Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/xthuHw036X3LaMpJFXgSZT-7Zns.roa
File: xthuHw036X3LaMpJFXgSZT-7Zns.roa (raw, json)
Hash identifier: YvTL3Z0SalsyTQeI2TcW0fnLGoOY2V7apm91Mooiy4A=
Subject key identifier: C6:D8:6E:1F:0D:37:E9:7D:CB:68:CA:49:15:78:12:65:3F:BB:66:7B
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 09556CD3
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/xthuHw036X3LaMpJFXgSZT-7Zns.roa
Signing time: Sat 01 Jan 2022 05:53:59 +0000
ROA not before: Sat 01 Jan 2022 05:53:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209497
IP address blocks: 149.3.172.0/24 maxlen: 24
149.3.174.0/24 maxlen: 24
149.3.175.0/24 maxlen: 24
149.3.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156593363 (0x9556cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Jan 1 05:53:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6d86e1f0d37e97dcb68ca49157812653fbb667b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:4f:6a:21:ba:69:57:49:e0:62:77:80:88:
db:fb:02:3d:0a:be:86:83:a5:d6:38:a9:bd:3a:be:
a2:01:51:88:18:bf:45:19:2d:5b:74:96:09:86:68:
6b:70:f5:a8:66:1d:4c:50:5a:71:fa:12:cd:6d:58:
07:11:96:de:c2:5b:13:3f:0e:98:3d:b9:d1:4b:34:
cc:57:82:77:d9:90:66:10:da:26:89:cd:fe:4e:2b:
30:f9:fd:76:d7:d4:95:61:8a:df:0d:10:77:33:fb:
a4:49:4f:8a:d1:dd:e3:72:8e:9a:91:c1:17:e8:21:
ff:13:7b:aa:39:6e:06:88:66:80:bb:fd:ee:26:96:
a5:c4:57:34:18:74:9f:e1:11:30:9c:ad:a0:d4:9b:
fa:af:01:ca:51:55:bf:d1:13:6c:f5:f7:1a:40:67:
a5:2a:1c:71:8e:ef:89:70:92:6e:cb:2c:75:d5:a0:
b3:7f:9a:5a:00:31:b6:2a:46:d2:ae:5b:8e:12:30:
08:6c:e5:46:c4:98:38:ad:70:4f:bb:f9:5f:66:d6:
3e:03:0b:92:a7:51:f6:14:c7:53:61:b5:89:d9:ca:
cb:9a:67:c0:0b:c2:9b:2d:40:b9:e2:93:a0:1b:8f:
44:2e:b5:44:64:15:ec:a2:72:87:5b:05:76:17:23:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:6E:1F:0D:37:E9:7D:CB:68:CA:49:15:78:12:65:3F:BB:66:7B
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/xthuHw036X3LaMpJFXgSZT-7Zns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.172.0/22
Signature Algorithm: sha256WithRSAEncryption
41:a9:a9:48:a8:de:b0:dd:fb:6b:6e:78:86:70:68:c0:f0:80:
7b:18:b0:d8:23:1e:21:29:67:33:40:20:5e:7b:14:88:f5:71:
99:3d:9e:43:0e:89:5b:b2:42:25:2b:af:45:76:c4:47:29:d9:
5e:bc:fe:e0:68:75:10:a2:a2:47:28:38:d4:a7:a8:c3:ba:b7:
5a:1f:74:ab:97:fe:18:18:ff:54:33:df:e8:05:72:aa:35:95:
37:00:e1:c5:f0:4a:e5:19:12:90:44:1c:60:e5:de:67:aa:e1:
0c:98:e4:6a:fa:9e:d8:07:36:1d:80:0e:41:42:cc:c7:bd:6d:
e8:bd:c3:be:79:e2:81:a3:bb:33:71:df:44:e1:88:30:09:06:
ff:db:25:0d:be:38:1d:35:a5:7b:89:b6:5b:cf:13:43:52:b8:
06:2f:6f:f7:bb:5e:17:7e:c1:75:02:f9:14:ac:48:88:26:a3:
c7:8a:8a:1c:4c:11:7e:1c:f7:8c:13:c4:26:1f:8b:10:a5:7c:
35:48:46:25:3f:37:d8:e1:38:f1:13:e3:c5:4f:38:b0:cd:47:
ec:eb:c3:5d:1a:30:0d:22:ff:36:4a:5e:dd:b5:f1:c0:8d:ee:
e4:68:46:02:a6:72:0e:05:43:90:cb:b4:e4:4e:ce:90:15:0d:
df:f6:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:04 2024 by rpki-client on console-ams.rpki-client.org