Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/Cm7F2QvmqJEvWvlSKbMnCsjdLGQ.roa
File: Cm7F2QvmqJEvWvlSKbMnCsjdLGQ.roa (raw, json)
Hash identifier: X9MCHLaOqwlX/zcQ7xdGJ+ik1bFl5O1WJeOGtoCMqiY=
Subject key identifier: 0A:6E:C5:D9:0B:E6:A8:91:2F:5A:F9:52:29:B3:27:0A:C8:DD:2C:64
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 0237F65F
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/Cm7F2QvmqJEvWvlSKbMnCsjdLGQ.roa
Signing time: Sat 01 Jan 2022 12:04:32 +0000
ROA not before: Sat 01 Jan 2022 12:04:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 149.3.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37221983 (0x237f65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Jan 1 12:04:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a6ec5d90be6a8912f5af95229b3270ac8dd2c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:57:56:24:aa:3a:64:de:a3:0c:f1:1c:82:
0b:4b:de:58:07:5b:90:ac:10:b0:df:24:e2:2b:70:
9b:17:84:d4:ea:1c:af:b4:d0:1b:ff:c4:33:95:90:
7e:0e:52:cc:e5:9a:79:70:01:95:6a:3b:b1:b3:f9:
0a:d0:f5:5b:4b:24:c8:ab:ca:0f:d5:b3:21:be:a1:
ff:f0:dd:5a:de:f3:38:39:8f:2b:63:10:d3:36:0d:
6b:ea:d6:8a:20:67:fe:72:af:2d:74:8b:86:f4:cc:
66:75:29:98:f7:0d:a7:b5:12:a5:97:6e:be:9b:eb:
40:47:af:fa:6f:1e:d0:63:5e:d7:0f:3c:44:a3:05:
ea:22:76:3b:d8:a8:1e:9c:e7:6c:4b:5e:b3:5a:eb:
21:04:ca:47:1d:99:fa:30:d7:5e:81:16:f0:58:62:
5b:07:b9:7b:6f:45:b3:88:8c:fe:e1:ba:dc:bb:e2:
fd:50:6f:82:d4:27:1c:d1:c9:26:87:5c:b7:5f:75:
ce:d7:c0:84:cc:6e:3e:d2:f2:5a:cb:ba:ce:8b:a7:
7e:bf:52:82:9d:04:81:d8:c0:12:89:85:4d:31:8b:
29:95:10:90:ab:c6:3b:7d:87:c5:ce:d7:7d:9d:2b:
5c:bc:96:1e:b5:b8:2a:2b:db:67:4e:4b:e1:73:a2:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6E:C5:D9:0B:E6:A8:91:2F:5A:F9:52:29:B3:27:0A:C8:DD:2C:64
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/Cm7F2QvmqJEvWvlSKbMnCsjdLGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:0a:65:32:ef:49:5c:3c:43:5e:1f:72:28:cd:42:57:79:a4:
ad:8d:7b:b8:72:70:37:8c:ed:85:c4:23:49:8c:ab:01:ec:84:
b3:f6:cc:3f:0a:27:9b:30:1a:36:91:aa:99:9a:fb:e8:36:46:
fc:ba:94:0a:31:66:05:82:3a:30:1f:2c:52:95:10:d7:cc:a7:
5a:1f:0e:83:ef:88:b6:e4:d5:08:89:ad:11:b8:42:02:f7:00:
53:e2:af:cf:8a:d9:32:57:e5:fd:ae:33:4b:5a:d0:58:ae:82:
e2:09:a0:3a:1d:5b:00:90:02:98:dc:3e:db:0d:49:19:a3:c7:
cd:79:22:65:a8:33:9f:b7:2b:68:cc:6b:83:51:cd:8f:8d:bb:
fe:9a:8c:3a:88:d9:36:40:d9:45:1c:ee:1d:24:96:83:e8:f5:
c1:d1:5f:64:a5:1a:8c:c4:24:d8:c2:c1:11:5b:ac:ce:0f:14:
a6:78:14:8f:1f:90:5d:74:4a:99:63:69:8b:e1:41:5a:19:47:
15:d1:da:49:cc:b2:69:2e:8b:13:dd:0d:c7:98:bf:b1:cb:c6:
64:f1:f4:3b:2b:86:b9:6c:bb:0c:73:24:26:af:a1:dc:12:21:
f8:ee:e5:d0:3c:45:25:9d:fd:38:fc:c2:9e:ac:62:3b:cf:9a:
84:88:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:46 2024 by rpki-client on console-fra.rpki-client.org