Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/qmx7k9I27k0i8kIvFxHlMxJlBt4.roa
File: qmx7k9I27k0i8kIvFxHlMxJlBt4.roa (raw, json)
Hash identifier: Y+E/4g4o07bqf16ebCDlIEiykin47b+3JThbxUVk19I=
Subject key identifier: AA:6C:7B:93:D2:36:EE:4D:22:F2:42:2F:17:11:E5:33:12:65:06:DE
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 37956427
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/qmx7k9I27k0i8kIvFxHlMxJlBt4.roa
Signing time: Sat 01 Jan 2022 06:01:52 +0000
ROA not before: Sat 01 Jan 2022 06:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206065
IP address blocks: 151.238.232.0/21 maxlen: 21
151.238.232.0/22 maxlen: 22
151.238.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932537383 (0x37956427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 06:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa6c7b93d236ee4d22f2422f1711e533126506de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:88:06:ae:b8:48:d4:67:45:6f:f2:7b:a0:
6c:48:a1:77:bb:b0:0a:0b:36:07:92:77:94:6f:f2:
42:8f:5b:46:4f:20:f3:ff:f8:46:d9:4b:65:a8:9d:
19:7d:d8:06:55:80:71:22:54:d9:8d:2d:c5:6b:0b:
ab:ff:0d:06:81:03:60:70:76:59:be:77:40:43:95:
f2:6a:9e:21:c4:a9:ad:ca:89:1b:e1:e2:0d:19:1c:
1f:5f:6c:d4:73:2b:5b:67:3a:66:c1:de:65:87:f6:
09:6d:58:9a:e0:f2:a6:32:7a:8a:9f:2e:2a:fb:1f:
a7:3e:23:c0:b5:59:9f:85:9c:10:aa:91:33:7f:06:
68:6d:4d:62:2c:ae:3a:d4:da:ab:0e:78:9a:72:ae:
66:40:22:38:06:d3:15:54:4b:05:23:a4:4f:6f:fe:
c2:98:84:b7:2b:63:00:7d:01:64:69:b4:9c:5c:a5:
d9:68:a7:02:4e:12:31:35:25:ad:c7:d8:f6:48:28:
d5:21:68:af:23:c3:5d:27:3a:7d:bf:ad:27:b5:cb:
a5:7b:4a:5b:78:f0:93:f8:79:6f:7c:91:a1:67:48:
86:7e:65:32:2b:de:6f:a5:52:60:2e:04:e3:cc:db:
e9:10:40:bb:2f:aa:f7:4d:9f:50:98:9c:63:ec:67:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6C:7B:93:D2:36:EE:4D:22:F2:42:2F:17:11:E5:33:12:65:06:DE
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/qmx7k9I27k0i8kIvFxHlMxJlBt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.238.232.0/21
Signature Algorithm: sha256WithRSAEncryption
81:97:a5:25:7a:40:9f:b5:17:4f:1a:02:5d:f5:fa:64:75:77:
ff:5a:a1:7d:33:56:0b:a6:7f:3a:36:76:d2:3b:f8:5b:f5:6a:
2d:bf:8f:ff:75:27:59:a0:9c:27:86:a6:c1:f3:f7:cf:2a:3b:
e5:50:5d:8b:e0:a7:8d:e9:ed:ba:87:ec:e7:1e:9e:ca:f8:42:
f8:b6:4f:cd:e0:fb:e8:ae:65:7e:db:5e:e1:2e:d8:05:24:85:
71:78:b4:72:5d:24:dc:9e:9b:a3:03:e3:0d:bd:52:e7:b4:bb:
78:e9:78:d1:06:5e:bc:f0:f5:f3:00:ec:43:0a:e9:3c:7d:3c:
a4:a1:b7:aa:ee:f6:84:a7:d8:52:4e:71:2a:aa:47:b6:ea:f5:
0f:dc:78:81:5f:e5:ee:c1:86:c5:d2:07:c2:bf:40:68:34:e1:
d8:7c:6e:61:cf:e9:a9:a0:81:8d:7f:e3:2e:74:48:07:a4:ce:
4d:8a:a5:c6:23:50:2a:a2:9c:e9:17:fc:09:f9:d9:e4:c7:a9:
f4:1c:19:ae:40:fd:8c:35:52:19:4d:7f:43:6b:e4:68:19:e8:
61:1b:29:0c:16:e0:b5:23:16:ea:d0:50:ac:48:11:d2:d1:84:
3d:ec:0a:6f:e0:f9:8d:28:19:a8:07:5f:ae:a2:06:f0:76:54:
21:9b:bd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:31 2023 by rpki-client on console-ams.rpki-client.org