:e0:5f:85:5c:8f:90:32:9b:ca:72:
3f:77:e2:dc:cc:ef:a1:f3:d3:9d:c0:cc:a5:55:1c:
26:05:7e:34:a2:bb:14:36:05:d8:35:e8:ae:53:24:
03:e5:a1:13:b3:69:34:dd:ea:94:b0:9c:07:20:03:
72:15:ec:f6:0b:e1:69:90:89:e2:0f:72:9b:d9:b1:
fa:6c:18:6f:18:c1:73:c6:9b:5c:37:62:74:d4:ab:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:64:C0:F1:F2:1F:9F:31:8E:1A:38:ED:89:72:1C:BA:71:3A:22:F3
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/5WTA8fIfnzGOGjjtiXIcunE6IvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.38.0.0/16
IPv6:
2001:67c:1364::/48
Signature Algorithm: sha256WithRSAEncryption
81:9b:a0:d7:03:07:6f:54:2d:71:76:0f:98:c2:75:41:fe:3f:
41:aa:8b:b6:38:1b:fa:ba:69:1e:61:69:fc:47:5f:87:3d:7f:
22:9d:5d:ce:0c:08:ea:4d:f7:66:20:1a:d1:6c:30:33:fb:31:
03:ab:8a:d1:ea:53:4a:89:19:1f:d3:11:3d:6f:c4:a5:7b:25:
00:93:5e:89:a6:61:93:1f:c3:3a:d4:46:6f:47:ae:a5:c1:00:
ba:66:de:00:4a:46:ff:4c:f0:2a:f1:08:07:0c:6f:78:40:82:
01:29:47:6c:7a:f0:2a:ea:4d:bd:7a:23:e9:f5:77:85:66:17:
d5:ef:9c:5a:43:94:2e:3a:ad:ec:32:cb:c2:7f:ca:13:d0:5a:
cc:6a:53:62:c5:52:34:96:19:8e:c3:5d:6d:cb:d4:49:f8:0d:
de:04:1d:0b:1a:13:8b:ab:5b:ff:e7:45:cc:05:3f:72:ca:89:
00:8b:e5:86:b8:98:7e:dd:c7:5e:54:3c:81:5c:59:66:15:ff:
a8:05:6e:e3:c2:85:1f:33:c2:78:bf:9f:ed:bc:90:90:1f:91:
86:4b:54:f0:d2:99:6e:bf:e3:19:4d:c0:52:f0:4f:9c:ab:47:
7b:7d:57:e8:82:51:52:96:cd:5b:ad:b3:a2:4e:e1:01:94:7d:
62:10:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:47 2024 by rpki-client on console-fra.rpki-client.org