Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/0xZ3CqXqtRN4JgACLhOwXEOcywA.roa
File: 0xZ3CqXqtRN4JgACLhOwXEOcywA.roa (raw, json)
Hash identifier: jhrXjP5Aza7g25gB2u6hDzvMbLYAat/2GSfc4nLqTYs=
Subject key identifier: D3:16:77:0A:A5:EA:B5:13:78:26:00:02:2E:13:B0:5C:43:9C:CB:00
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 158AA4F9
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/0xZ3CqXqtRN4JgACLhOwXEOcywA.roa
Signing time: Wed 29 Jun 2022 03:49:02 +0000
ROA not before: Wed 29 Jun 2022 03:49:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 188.253.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361407737 (0x158aa4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 29 03:49:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d316770aa5eab513782600022e13b05c439ccb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:f2:fb:e7:68:de:dc:64:ed:52:14:fd:12:
ac:2d:63:04:0c:a4:30:1e:50:e9:c5:41:2b:69:b7:
98:6d:5e:3a:50:5b:7d:ea:d8:e0:14:43:97:df:b7:
e3:63:71:eb:8d:71:ee:e5:56:7f:92:da:3d:85:82:
34:d3:a0:41:78:f8:58:db:61:e7:b7:b9:e3:27:1d:
8b:eb:9d:2f:92:59:f5:88:9f:4b:9c:18:81:f4:67:
c2:5f:30:ff:1f:41:8e:66:a4:d6:b1:34:a1:34:eb:
27:67:7a:61:1c:26:53:18:6f:3f:21:9e:eb:44:51:
74:b7:0d:97:96:03:b1:8f:f7:79:c0:58:64:8c:26:
1e:e3:c7:44:e1:cc:66:57:76:f9:87:19:e6:d2:46:
01:db:1c:28:e6:69:93:62:c5:10:ea:e6:7d:1c:7d:
4b:55:d4:dc:06:4a:9b:db:a0:ec:12:36:0a:77:d7:
ac:70:0c:ca:2b:67:e1:23:7f:02:bc:5a:94:de:a8:
be:b9:3c:67:65:85:06:a7:09:d8:a2:6d:bb:7b:12:
ab:48:6b:81:ae:d8:ca:78:9c:ae:80:91:10:b0:55:
e3:52:ed:fd:52:95:3a:1e:96:67:4a:ef:93:12:f3:
e8:d4:4e:b2:e2:cd:74:1b:7c:3f:cd:1a:d1:8d:7a:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:16:77:0A:A5:EA:B5:13:78:26:00:02:2E:13:B0:5C:43:9C:CB:00
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/0xZ3CqXqtRN4JgACLhOwXEOcywA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a3:7a:b8:b6:ce:b2:6b:d1:53:d1:a0:28:05:0a:0f:a9:39:
a1:aa:06:d0:d6:85:2c:06:37:9b:f9:cc:08:2d:ae:f4:ea:57:
31:8e:50:b1:46:6c:97:69:53:c8:79:e5:d1:1c:cd:99:27:93:
64:4f:a4:f2:29:4c:47:3e:c2:02:3f:3b:4a:7a:72:23:b7:68:
21:68:c6:a0:7e:7b:c0:31:9a:26:08:ad:2a:b0:13:4c:46:53:
ac:b2:dd:b2:ef:5d:c6:c8:99:ed:21:74:7c:d7:c4:08:d7:58:
50:90:83:2e:83:1f:d1:f7:14:34:23:b9:77:d4:63:be:08:a0:
67:2a:48:5b:d5:33:b2:de:a8:55:2a:77:ab:2a:e7:d9:23:16:
d2:8f:84:a6:fa:82:e2:a8:4b:26:ef:73:c9:a0:53:7a:b5:be:
fd:0d:cd:53:1e:40:cf:38:7e:df:58:04:c0:0a:fd:49:ee:3f:
28:09:6d:ae:d3:ce:00:2c:c8:7d:94:86:0e:ca:86:1d:9a:f2:
c5:91:3f:88:be:be:d9:7f:a1:44:e4:43:72:bf:cc:d0:7c:2e:
df:a8:f7:1c:1a:32:43:3a:52:f6:d0:98:b5:4e:27:e2:2f:58:
b0:76:6b:07:bc:6a:5f:3a:24:19:8b:ef:73:4c:8b:88:69:67:
11:b5:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org