Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/iYxWbDtIwnwIPIMvmzlZqEkQ9rY.roa
File: iYxWbDtIwnwIPIMvmzlZqEkQ9rY.roa (raw, json)
Hash identifier: Oddl257/qT4hinjVuh2rZEAmx3j+DgRpEIwBwD6hh3I=
Subject key identifier: 89:8C:56:6C:3B:48:C2:7C:08:3C:83:2F:9B:39:59:A8:49:10:F6:B6
Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial: 0554D584
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/iYxWbDtIwnwIPIMvmzlZqEkQ9rY.roa
Signing time: Sat 01 Jan 2022 09:02:35 +0000
ROA not before: Sat 01 Jan 2022 09:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8609
IP address blocks: 158.162.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89445764 (0x554d584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Validity
Not Before: Jan 1 09:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=898c566c3b48c27c083c832f9b3959a84910f6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5d:d1:a2:dd:e2:3c:24:21:ce:a3:e7:59:95:
5b:8b:37:74:3d:5c:59:36:95:07:77:61:a1:29:8e:
e0:ec:52:3c:6e:7e:d8:c2:78:c9:40:ce:f0:cd:5a:
2c:83:53:29:36:11:b8:c0:52:f2:e0:96:e4:b9:f5:
af:32:7f:f6:40:05:63:54:3e:8a:8e:6d:08:f9:3c:
eb:12:81:17:2b:77:29:ae:63:18:a2:71:3e:29:de:
2c:6f:04:f6:93:e4:d4:1a:5b:9d:55:01:0b:b9:a1:
a5:8e:01:e7:bd:65:34:cd:a0:b9:d7:78:a9:0f:e4:
93:b0:df:f1:f7:fd:3d:d9:76:35:c6:75:71:45:06:
8b:0f:7d:a6:07:db:33:1a:01:47:d5:ad:61:e6:a1:
e2:a9:0e:f9:a9:8c:d7:50:bb:3f:c1:bf:32:01:5c:
5c:85:3b:ca:c6:fc:f8:a1:df:df:2e:41:2b:73:55:
81:0c:a8:c0:2a:81:14:8e:0e:ae:46:76:6e:64:45:
7b:12:06:68:1c:82:f1:fb:14:53:54:f6:db:70:e7:
08:de:6e:b1:fb:7d:d6:db:c7:76:81:99:a8:78:8f:
8b:90:4c:7c:83:b3:24:c1:46:89:03:28:b8:9a:a9:
1b:6c:51:bd:4d:64:88:73:ae:65:bd:27:b9:0f:8f:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8C:56:6C:3B:48:C2:7C:08:3C:83:2F:9B:39:59:A8:49:10:F6:B6
X509v3 Authority Key Identifier:
keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/iYxWbDtIwnwIPIMvmzlZqEkQ9rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.162.124.0/22
Signature Algorithm: sha256WithRSAEncryption
52:17:cb:f4:02:d3:01:85:7f:32:e2:a8:1a:66:5e:6c:bb:22:
48:69:33:1b:d6:73:64:59:ab:29:15:29:44:92:3a:d0:e5:f1:
bc:3b:92:b4:9e:be:ef:60:07:4f:34:0a:01:93:c0:1b:be:ec:
92:d4:83:09:75:a4:e7:6a:ca:fd:38:c5:4b:98:90:37:87:d1:
28:59:82:ab:f7:5d:76:ce:32:e7:5e:fb:bc:41:bf:ab:42:9a:
93:eb:ad:6b:46:0a:0e:73:3f:6d:19:38:0d:3f:01:47:bc:3e:
0e:53:53:b7:fd:9a:63:29:e9:53:af:7e:3c:f9:ce:4e:48:ec:
41:a1:1f:0d:06:c7:51:f1:b8:0c:af:e3:83:84:e8:8f:28:60:
c5:e1:af:53:3a:71:53:fa:fa:70:f2:2b:bd:34:36:b8:6b:c4:
4b:f2:fc:a3:3c:99:20:40:66:b8:ea:b5:75:a2:88:b7:57:22:
ef:2d:16:b3:48:a7:e7:18:bb:22:86:54:b7:48:62:65:46:2a:
54:f8:ea:ca:2c:35:18:cb:af:8e:8e:9d:da:05:f2:d2:33:68:
2f:6d:44:f8:d3:0f:3a:5f:30:33:5b:93:c4:f2:f0:37:0a:9f:
ed:36:e7:55:6e:0f:84:9a:df:d1:de:e0:db:eb:2f:a0:f2:b6:
1a:dc:76:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:50 2024 by rpki-client on console-fra.rpki-client.org