Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/1-OOojrpd_YsPpDIfs58Nx5B7mM.roa
File: 1-OOojrpd_YsPpDIfs58Nx5B7mM.roa (raw, json)
Hash identifier: HF+zK2Y3j6hXEMcrCGx6X5a1JEBcvId+syU4TcgXLvI=
Subject key identifier: D7:E3:8E:A2:3A:E9:77:F6:2C:3E:90:C8:7E:CE:7C:37:1E:41:EE:63
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 024A6A73
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/1-OOojrpd_YsPpDIfs58Nx5B7mM.roa
Signing time: Sat 01 Jan 2022 16:02:10 +0000
ROA not before: Sat 01 Jan 2022 16:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205052
IP address blocks: 151.248.94.0/24 maxlen: 24
151.248.92.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38431347 (0x24a6a73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 16:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7e38ea23ae977f62c3e90c87ece7c371e41ee63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:67:f7:ac:96:e0:77:86:3b:ab:88:dd:38:
9e:60:d4:94:9b:2b:27:ba:4d:a3:68:bc:77:bc:94:
ea:14:eb:a9:bc:df:f6:9b:16:66:75:1b:18:c7:70:
d5:6c:6e:92:b3:a6:61:29:9d:71:42:23:b8:a7:ba:
02:ff:02:1f:54:6b:b4:c9:f2:33:21:c5:33:9c:89:
fe:52:a0:28:cf:eb:ee:c0:a3:7c:6f:b3:ec:98:ce:
cb:19:1d:7e:57:41:fe:b0:0d:6f:c2:f8:d8:c0:9a:
2c:86:b9:a8:92:5b:4a:1d:90:7d:3d:da:b4:58:43:
0b:3e:18:1e:6e:7d:2c:d5:2a:2e:5a:1c:d0:e9:16:
47:54:2c:91:00:38:c8:c2:1e:4b:8a:9c:50:4c:d5:
ae:35:d5:65:db:62:f9:3e:e3:e9:86:13:76:05:a7:
ba:55:f2:2e:17:f8:14:9c:46:e0:56:0c:3a:83:89:
a9:cf:75:6b:b8:23:57:88:67:b4:8d:8a:53:92:e7:
2d:b3:e0:31:de:8d:4e:3b:a8:48:13:a9:47:ff:a5:
b9:3e:9d:7b:f8:27:9c:4b:80:e7:96:c5:e2:38:2a:
e6:e4:e6:1a:c6:e6:69:40:b2:41:64:a0:e2:ec:83:
d6:e4:f1:ac:87:52:7c:7d:a5:1c:2f:44:b8:98:36:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:8E:A2:3A:E9:77:F6:2C:3E:90:C8:7E:CE:7C:37:1E:41:EE:63
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/1-OOojrpd_YsPpDIfs58Nx5B7mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.92.0-151.248.94.255
Signature Algorithm: sha256WithRSAEncryption
4b:9b:ab:76:64:83:d1:e0:94:7e:99:6e:73:40:fc:d9:78:42:
6f:14:6d:45:ea:04:87:d8:c1:27:23:b8:28:1d:41:d3:d9:50:
e8:c8:06:38:bd:d6:d2:cc:56:3c:d8:db:bd:2e:8d:18:11:67:
93:5f:71:6e:f2:70:5e:cc:d7:9b:dd:9b:05:7b:90:25:25:8e:
72:b7:b4:23:5c:65:e1:03:ed:96:a2:fc:38:66:dc:b2:8c:15:
f6:f1:aa:b0:77:e5:1b:e8:24:d9:7b:21:e9:86:31:dd:86:80:
f5:fc:db:fe:b5:56:54:37:46:34:92:79:c0:08:fd:81:58:64:
7a:0d:f5:b0:e9:e5:ca:42:77:95:61:10:ca:67:b5:b2:b7:79:
4e:71:2d:bd:f5:c1:71:1c:e5:de:c6:a3:f1:be:f6:9b:57:d1:
5e:f1:3d:ce:4c:c8:9b:2d:ed:06:74:3e:61:34:38:8b:ce:8d:
68:b6:e4:59:32:5b:dd:1a:22:f1:9c:95:83:e3:19:c3:e7:b7:
ac:02:d4:f9:35:45:cb:08:40:57:7f:e6:8a:b0:31:6d:d1:8b:
24:7b:4b:e4:97:05:07:54:c0:5d:bb:75:63:68:d5:f0:72:47:
68:a8:21:ac:e4:d7:3f:ce:da:1e:c3:cc:fb:90:17:b1:4f:ae:
79:b5:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-ams.rpki-client.org