Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/N4h96cP6mfqfPNnWWSkyHwj5ZJg.roa
File: N4h96cP6mfqfPNnWWSkyHwj5ZJg.roa (raw, json)
Hash identifier: gULgjEEzCDbm2f+6YgZLR+b+6rAYOOfXjBtyl+/UOkY=
Subject key identifier: 37:88:7D:E9:C3:FA:99:FA:9F:3C:D9:D6:59:29:32:1F:08:F9:64:98
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 33225A28
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/N4h96cP6mfqfPNnWWSkyHwj5ZJg.roa
Signing time: Sat 01 Jan 2022 02:56:57 +0000
ROA not before: Sat 01 Jan 2022 02:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59547
IP address blocks: 5.149.65.0/24 maxlen: 24
5.149.66.0/24 maxlen: 24
5.149.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857889320 (0x33225a28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Jan 1 02:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37887de9c3fa99fa9f3cd9d65929321f08f96498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:1b:5a:fa:4d:fc:89:0b:57:78:88:69:9b:
ab:0d:98:eb:d3:e2:c1:1b:75:9d:96:84:63:3c:4d:
db:64:24:37:f5:0a:9b:89:2f:40:b5:dc:81:f5:d3:
47:2b:eb:d8:27:ce:c3:52:e3:54:06:0d:58:46:22:
7d:0f:95:57:7a:8b:2c:4c:b3:15:a0:af:82:f4:f1:
93:93:7b:88:25:4a:c5:ab:3f:81:e5:21:94:b1:61:
a8:ad:35:23:ef:e5:fa:34:f4:96:11:75:b0:e8:c5:
da:0f:a3:e3:b4:ee:62:e9:04:33:d4:76:99:bd:c7:
1f:f9:bb:da:eb:8f:48:01:6b:c0:b7:88:39:b2:aa:
ca:3a:eb:c0:54:a0:b0:dd:74:c8:be:c0:dd:b5:17:
4b:9e:90:1e:87:cd:19:e7:c2:fc:3b:95:59:27:e2:
47:05:2e:b2:43:a1:c2:0a:87:7c:c6:54:e1:08:f7:
1d:a6:bf:27:8b:c0:a8:27:18:46:02:ee:b8:14:9e:
18:88:8b:48:4b:ce:0e:a0:8a:7c:08:45:04:42:3b:
ea:8e:a3:64:50:33:8e:11:f4:f8:59:a9:f8:4d:34:
f5:ae:b9:13:64:67:63:7d:d6:d8:06:98:8f:73:30:
22:64:68:b9:89:2b:76:87:a6:ad:26:c7:4d:eb:8a:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:88:7D:E9:C3:FA:99:FA:9F:3C:D9:D6:59:29:32:1F:08:F9:64:98
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/N4h96cP6mfqfPNnWWSkyHwj5ZJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.64.0-5.149.66.255
Signature Algorithm: sha256WithRSAEncryption
63:2a:6d:c2:19:21:30:b8:10:90:b5:58:a6:c0:18:7b:98:20:
af:24:32:1b:a6:27:28:f4:38:0d:d1:f9:81:4b:ad:91:b1:b9:
c3:b5:88:7d:aa:3d:cb:73:d2:b8:35:fa:7a:79:25:78:cd:ed:
73:e7:2c:65:d0:41:b2:52:de:89:f5:13:da:db:80:1a:2d:80:
ed:c1:63:c2:00:20:ad:f1:25:06:f6:53:10:67:89:57:e0:88:
33:3e:70:37:ea:23:e4:c6:ea:9a:6b:0e:57:57:e9:5e:9c:e0:
93:60:c9:ce:df:0d:d1:10:a6:49:d0:c4:f6:34:7b:97:ba:57:
a6:4c:e1:5a:6d:08:67:c4:82:b2:ff:50:5d:88:72:2d:73:a8:
89:db:e2:22:e6:ed:f0:e5:d6:e1:92:66:be:0f:ff:6e:ec:13:
91:4e:61:dd:24:c9:bf:b6:dd:bb:1e:83:b3:07:3f:90:21:ff:
d3:7e:ff:9f:cd:e1:61:d0:a7:60:a5:74:22:e7:7d:29:53:dd:
d9:b4:db:8a:70:4e:87:34:a4:99:09:66:cb:b8:b4:5c:7a:90:
33:ce:71:ea:84:85:d2:55:85:50:38:ff:82:8c:1d:ed:7d:11:
91:13:f5:1d:86:66:e8:28:6d:78:01:73:3a:3c:a8:7a:6a:bf:
f6:31:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:09 2024 by rpki-client on console-ams.rpki-client.org