Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/D_KHSWe0vSilwf_6sGiPAaOhNi4.roa
File: D_KHSWe0vSilwf_6sGiPAaOhNi4.roa (raw, json)
Hash identifier: iAgY2T/2AxeY4eQt2R6HM7d0ix9q5qRmYlToqdjZciI=
Subject key identifier: 0F:F2:87:49:67:B4:BD:28:A5:C1:FF:FA:B0:68:8F:01:A3:A1:36:2E
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018489C425C578AF1DCD032FC4536DCD9A96
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/D_KHSWe0vSilwf_6sGiPAaOhNi4.roa
Signing time: Fri 18 Nov 2022 08:04:04 +0000
ROA not before: Fri 18 Nov 2022 08:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 141.226.246.0/24 maxlen: 24
141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:89:c4:25:c5:78:af:1d:cd:03:2f:c4:53:6d:cd:9a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Nov 18 08:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ff2874967b4bd28a5c1fffab0688f01a3a1362e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:04:ca:5d:63:c6:c2:1c:b0:9b:5d:a2:b2:
70:f8:ff:71:9c:cd:a6:e6:1c:33:48:5e:f0:5d:bb:
46:cd:54:a0:f9:51:2c:10:84:16:0b:c9:10:8c:a9:
a3:e1:f1:86:4d:54:80:10:8a:c4:13:91:59:9d:67:
f4:a5:49:11:14:21:6b:4b:c1:81:20:22:f2:94:55:
16:55:be:62:0d:f3:24:89:08:17:48:9c:80:23:c0:
cf:86:89:b8:88:10:7e:0c:ea:aa:91:79:1d:07:bd:
0f:33:30:c5:33:68:df:b4:a4:b1:ad:50:0b:df:a7:
b8:cd:87:b5:8b:d5:07:49:ed:b6:6c:bb:5d:ad:24:
53:b9:a4:c4:c8:01:0b:f0:f4:8d:9a:70:05:35:2d:
30:ac:86:e8:65:52:3f:07:da:5a:78:c1:aa:79:8e:
7c:69:cc:d9:74:34:94:f9:9b:d4:78:f9:7d:5f:23:
b0:56:54:7c:0c:5a:ee:c1:64:c1:0a:db:78:94:85:
3d:16:b5:df:f7:36:36:c9:48:af:dd:5c:f6:3a:8d:
a6:0d:9c:fc:9c:6a:ba:14:5b:fd:2e:bd:cb:68:15:
22:db:b1:30:87:79:b6:24:e1:cf:47:3a:1c:76:0f:
74:57:63:f5:a6:b2:e0:e0:0b:c6:86:d0:0f:08:9c:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F2:87:49:67:B4:BD:28:A5:C1:FF:FA:B0:68:8F:01:A3:A1:36:2E
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/D_KHSWe0vSilwf_6sGiPAaOhNi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.246.0/23
Signature Algorithm: sha256WithRSAEncryption
43:6c:77:8f:12:0b:c1:0e:eb:d9:95:d2:98:2e:5e:bb:fe:7b:
d8:c3:7a:b0:95:80:d7:e9:6b:bd:e4:e6:f6:9a:91:9b:ae:02:
ce:96:52:e1:58:76:9c:22:f1:15:d0:cb:f9:c5:d0:fa:45:b3:
6f:e6:3d:9b:4d:36:44:d5:b6:a5:48:d5:bf:88:d6:4e:04:59:
56:50:bd:db:99:27:37:cd:e2:e3:07:b2:1b:88:15:23:cc:f9:
0f:2e:72:fd:bf:19:c4:0a:50:39:19:0f:b3:44:cb:62:cc:17:
7f:b5:f8:aa:72:df:4a:ca:79:27:79:c9:69:5f:26:8e:12:c8:
91:4f:db:47:05:d5:93:73:32:95:38:10:3b:8f:6e:32:c2:69:
f5:72:da:f1:61:4f:fe:7a:ab:b9:cf:1a:5a:42:9b:29:c5:41:
32:d5:b0:03:8f:57:f4:03:28:dc:d3:33:bb:51:be:16:b5:65:
a6:dd:f8:49:a5:26:4e:d1:68:35:be:91:10:ba:e4:a4:fd:f0:
dc:48:af:3d:1e:5e:52:4f:d7:8e:2a:ab:6c:8c:e7:23:c6:aa:
db:1e:fc:b2:de:60:9e:1b:5a:7d:93:6f:c6:ab:21:a6:ac:26:
62:fe:83:75:17:86:95:3f:19:ee:b3:9e:a4:bf:10:f5:06:41:
c5:a7:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org