Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/rWY301C4Gd12DmM1Bheka6igyx4.roa
File: rWY301C4Gd12DmM1Bheka6igyx4.roa (raw, json)
Hash identifier: arLn34tTR12674Mp827KyMKiON96BLk1C/Fvcf91HqY=
Subject key identifier: AD:66:37:D3:50:B8:19:DD:76:0E:63:35:06:17:A4:6B:A8:A0:CB:1E
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 25237109
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/rWY301C4Gd12DmM1Bheka6igyx4.roa
Signing time: Sat 01 Jan 2022 10:01:53 +0000
ROA not before: Sat 01 Jan 2022 10:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204915
IP address blocks: 153.92.0.0/24 maxlen: 24
2a02:4780:bad::/48 maxlen: 48
2a02:4780:dead::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623079689 (0x25237109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Jan 1 10:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad6637d350b819dd760e63350617a46ba8a0cb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4a:db:43:de:39:35:98:b9:64:32:c7:80:f1:
39:26:a2:81:35:ef:cf:91:6e:34:46:ca:9b:9f:5f:
35:34:7c:8d:d5:6b:1f:8f:f3:5b:e0:65:53:fb:5e:
0b:b3:a0:2f:bc:e5:f1:a4:4b:2e:a2:16:f4:4e:52:
03:bf:2c:92:5f:66:e0:31:58:bc:5f:6c:ba:74:f0:
54:c1:ec:0c:9f:6d:06:08:03:e2:24:d0:1d:8c:ff:
11:65:ff:01:52:1d:e9:ef:99:0e:c9:5f:99:e8:e2:
eb:45:23:ab:da:ce:79:fe:47:01:5c:09:e9:52:f4:
e9:1c:e4:e2:a5:19:5d:98:cf:04:8f:13:e4:8a:ab:
17:6b:65:4e:ed:a6:53:75:90:c5:a5:c0:07:36:55:
84:38:fd:05:12:bf:3a:78:74:3d:da:b9:0c:ab:4d:
fc:e3:63:1e:0a:b3:1b:bb:20:3e:89:fc:65:af:13:
10:00:79:b0:d3:50:42:fe:de:f4:51:03:3d:e1:32:
b9:b7:df:88:5a:52:18:1b:3a:27:34:cd:b3:b1:7c:
0c:a1:83:7e:c8:4a:4f:85:f1:33:ff:57:4a:9e:ca:
e9:23:05:f5:a0:79:93:9e:2e:76:5b:0f:a2:6f:e9:
7e:10:04:f9:54:81:ee:94:6e:db:88:ac:05:6c:b3:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:66:37:D3:50:B8:19:DD:76:0E:63:35:06:17:A4:6B:A8:A0:CB:1E
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/rWY301C4Gd12DmM1Bheka6igyx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.0.0/24
IPv6:
2a02:4780:bad::/48
2a02:4780:dead::/48
Signature Algorithm: sha256WithRSAEncryption
c2:76:78:2d:2a:22:be:aa:6b:d7:32:2f:0f:3c:1f:56:95:c0:
b8:64:6f:ba:6b:79:14:d5:5b:33:9e:78:f1:7c:2d:44:d2:68:
18:28:c4:e1:33:4d:31:16:66:3d:e4:7c:a6:78:83:da:6b:88:
60:07:1d:b5:e3:80:89:d6:c8:fa:41:da:74:0d:e0:d3:40:2b:
7f:a7:17:44:ab:b2:68:72:13:f8:f7:fa:08:97:57:b2:26:6a:
28:82:03:c5:8b:b5:26:44:29:98:2a:f2:a8:12:41:31:e3:7b:
12:5d:ae:fc:24:67:f3:1d:b8:29:b6:8c:7a:76:3c:7b:3b:df:
f8:bf:8b:4a:a4:2e:cc:5c:12:b2:87:ac:0e:7c:35:7f:50:9b:
c6:f6:16:b6:4d:35:44:be:de:18:38:b6:38:cd:bc:15:66:b4:
bd:e5:ff:af:ff:54:59:0d:52:77:43:97:1c:b9:84:98:4d:01:
4c:9b:be:5d:8b:cd:6e:08:f7:f9:02:f9:83:e8:6b:b4:51:0a:
23:14:3a:46:b5:33:15:46:9b:8f:44:fb:19:60:9f:91:d3:25:
d2:e1:e6:46:97:4a:b1:b5:65:0b:47:bd:8d:46:50:81:f8:85:
e5:06:c7:ea:80:72:6e:35:de:70:b8:84:0f:1d:7d:78:49:a9:
ba:6d:6e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org