Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/LibfN1Na4b5zDZCBswHyPssNRtM.roa
File: LibfN1Na4b5zDZCBswHyPssNRtM.roa (raw, json)
Hash identifier: c1yUPaRWZflF37u5mi+16/o/zxUKwU8FV3ECxBz0VuY=
Subject key identifier: 2E:26:DF:37:53:5A:E1:BE:73:0D:90:81:B3:01:F2:3E:CB:0D:46:D3
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 4068FAE9
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/LibfN1Na4b5zDZCBswHyPssNRtM.roa
Signing time: Sat 01 Jan 2022 10:53:31 +0000
ROA not before: Sat 01 Jan 2022 10:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 155.231.110.0/24 maxlen: 24
155.231.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080621801 (0x4068fae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Jan 1 10:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e26df37535ae1be730d9081b301f23ecb0d46d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:10:56:15:32:5a:c2:8d:8f:64:42:fd:7b:
d3:0a:dd:3b:90:2b:6d:15:11:7d:b6:ee:86:a2:89:
d0:8e:0d:41:3f:61:27:39:43:bf:62:9f:79:c2:80:
f1:dd:cd:61:68:5d:53:03:38:17:f7:1b:4a:10:47:
73:4b:d0:86:e3:a2:84:b9:be:b2:57:7c:4f:af:d5:
ba:60:78:55:4d:39:f6:cd:fd:f1:9d:66:68:90:29:
5a:24:52:64:57:31:eb:d5:0b:c9:7a:33:94:7b:9f:
75:86:2d:6c:af:f0:a4:65:12:32:4b:37:45:9a:ae:
cf:84:af:f4:a1:a3:97:11:3d:4a:23:ea:96:98:6e:
0c:36:09:07:9d:0a:de:46:f0:38:0f:db:71:a6:e8:
5e:11:4b:07:74:09:4e:45:35:d3:65:6b:d1:74:7d:
9a:50:a3:07:21:95:1a:bf:1b:7d:c2:ec:32:6d:a4:
ce:01:1c:2f:51:88:e8:28:83:09:c8:c9:94:41:2c:
d7:d6:5b:a0:60:cf:35:f6:51:89:23:7b:fe:50:3b:
9c:f4:66:0c:e8:da:f7:7c:b8:ff:eb:f3:eb:a0:b5:
b9:c2:45:7d:0c:ce:27:b9:9f:bd:60:c1:a0:40:80:
d8:ac:22:21:da:a9:5a:34:46:c9:d5:ba:be:df:40:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:26:DF:37:53:5A:E1:BE:73:0D:90:81:B3:01:F2:3E:CB:0D:46:D3
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/LibfN1Na4b5zDZCBswHyPssNRtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.231.110.0/23
Signature Algorithm: sha256WithRSAEncryption
32:c8:41:26:23:55:14:ec:7c:7e:a4:99:6d:fe:ba:32:be:b8:
00:d9:58:11:ab:40:8c:24:e0:37:ed:bb:8e:d6:e8:15:90:c5:
cc:16:32:11:09:2b:84:ff:27:b8:68:c7:2f:3a:a7:3a:15:99:
5b:20:d8:48:d9:fb:bc:81:ac:41:7f:f1:36:4c:3c:9c:c1:fc:
09:79:5c:45:2e:85:27:d0:e1:2b:e9:2d:1e:45:6a:e8:0a:5c:
a6:0a:c8:f4:3c:27:01:11:91:3d:91:4d:d2:7a:cf:36:12:bc:
72:1f:e3:df:f3:32:95:4d:21:0c:b1:87:7c:33:9e:2c:2e:a7:
6c:91:68:ba:1a:ef:1b:f6:25:d7:a2:d3:19:1c:7f:e7:b1:53:
8a:af:d9:40:9c:24:9e:b0:fd:e2:c6:60:53:34:ff:e0:70:39:
f7:15:bd:f1:66:df:0a:9c:8e:6e:f6:83:f1:d4:c8:78:f7:7f:
be:4e:8e:28:b6:df:0c:3e:08:26:2e:dd:2b:11:af:80:38:db:
9d:48:83:8d:df:3b:8e:e3:52:41:a3:c9:52:1f:49:85:a1:f5:
0b:40:08:a6:5c:bd:f6:bd:6f:d0:cd:82:39:8d:17:f8:ab:f1:
2f:92:8b:8c:4e:77:57:60:11:ba:d4:79:be:d6:17:b8:81:3d:
ab:cf:ec:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:35 2024 by rpki-client on console-ams.rpki-client.org