Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/0Si5n2dS6gcDdm-PPGm3eq5b1HA.roa
File: 0Si5n2dS6gcDdm-PPGm3eq5b1HA.roa (raw, json)
Hash identifier: uVBj7yrrt3qE843N6+P2UQV2zKYUyLxDsnnfHZne5Nc=
Subject key identifier: D1:28:B9:9F:67:52:EA:07:03:76:6F:8F:3C:69:B7:7A:AE:5B:D4:70
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01848807347AD69A73D9B0CA482B93D28DEC
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/0Si5n2dS6gcDdm-PPGm3eq5b1HA.roa
Signing time: Thu 17 Nov 2022 23:58:04 +0000
ROA not before: Thu 17 Nov 2022 23:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 192.53.136.0/21 maxlen: 21
155.193.2.0/23 maxlen: 23
192.53.64.0/21 maxlen: 21
155.193.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:88:07:34:7a:d6:9a:73:d9:b0:ca:48:2b:93:d2:8d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Nov 17 23:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d128b99f6752ea0703766f8f3c69b77aae5bd470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c4:50:af:3a:99:3f:93:ed:19:22:5d:0b:b7:
86:04:47:25:f8:9a:df:94:01:28:9e:ad:ea:19:51:
c8:db:11:a9:a0:bb:9a:dd:ea:e6:ef:32:c0:66:fb:
4e:69:b0:47:15:b2:99:03:cc:c2:cb:39:89:9f:6e:
6b:88:22:3c:1d:56:bc:5d:6b:f0:6c:2c:33:17:2e:
b8:42:1c:8d:fa:2a:a4:e2:1a:8e:7a:12:0a:94:53:
e7:4b:76:09:02:a9:9a:d3:c1:68:91:05:c8:88:b7:
d2:dc:4a:e3:f3:2a:79:da:02:86:f3:5f:91:ee:e6:
f2:a5:89:c5:20:e2:27:6e:50:12:b4:e5:a4:4c:e7:
0c:8e:05:65:d3:d9:85:fa:41:ae:91:88:83:65:bb:
94:39:3c:4f:f8:37:65:80:4f:65:28:9e:f2:79:5e:
9b:c9:f9:15:59:c0:55:42:aa:d3:34:54:74:f1:e3:
4e:7e:ff:1d:ba:24:b5:05:0c:8e:94:4d:97:fc:07:
d9:94:02:aa:86:9d:bd:14:87:09:7b:15:d8:5f:fb:
e2:17:87:d5:fa:58:24:3c:32:10:0c:87:14:27:f8:
a7:14:a4:ba:98:6f:7c:ce:ed:b9:2e:64:e6:61:d4:
64:6f:fe:4d:7e:c1:89:f0:26:95:e1:de:92:12:37:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:28:B9:9F:67:52:EA:07:03:76:6F:8F:3C:69:B7:7A:AE:5B:D4:70
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/0Si5n2dS6gcDdm-PPGm3eq5b1HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.2.0/23
155.193.8.0/22
192.53.64.0/21
192.53.136.0/21
Signature Algorithm: sha256WithRSAEncryption
41:a3:48:8e:bc:50:bd:46:0c:8f:81:5f:08:67:30:16:c1:ad:
f1:46:1b:4d:61:e6:a2:a1:06:cc:d0:16:4a:91:4d:49:1a:66:
e2:0c:66:88:49:dd:bf:5c:00:60:d8:96:04:47:a7:20:81:02:
c4:74:c2:10:6a:e3:62:95:25:0b:3a:8b:8a:d2:8a:7c:fb:2f:
d1:4f:2d:8c:96:6d:f3:34:5f:21:58:00:5b:43:2a:2b:d5:3d:
4e:7d:7a:cf:be:f7:40:7c:a6:73:90:64:8f:38:12:d6:d4:53:
4f:1c:7a:cf:8c:8d:8d:33:65:22:47:94:e1:17:a1:ae:93:17:
f8:56:55:3b:ec:ac:73:c8:62:d4:ba:5e:aa:c8:87:3d:59:97:
65:1a:30:ed:73:01:e6:26:d0:50:35:66:98:2c:6f:3b:cb:d0:
9a:56:c3:e3:fe:22:fd:e9:49:23:c0:92:45:74:27:9a:8c:4a:
1f:97:26:96:21:c9:4d:7e:b6:6c:3e:dd:b0:6c:39:1f:9c:56:
b9:ad:9b:19:d7:ed:26:a7:a0:9c:22:44:05:ab:2c:96:3c:35:
d7:7b:7f:38:63:75:29:05:59:68:ba:f9:39:8f:de:50:4d:c4:
7b:9e:81:86:59:1e:4c:e9:1d:4f:55:d7:07:35:26:19:c4:b5:
15:0f:1a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:40 2023 by rpki-client on console-ams.rpki-client.org