Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/qMWe9G86WyFQk3CdSzbo7EAmWs8.roa
File: qMWe9G86WyFQk3CdSzbo7EAmWs8.roa (raw, json)
Hash identifier: q2JuuOW4Uh8J2lj8+0/JbQuD0qWsYTsBNB04dFTCPDY=
Subject key identifier: A8:C5:9E:F4:6F:3A:5B:21:50:93:70:9D:4B:36:E8:EC:40:26:5A:CF
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 08FD734D
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/qMWe9G86WyFQk3CdSzbo7EAmWs8.roa
Signing time: Sat 01 Jan 2022 08:59:08 +0000
ROA not before: Sat 01 Jan 2022 08:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203926
IP address blocks: 159.151.128.0/18 maxlen: 18
192.109.143.0/24 maxlen: 24
2a07:8144::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150827853 (0x8fd734d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Jan 1 08:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8c59ef46f3a5b215093709d4b36e8ec40265acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:26:a9:9c:5f:4d:fc:34:22:97:26:71:fa:
49:a6:2a:6b:92:5a:d5:ce:58:66:86:07:74:bf:6e:
36:42:49:df:81:8c:87:57:09:33:f8:dc:94:48:b7:
bd:74:a8:16:c4:bb:21:81:23:e9:a9:59:e7:aa:b7:
7b:0b:50:95:85:6f:bf:4a:af:0f:d4:9f:21:9a:9f:
81:df:82:5b:74:d0:39:60:d8:5b:5f:23:0e:78:5f:
9c:a3:33:2d:fc:72:73:e0:8e:d5:f9:00:04:d3:71:
6e:a3:1c:8a:15:86:74:a7:03:73:27:9f:71:97:2d:
9e:89:c6:3a:17:94:9b:05:8d:a2:e8:dd:96:09:1a:
a8:dd:68:73:8b:ae:3b:c4:49:17:a5:90:38:fe:d6:
00:55:70:61:b9:af:45:b5:24:8c:3a:a3:88:3c:94:
0a:a4:59:f6:77:93:4d:f6:fd:38:a8:48:6b:89:48:
c6:55:aa:27:57:e8:4c:0d:99:4c:e7:b8:e1:bd:8a:
e0:93:93:8f:87:a1:23:ed:fe:3e:37:61:64:74:24:
30:d6:c1:39:fc:b1:30:26:c1:76:0e:0a:6f:90:69:
8b:fe:42:6d:45:2d:eb:6a:71:70:79:d4:9a:9a:87:
0c:5c:99:3e:9c:98:0b:29:40:e8:d3:ca:1d:0d:0c:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C5:9E:F4:6F:3A:5B:21:50:93:70:9D:4B:36:E8:EC:40:26:5A:CF
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/qMWe9G86WyFQk3CdSzbo7EAmWs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.151.128.0/18
192.109.143.0/24
IPv6:
2a07:8144::/36
Signature Algorithm: sha256WithRSAEncryption
09:e4:41:84:c3:d2:a9:c5:01:3d:07:4a:9c:59:00:1b:db:e2:
ed:49:bc:fc:e3:6c:b9:7e:b9:62:10:71:6b:81:48:8f:5f:f9:
79:01:c9:b1:57:ea:1f:04:c7:2e:4f:ea:0c:c7:e2:cb:1a:5b:
24:6b:f0:6d:3c:f3:78:64:01:13:68:35:02:7d:f4:23:4b:70:
e2:01:ea:7c:08:10:c3:b9:54:41:44:be:1a:fa:0d:11:03:24:
87:2d:82:cd:87:52:d1:9a:71:7f:9b:a3:bf:a9:11:fd:63:e0:
32:5d:5d:a8:ee:8c:42:5e:71:ba:3f:f3:03:1f:00:e5:51:07:
b3:65:8e:c1:76:2f:17:d5:9e:4f:b4:d3:cf:0e:0d:4c:99:fc:
52:79:bd:e8:d3:12:a0:68:ae:fb:8f:0e:8a:e2:85:ee:9e:f2:
0d:04:84:00:ac:72:6e:e2:c7:41:78:d0:44:72:a1:57:27:ee:
df:7c:31:10:f1:c7:e0:4d:56:7f:98:d7:30:2a:12:db:50:38:
f1:4c:06:89:40:7c:6a:73:fb:ec:72:42:23:08:bb:ed:80:a7:
fe:98:4a:6d:40:ca:8a:17:b7:cc:38:24:b1:5b:f7:c2:0b:a0:
d1:c6:e3:29:a5:49:a2:3f:09:f4:f4:3b:c9:54:5c:25:30:fc:
ba:02:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-ams.rpki-client.org