Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/O3BsUgvvcsUAMVhMMC05O8V5Ksg.roa
File: O3BsUgvvcsUAMVhMMC05O8V5Ksg.roa (raw, json)
Hash identifier: Md2HKwWj8gj9Uoz+RTNjxxDBhARioF+mNiAi16HzAQw=
Subject key identifier: 3B:70:6C:52:0B:EF:72:C5:00:31:58:4C:30:2D:39:3B:C5:79:2A:C8
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0183D767A28171CFDE6B77700C4C18BCFFD6
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/O3BsUgvvcsUAMVhMMC05O8V5Ksg.roa
Signing time: Fri 14 Oct 2022 16:50:36 +0000
ROA not before: Fri 14 Oct 2022 16:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399382
IP address blocks: 141.136.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d7:67:a2:81:71:cf:de:6b:77:70:0c:4c:18:bc:ff:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 14 16:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b706c520bef72c50031584c302d393bc5792ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:8c:a5:1c:68:85:ac:db:5b:ec:8b:a1:2b:
dc:04:1a:d6:7d:81:f8:54:c9:b4:40:11:8c:3e:39:
f7:28:3e:de:f6:18:f0:28:b2:45:74:a8:51:2b:28:
8b:1f:ba:b2:24:67:dc:0d:03:1c:28:13:cf:54:95:
01:a1:97:dd:72:9f:d9:05:da:de:9f:5d:6e:81:b0:
c7:c9:13:86:b5:0f:eb:e8:30:48:a8:8b:8f:e0:47:
71:d6:14:42:86:71:38:08:2e:12:26:0c:d9:73:60:
60:b5:ce:c1:d0:b8:a4:20:2d:cf:80:8d:b6:e9:a2:
0a:02:0d:2f:ca:98:4b:f8:8a:ea:92:9e:77:43:2e:
26:c7:fc:da:97:fe:bc:81:95:cd:a8:2a:3d:63:ef:
3e:d5:58:88:d0:03:f9:a8:60:a5:aa:26:e0:4f:4c:
ab:91:a9:72:18:70:66:d8:0b:68:c5:d7:60:93:72:
e7:d3:f6:66:6d:29:cc:d0:56:6e:80:cb:99:b9:dc:
16:68:17:b4:a1:96:ca:b4:d0:01:bd:4d:99:56:16:
45:77:6a:44:1a:87:32:db:84:19:43:d7:31:4c:7a:
a2:2f:81:cf:4b:14:a7:fa:4f:f8:12:50:c4:ad:d1:
0e:fb:ca:ec:15:fe:c2:60:d4:c6:fb:35:f5:25:f4:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:6C:52:0B:EF:72:C5:00:31:58:4C:30:2D:39:3B:C5:79:2A:C8
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/O3BsUgvvcsUAMVhMMC05O8V5Ksg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:53:b2:b3:c8:10:5a:10:f5:c5:ce:b7:0c:a2:8f:23:1b:09:
48:e7:fb:d0:2f:24:32:11:e9:ca:fe:97:d0:fa:dd:77:65:5b:
52:30:1a:ec:5b:bd:5f:47:23:5a:6d:2f:94:0c:fa:03:c1:9d:
59:08:99:ee:72:0e:83:c5:0c:06:d7:09:7d:0c:59:94:dd:ba:
b0:c3:19:1d:20:9e:68:d5:48:02:55:47:61:4b:63:1b:3c:7a:
5d:81:32:e2:cd:6e:db:7f:06:75:f8:91:b8:09:77:96:a9:26:
8a:b7:2b:9a:35:7c:f4:67:3b:5f:7e:42:35:72:2d:29:7a:1e:
88:a1:15:4a:8b:f4:b5:0e:07:31:55:37:a0:f4:17:c7:d8:ed:
2a:44:0d:d3:46:41:08:89:20:2f:e8:a9:b6:a5:15:92:94:15:
c7:26:aa:11:c8:65:f7:be:fa:9f:5e:75:60:4c:5f:ca:24:9a:
a3:d8:fd:fc:11:ac:99:de:56:ef:ed:53:45:56:de:da:28:f2:
db:c7:57:5a:6c:ed:a4:83:22:2a:3c:ca:69:b7:0a:d4:7d:b9:
e1:a3:43:f2:df:51:f4:10:91:c6:00:4c:77:ad:8a:ae:4c:fd:
04:d3:3b:56:47:fc:c8:d6:3d:d0:cb:05:5b:b0:c5:53:df:94:
b6:6f:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org