Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/7mBIqGq0Pcvoxt2AxUWoyMQCuVA.roa
File: 7mBIqGq0Pcvoxt2AxUWoyMQCuVA.roa (raw, json)
Hash identifier: hIhREEymJFfaA30dBakc1C244SDdocfv6xFtrZtniqo=
Subject key identifier: EE:60:48:A8:6A:B4:3D:CB:E8:C6:DD:80:C5:45:A8:C8:C4:02:B9:50
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 018314AB72D1B6538000144CD6ABAA70C704
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/7mBIqGq0Pcvoxt2AxUWoyMQCuVA.roa
Signing time: Tue 06 Sep 2022 21:18:43 +0000
ROA not before: Tue 06 Sep 2022 21:18:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 159.197.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:ab:72:d1:b6:53:80:00:14:4c:d6:ab:aa:70:c7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Sep 6 21:18:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee6048a86ab43dcbe8c6dd80c545a8c8c402b950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:61:a4:ba:94:37:b2:62:d4:9e:d4:41:88:cc:
62:57:b2:4e:c5:eb:85:3f:a5:52:43:24:fd:96:97:
7d:30:d0:58:23:f4:1d:51:30:7c:f8:c4:83:e6:b6:
ea:b9:bd:2a:b1:9e:79:20:2b:0a:d9:37:c1:dd:27:
38:56:9d:be:e9:ff:ca:71:d8:09:d1:1f:ce:12:59:
65:f5:fa:81:3a:4e:af:d8:c2:c7:66:01:f9:43:67:
f8:02:39:dd:c8:d9:f6:b3:62:49:4e:9f:cb:d7:b5:
fc:1c:95:c3:c6:0f:23:58:ce:84:15:34:ff:87:e1:
ed:a8:45:0e:36:01:06:56:13:e7:52:54:e8:74:4a:
f6:c4:9f:d0:3e:c7:0d:f9:c8:c8:72:95:a3:19:9c:
7e:bb:b8:e7:52:b0:5f:1b:60:06:e7:d7:bd:f7:e1:
33:a1:8b:06:b6:60:7d:63:5b:de:a5:7b:7e:ec:df:
c6:e7:85:21:ac:8f:4c:40:6c:3c:6d:a7:d8:24:5c:
ed:39:4c:bf:c5:c7:80:e6:1a:51:84:ec:b7:a1:5c:
f6:d8:d6:d7:37:45:fb:62:c0:20:25:07:16:c9:06:
32:dc:66:12:cd:f8:47:c6:49:70:c6:ff:55:0f:0c:
bb:fa:12:5d:ac:bf:5f:0e:f6:e1:99:12:a7:f9:42:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:60:48:A8:6A:B4:3D:CB:E8:C6:DD:80:C5:45:A8:C8:C4:02:B9:50
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/7mBIqGq0Pcvoxt2AxUWoyMQCuVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.197.160.0/19
Signature Algorithm: sha256WithRSAEncryption
10:2f:4b:b3:c7:1d:8b:ab:01:d8:64:e8:b9:5d:69:2f:63:7b:
22:eb:de:cb:7d:78:06:f4:2b:71:e9:97:db:65:58:9d:4e:7f:
19:fa:d4:d8:d9:3f:0d:24:89:e2:0c:60:fd:f5:7b:7d:22:55:
c0:3a:49:4a:d2:30:cf:f9:a5:2d:cd:f2:ee:8e:5e:7a:ae:26:
29:3c:a6:e9:3f:0c:5f:7a:47:5a:7f:72:01:1b:b1:b2:cf:c1:
fd:a9:31:e7:36:53:91:08:fa:5d:95:b4:b6:a3:dd:18:f4:31:
8e:b6:3a:6e:11:4b:67:0c:90:f3:93:b6:3b:1d:7c:cf:87:1e:
9c:65:5d:99:ae:f2:53:de:04:ac:cf:d9:ce:f4:27:86:a0:ab:
e7:52:a1:78:8c:8d:6a:e9:a9:a8:d3:d5:bf:ac:fc:52:a9:eb:
c2:53:91:7f:a9:72:ca:a8:6a:96:ef:b2:0f:64:0a:15:e3:4f:
c4:2a:89:64:95:14:80:f1:e9:79:1b:2e:0d:9f:64:45:09:b4:
77:ac:96:21:7f:3b:e7:47:0a:b0:eb:44:6b:17:0a:0a:6f:aa:
5b:1a:cb:b1:3d:d2:28:5f:07:4a:83:bc:7e:51:86:04:5d:de:
18:7b:92:9e:91:ed:b4:38:31:ac:16:4b:f8:4c:e8:7f:d8:3f:
fe:95:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:14 2024 by rpki-client on console-ams.rpki-client.org