Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/SOJTWB1Ilvqcrj-A1a6jWllpDQY.roa
File: SOJTWB1Ilvqcrj-A1a6jWllpDQY.roa (raw, json)
Hash identifier: POuZsPkLgVNH4uco0K25KZeqJf4MF9nAZn7PAbSJbPg=
Subject key identifier: 48:E2:53:58:1D:48:96:FA:9C:AE:3F:80:D5:AE:A3:5A:59:69:0D:06
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 38FCE24B
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/SOJTWB1Ilvqcrj-A1a6jWllpDQY.roa
Signing time: Thu 26 May 2022 13:27:51 +0000
ROA not before: Thu 26 May 2022 13:27:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211904
IP address blocks: 151.247.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956097099 (0x38fce24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: May 26 13:27:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48e253581d4896fa9cae3f80d5aea35a59690d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:d2:7a:67:b4:40:7d:43:f3:5e:de:bd:f5:
c9:4d:66:d3:f6:ad:c5:d8:a4:48:33:94:0e:24:62:
7a:4f:22:74:d4:d7:2e:91:ca:bb:75:e9:d3:20:e3:
ef:2c:4b:c3:8a:95:5d:16:90:3d:a7:d5:28:63:74:
d0:39:c6:18:f8:b9:ff:6d:a8:92:f0:c2:dc:64:c2:
84:fe:eb:ec:24:08:c5:7d:f4:f9:ae:c3:80:50:37:
87:78:e5:8a:3a:8c:8c:3e:d8:db:50:4f:5d:ea:4c:
29:e0:ca:78:9a:06:9f:09:81:ff:08:ef:19:7c:8a:
0d:cb:bd:6e:45:15:ca:68:90:ef:c0:99:32:3f:d9:
b0:1e:ae:78:26:e5:45:e9:19:b2:66:4e:62:11:dd:
d4:fb:9a:57:b3:29:33:cc:67:67:46:dc:19:54:11:
19:58:a2:47:76:a6:53:af:11:1d:ff:f3:c5:cb:58:
ba:12:69:02:17:52:66:9d:86:4d:e0:8a:55:96:49:
62:00:97:0a:63:2e:33:1d:f2:b0:01:b7:aa:25:13:
fd:55:8e:4a:91:fd:0a:98:50:f4:2c:ea:ad:dd:40:
25:24:dd:07:52:a3:50:6d:a5:90:a0:5f:fb:c3:04:
56:29:b7:22:07:fe:12:b6:e2:68:19:59:fa:19:2f:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E2:53:58:1D:48:96:FA:9C:AE:3F:80:D5:AE:A3:5A:59:69:0D:06
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/SOJTWB1Ilvqcrj-A1a6jWllpDQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d7:8a:6e:ff:8d:a4:1c:61:57:d3:89:28:90:cc:32:8e:24:
c6:b3:9d:95:0f:e9:c8:b5:4f:79:24:98:f5:4d:07:74:6f:0c:
89:3a:b7:67:f0:52:bb:77:f6:c6:7e:83:7b:48:6a:dc:ea:8f:
7e:62:a9:fa:97:a3:05:28:20:88:3f:60:6d:b2:46:49:da:4a:
63:d0:64:a3:01:71:29:12:3f:f8:ee:54:ef:0a:f0:ae:f5:a4:
3b:fa:7b:04:85:c7:39:7f:89:ee:6e:1c:61:6f:7b:b2:2a:c8:
31:e3:24:f5:6e:8e:47:59:93:aa:a1:c0:c5:b6:ad:cc:5a:cd:
9b:5d:b7:66:2c:92:f6:bd:35:16:92:60:6c:fd:e1:ae:98:f5:
d4:6f:06:b5:e4:a5:28:c0:b1:3a:2d:f8:42:b5:92:9b:67:02:
64:82:6d:c8:c0:08:92:3f:33:c4:84:f6:42:84:51:ba:aa:59:
f5:d4:68:0f:2c:d0:81:1d:2c:2f:65:ab:3b:65:de:99:d9:0e:
07:0f:f3:e3:66:f0:56:2a:be:cf:6c:68:08:ad:f0:eb:cb:4d:
8f:9e:8e:80:09:3e:9f:9b:95:db:87:9c:e8:9c:55:4b:1c:ee:
73:05:1c:43:23:0b:55:a0:4a:58:03:c3:62:1c:09:33:0c:3e:
d6:8b:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:52 2023 by rpki-client on console-fra.rpki-client.org