Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/m7LqssoFbxomEFE4Kpm962Zpk4Y.roa
File: m7LqssoFbxomEFE4Kpm962Zpk4Y.roa (raw, json)
Hash identifier: Sxwznx1zqFF9RlurIkBx81ntBWH+nAa0wa5HtW/65UE=
Subject key identifier: 9B:B2:EA:B2:CA:05:6F:1A:26:10:51:38:2A:99:BD:EB:66:69:93:86
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 0184D34732181FB7142E6E09199B7D117BEF
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/m7LqssoFbxomEFE4Kpm962Zpk4Y.roa
Signing time: Fri 02 Dec 2022 14:39:29 +0000
ROA not before: Fri 02 Dec 2022 14:39:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22562
IP address blocks: 159.101.240.0/22 maxlen: 22
159.101.128.0/21 maxlen: 21
159.101.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:47:32:18:1f:b7:14:2e:6e:09:19:9b:7d:11:7b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Dec 2 14:39:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bb2eab2ca056f1a261051382a99bdeb66699386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:04:55:9d:e7:ff:bf:94:69:d5:5a:00:2e:
0e:a8:1c:78:ea:8b:54:6f:aa:08:ee:48:b6:58:a3:
ee:9f:fa:01:63:e6:73:4e:a7:05:ff:f7:92:fa:6a:
f1:2b:37:bc:7d:61:de:cc:31:d0:18:2e:52:8e:a5:
7a:bd:9a:d6:d6:82:dc:c1:07:3e:2c:be:66:8e:e9:
57:d9:24:1c:73:24:eb:36:b0:72:1c:56:54:95:5b:
20:ab:1e:90:06:f6:c8:dd:91:c5:5f:a9:18:12:13:
7a:39:56:c5:db:3f:54:e2:63:a0:77:6b:c3:0b:25:
07:f1:65:f7:0b:4b:a6:e3:37:de:84:14:7a:db:cb:
3a:6a:c5:9d:9a:ad:17:d6:44:62:70:8c:0c:f5:30:
cb:00:71:3f:7f:52:7d:6c:f8:ed:9e:65:3c:63:94:
91:bd:ad:cb:18:e2:e4:00:18:c2:68:bd:39:d8:bb:
90:31:c9:8e:16:f6:bf:9d:ed:5c:ce:4c:cd:74:87:
a5:da:3d:d1:3e:a8:6a:52:d2:91:f1:de:c1:ca:eb:
10:d0:e0:97:29:83:2e:58:ae:a0:16:e4:9e:49:12:
58:a3:b9:55:7d:ec:e5:f4:a6:fe:09:25:a8:e0:4f:
fc:cd:44:39:ae:2b:5d:ae:84:e6:bc:10:fc:e3:39:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B2:EA:B2:CA:05:6F:1A:26:10:51:38:2A:99:BD:EB:66:69:93:86
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/m7LqssoFbxomEFE4Kpm962Zpk4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.101.128.0/21
159.101.236.0-159.101.243.255
Signature Algorithm: sha256WithRSAEncryption
4f:dc:97:c8:6a:4b:62:98:81:4b:b6:89:68:7a:85:3a:32:36:
74:6e:d6:47:11:fc:f7:73:9e:b3:6e:44:da:e6:a2:c6:eb:ef:
1c:f8:8d:47:29:24:97:51:7a:b1:a0:d8:e6:5a:ea:4e:42:5c:
c4:20:51:91:1e:8b:53:24:b3:9e:41:09:2e:d7:63:57:8f:be:
be:23:1c:ec:63:2c:70:fb:c4:7b:60:77:dc:89:fb:af:2a:c2:
4b:fd:99:8a:77:3d:59:60:8c:52:01:49:e7:e3:cb:31:ea:1b:
b3:8e:54:95:13:96:64:81:9e:cf:28:a9:28:c8:1b:c5:6f:35:
9f:2b:8b:19:70:41:94:d0:30:23:a1:71:4a:ba:de:d4:78:82:
ab:98:c3:e5:b9:22:e8:5e:8a:ff:a5:1d:62:95:a6:33:9c:43:
16:eb:b4:74:4f:26:5e:35:99:51:67:c9:a2:a4:70:69:85:c7:
94:af:31:28:d4:6e:d7:b8:c2:31:7d:81:ed:9d:c9:5c:cd:28:
b7:3a:54:69:dc:a2:d3:74:46:86:7d:e3:6e:fa:2d:b7:17:18:
0a:f0:95:8e:2f:89:a6:21:67:a8:80:0a:e1:d9:f0:76:88:3a:
b2:07:78:db:4e:44:8d:00:d9:c2:0d:4b:9a:86:79:2a:70:56:
9e:ed:18:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-fra.rpki-client.org