Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/kf3uJhPxcSoPN16gLZTvn4CtqE0.roa
File: kf3uJhPxcSoPN16gLZTvn4CtqE0.roa (raw, json)
Hash identifier: eMlbhhOlJsu/OnfHbfFLsnu7VVk3Q8W+Smv9je6AoNM=
Subject key identifier: 91:FD:EE:26:13:F1:71:2A:0F:37:5E:A0:2D:94:EF:9F:80:AD:A8:4D
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 0118579C
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/kf3uJhPxcSoPN16gLZTvn4CtqE0.roa
Signing time: Sat 01 Jan 2022 12:04:41 +0000
ROA not before: Sat 01 Jan 2022 12:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48715
IP address blocks: 158.255.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18372508 (0x118579c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Jan 1 12:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91fdee2613f1712a0f375ea02d94ef9f80ada84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:43:9d:e9:de:61:ea:4e:f4:35:ff:ae:86:
a8:30:7e:22:08:45:e4:4e:ea:7c:e0:f1:a4:9b:16:
e7:a3:a9:24:22:c9:12:b3:27:37:55:57:7b:2e:26:
fd:6f:63:a8:e1:1c:e8:4a:53:79:52:73:7f:9e:14:
bf:56:d8:54:eb:73:6d:a1:95:f7:0f:b0:2d:17:fd:
c3:53:50:73:f6:2d:bf:a9:f7:11:5e:1c:14:91:4d:
35:2b:b9:b5:d7:c3:fc:0d:95:87:d2:f3:aa:b3:23:
a9:e6:d1:3b:1d:73:76:1f:52:a2:9d:21:45:c5:42:
5e:6e:76:1c:6d:8c:f7:5c:10:6a:2e:1b:6e:ce:16:
c9:06:a1:3b:23:34:a4:14:6a:10:81:74:bd:fe:b3:
c8:99:71:19:93:d5:41:d9:d3:a4:e5:42:b8:58:f4:
7f:63:54:54:df:af:b8:de:44:eb:40:3f:26:e4:58:
d2:c4:84:4e:25:e6:de:ce:ea:2e:65:ed:09:96:20:
9d:75:f5:1f:bd:dc:41:a1:bf:98:2a:19:e0:95:88:
80:e4:60:d2:df:41:2f:a7:64:62:eb:48:97:c7:2f:
84:a2:bf:72:e5:71:94:0b:70:3e:44:ff:bc:b3:ca:
10:c2:84:43:c0:d8:6e:fa:d9:a7:9e:78:10:ef:35:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FD:EE:26:13:F1:71:2A:0F:37:5E:A0:2D:94:EF:9F:80:AD:A8:4D
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/kf3uJhPxcSoPN16gLZTvn4CtqE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.78.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5c:f3:20:94:7c:4a:fb:1f:27:ae:53:76:4b:c0:78:05:66:
40:1f:b3:00:7f:18:09:f4:c4:ad:5c:a3:42:ba:c3:a6:6c:d6:
cf:6e:99:98:78:39:d4:26:16:d3:ce:28:22:7b:52:16:f7:1c:
1d:be:ee:d9:c5:82:4f:5c:d9:bc:24:c0:81:f0:63:fe:c9:6d:
3b:9c:6e:29:b5:f4:3d:ef:31:0a:1f:24:53:e9:09:fd:11:11:
44:ed:be:d8:66:57:8f:51:d2:44:ab:24:fd:96:16:81:8c:37:
87:30:40:3d:c1:5b:fc:b1:9a:87:b1:8b:8e:34:6e:fb:70:e3:
65:9d:a8:a9:55:e0:d8:1c:0b:25:f4:be:02:c8:25:df:8e:23:
f3:f7:7d:30:41:a2:e7:40:d5:de:9e:b1:f1:06:80:ac:c2:e1:
fa:c6:1d:2e:f2:61:3a:73:9e:19:eb:b2:41:2f:23:c5:64:35:
2d:7e:ab:ed:9d:69:7b:08:fc:94:5a:dd:8b:8d:ec:f2:7f:41:
37:16:00:35:8a:0e:c9:e3:2b:5d:ff:1e:49:ff:2f:4a:b9:9e:
68:33:0e:2f:97:99:ea:ad:5d:a8:71:ca:0f:06:4b:5b:fb:b9:
0f:4f:34:7b:1a:5c:0d:a1:08:87:7e:3d:ce:c4:d1:21:61:8b:
d3:eb:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:54 2023 by rpki-client on console-fra.rpki-client.org