Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/J5YU4hOMRcFicXv3G1_cY5P4tZg.roa
File: J5YU4hOMRcFicXv3G1_cY5P4tZg.roa (raw, json)
Hash identifier: vMZBzJ5VtN9aT8bkI+efmxa0dFAXotg2d1VLF+TQ3gI=
Subject key identifier: 27:96:14:E2:13:8C:45:C1:62:71:7B:F7:1B:5F:DC:63:93:F8:B5:98
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 0403CB74
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/J5YU4hOMRcFicXv3G1_cY5P4tZg.roa
Signing time: Sat 01 Jan 2022 15:01:15 +0000
ROA not before: Sat 01 Jan 2022 15:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21150
IP address blocks: 155.45.176.0/20 maxlen: 20
155.45.208.0/21 maxlen: 21
155.45.240.0/21 maxlen: 21
155.45.255.0/24 maxlen: 24
155.45.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67357556 (0x403cb74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Jan 1 15:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=279614e2138c45c162717bf71b5fdc6393f8b598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:eb:b9:3e:7f:3d:98:de:d2:6f:c0:b0:9c:
67:46:60:a1:fa:49:4c:ae:f7:32:f8:8f:07:5a:d1:
d2:8d:ad:0c:fc:97:2d:24:2e:ae:84:05:3d:9a:09:
25:1a:27:ec:f8:df:5a:2b:9d:ab:f6:71:ed:7f:c3:
60:76:5f:fa:8c:53:73:48:81:7e:5f:b3:57:da:42:
57:9a:9d:7a:d6:d5:fb:8d:04:8b:63:37:76:99:f6:
df:da:7f:a8:02:6a:85:8a:35:b7:48:be:24:10:7b:
87:a2:19:ee:e4:75:f2:fa:e6:a0:ba:05:19:b8:2f:
af:7c:d9:d1:49:af:50:39:84:a0:ca:f0:c1:20:23:
8e:87:b2:54:49:c8:b0:b1:be:a9:c8:78:7d:2a:e3:
26:03:3d:33:56:86:9f:0b:e5:cb:b0:23:6b:6f:a6:
65:96:0a:71:de:e8:cf:05:6d:55:d9:57:88:82:10:
32:82:91:e5:1a:f2:fe:9a:2e:07:2e:79:54:2b:78:
d8:40:75:fd:0f:bb:02:7e:79:5b:fa:a8:ad:87:19:
fe:a1:17:e2:b3:f1:61:bf:14:09:11:c6:f8:67:4a:
78:ce:c2:2a:db:1f:38:85:b6:ec:0a:ae:71:be:49:
7c:70:03:4a:95:95:3e:49:0b:e3:ef:e6:a8:98:29:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:96:14:E2:13:8C:45:C1:62:71:7B:F7:1B:5F:DC:63:93:F8:B5:98
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/J5YU4hOMRcFicXv3G1_cY5P4tZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.45.160.0/19
155.45.208.0/21
155.45.240.0/21
155.45.255.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d2:35:a5:65:e2:86:53:fc:07:9b:f4:4f:08:6b:56:1a:63:
06:40:b5:1b:06:e3:5d:0e:28:24:8c:75:fd:aa:4b:03:e4:15:
c9:6c:c7:f2:cc:25:9b:9d:f4:91:69:96:e3:cc:ef:1b:93:9c:
7e:f3:53:77:1b:8c:22:fd:06:d1:d9:18:e5:2b:d7:5f:9b:71:
20:16:6a:a0:f8:0f:38:41:e1:e7:bf:dd:0e:5f:e7:40:94:39:
a0:c5:a4:93:c2:f7:48:55:21:03:ab:78:35:d8:8a:7e:e8:35:
48:d9:83:5e:95:b2:0f:00:b4:78:67:69:d4:36:80:50:a7:df:
37:96:89:5f:f2:1f:e7:35:e2:e5:ce:b7:9e:3c:95:d1:35:67:
39:38:53:70:2c:d5:60:ea:c7:d4:35:93:0d:bc:3a:6a:b3:bc:
a5:04:10:fe:4f:3b:ae:27:66:11:99:05:f4:1c:dd:0c:2e:d3:
77:ea:87:24:4e:06:64:1a:2e:75:1b:56:55:3a:ae:4f:f0:eb:
e1:56:4f:69:b9:49:2e:80:9a:c9:3d:9d:f5:f3:af:6e:f2:8a:
16:4d:9c:b7:18:1f:72:ec:84:99:00:2d:52:98:c1:cb:bf:92:
40:a4:c9:b5:ec:8f:5d:d8:6e:bc:31:de:48:29:a6:3f:71:9f:
d0:c9:e2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:49 2023 by rpki-client on console-ams.rpki-client.org