Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/sePQ5l5IUQp7Ar2ojQuYC1MO_2E.roa
File: sePQ5l5IUQp7Ar2ojQuYC1MO_2E.roa (raw, json)
Hash identifier: ifYmQuX2qXg6keCB1fiXbReDwXpLV/9FO7drNE8L4AE=
Subject key identifier: B1:E3:D0:E6:5E:48:51:0A:7B:02:BD:A8:8D:0B:98:0B:53:0E:FF:61
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 01EDA0
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/sePQ5l5IUQp7Ar2ojQuYC1MO_2E.roa
Signing time: Tue 26 Apr 2022 13:54:20 +0000
ROA not before: Tue 26 Apr 2022 13:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 157.84.32.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126368 (0x1eda0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Apr 26 13:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1e3d0e65e48510a7b02bda88d0b980b530eff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:a4:5f:95:8f:79:76:31:d8:0a:fb:0e:5a:
7f:ea:49:a0:f1:bc:38:59:fb:a3:8f:ed:65:19:24:
1d:e3:17:36:31:ce:73:df:8c:3a:5f:2f:fe:9e:9f:
bd:2f:ed:ed:90:77:b3:27:62:e1:0a:32:88:d8:77:
27:7a:01:0e:70:79:a4:d3:0f:f7:72:23:78:a7:1b:
f4:af:a2:58:36:07:4b:2a:94:dc:4a:7f:58:2b:46:
78:6b:ea:05:ab:4d:d3:37:aa:ef:e8:15:70:00:42:
88:c9:72:9d:4b:bb:fa:2f:36:ad:42:ad:5d:72:84:
4c:fa:60:25:96:30:d7:f7:c4:f9:8d:f9:69:bc:50:
f9:16:74:bc:92:d1:5d:a0:40:9e:e5:5c:e4:ff:2e:
0f:91:f2:89:c8:39:78:31:20:72:3e:c4:5c:e1:8d:
ce:1f:8e:d9:43:e5:ce:7f:16:dd:95:b5:b4:63:13:
2e:60:7b:b7:1a:f4:e5:bb:19:ec:98:52:45:df:0a:
8d:26:37:28:f2:ed:b7:e7:3b:ed:f4:28:01:0b:16:
1d:bc:f7:a2:aa:ba:87:95:bd:7c:88:18:f6:95:40:
df:73:c8:6b:e1:49:bd:08:31:dd:4b:34:32:1b:23:
ec:13:d6:3f:48:2e:f7:a3:92:6f:ea:8a:d5:6e:67:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E3:D0:E6:5E:48:51:0A:7B:02:BD:A8:8D:0B:98:0B:53:0E:FF:61
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/sePQ5l5IUQp7Ar2ojQuYC1MO_2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.84.32.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:6d:cb:bb:dd:c5:4c:bb:12:f3:0f:e7:db:60:b0:46:32:b3:
a9:60:c7:e2:68:79:04:8b:51:39:49:4b:f7:7e:7c:cc:b8:85:
0f:3c:f7:a1:a1:5e:32:e7:ca:4c:cf:52:f0:5c:59:2d:6b:21:
91:c4:87:0f:5b:e8:fd:88:cc:20:0d:65:04:0b:9b:cd:6e:34:
0d:3f:aa:3d:cb:25:b9:91:d2:bd:46:c6:6e:bf:a7:ed:36:ef:
8c:ce:ae:14:ef:21:bf:4c:a2:5b:5f:73:4e:10:18:86:bd:82:
5a:8b:80:31:6a:53:88:3d:8a:6c:20:39:d6:60:3b:3e:86:44:
f5:70:24:11:54:87:bb:c2:87:ec:23:2e:0f:15:e8:17:7a:f2:
84:84:a9:cf:b6:b3:c8:23:77:dc:66:48:0f:a8:09:04:ce:d2:
2e:32:d4:9f:ac:c2:f5:12:7c:64:ef:1e:5f:40:df:c4:58:aa:
51:07:16:f6:11:17:f3:7c:07:ac:e5:82:a7:08:c5:c8:6b:64:
28:2a:47:db:57:18:a9:fb:c9:7a:76:fd:86:ed:d8:6f:8a:c0:
6c:dc:51:c9:8b:67:4a:99:ad:ce:e3:c7:55:26:44:b5:ab:6c:
a7:b9:f0:04:8c:0c:b3:8b:dd:d0:b0:bd:58:77:60:e1:25:f7:
93:2f:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:14 2024 by rpki-client on console-fra.rpki-client.org