Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/mfnB7KIbe9ZE3My8HoQKDAc6ar4.roa
File: mfnB7KIbe9ZE3My8HoQKDAc6ar4.roa (raw, json)
Hash identifier: SypRuUEaXc719ZwhYJoesVHqZyek1EBDx2wFKWrRIYc=
Subject key identifier: 99:F9:C1:EC:A2:1B:7B:D6:44:DC:CC:BC:1E:84:0A:0C:07:3A:6A:BE
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 4069CEED
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/mfnB7KIbe9ZE3My8HoQKDAc6ar4.roa
Signing time: Sat 01 Jan 2022 10:53:32 +0000
ROA not before: Sat 01 Jan 2022 10:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 155.231.110.0/24 maxlen: 24
155.231.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080676077 (0x4069ceed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Jan 1 10:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99f9c1eca21b7bd644dcccbc1e840a0c073a6abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:20:48:80:ec:4d:64:c4:4c:b6:2f:80:40:
ec:19:bd:d9:a2:42:2e:5b:34:65:fe:60:26:85:10:
97:6b:18:c4:70:c2:ef:52:ae:7f:bb:63:6e:95:93:
cf:f8:7c:db:ea:48:60:f5:b0:aa:13:ea:43:b3:cf:
d8:8a:28:c3:7b:be:37:a0:f9:60:b0:a8:f2:a0:5c:
fa:d3:fb:bf:da:05:5d:ab:9a:f0:d0:74:7a:a6:23:
61:f0:ad:a7:5e:24:72:90:e3:4a:be:5a:f4:de:be:
82:a5:09:d1:26:20:ea:4a:5a:d1:29:f0:a3:76:6c:
a8:01:dd:84:a3:f7:c6:07:b9:f2:da:be:e1:dc:03:
e9:e6:ab:c3:49:40:4d:9e:38:a2:23:eb:fc:ae:ef:
3c:0e:5a:96:e3:6c:c6:e0:ce:97:0d:1b:a8:4c:54:
7c:90:a5:5f:9e:ed:74:be:8f:e6:06:07:7c:ee:a9:
27:e2:3d:f7:ad:0e:23:d9:cd:36:a9:e1:11:d5:4a:
b5:7b:8e:17:1e:42:9b:5e:d9:40:92:d5:38:1f:ac:
91:4b:c0:1d:83:b4:69:09:b4:fe:d0:b3:2d:50:49:
20:22:e0:59:10:72:13:ec:6c:c9:37:39:d6:3b:38:
76:09:47:0f:82:e9:b4:b5:68:1f:62:89:88:dc:0d:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:C1:EC:A2:1B:7B:D6:44:DC:CC:BC:1E:84:0A:0C:07:3A:6A:BE
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/mfnB7KIbe9ZE3My8HoQKDAc6ar4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.231.110.0/23
Signature Algorithm: sha256WithRSAEncryption
76:e2:96:86:be:5d:2a:98:22:b3:b4:16:1f:96:7e:6d:9d:98:
18:3d:8f:8f:e9:a4:6b:44:5c:33:9a:11:3b:d1:c2:c0:bc:da:
6f:e1:7e:8c:d0:da:70:95:f6:24:e0:ec:54:4c:05:4a:06:44:
c5:88:70:64:25:45:48:64:67:0e:6c:9e:05:2c:e6:8c:5e:ba:
56:67:70:65:c2:76:78:cc:68:65:b6:bb:e6:83:4c:40:f4:cc:
e2:8b:59:20:29:30:06:cd:5a:df:cd:9d:52:0b:4d:7e:0f:c5:
92:d7:e7:02:cf:02:50:1d:cf:02:b4:eb:6f:a7:0f:ac:c6:76:
a0:db:c2:ee:2f:84:53:96:ec:c9:01:f1:f3:24:63:cb:0e:49:
3a:90:49:bd:58:8f:0d:db:09:ce:44:ed:be:e1:c7:f0:66:78:
ad:c5:9e:54:4b:79:0b:f3:df:f4:5a:b9:2d:f1:bc:2d:ba:7b:
b7:1d:2d:57:52:a7:e0:6a:01:6b:82:26:a7:86:74:e0:f3:a0:
b6:51:65:15:31:2b:05:36:14:8d:5e:69:a3:49:9a:f5:14:36:
61:aa:bb:e8:4f:1a:89:0c:e4:8a:c1:df:23:71:9e:37:68:bc:
03:8a:14:18:f5:c9:13:4e:da:49:6b:cb:8e:26:d2:11:22:21:
76:e9:37:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:35 2024 by rpki-client on console-ams.rpki-client.org