Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/7R9P9uPUr2B8_kDEXK4Sh_1bKos.roa
File: 7R9P9uPUr2B8_kDEXK4Sh_1bKos.roa (raw, json)
Hash identifier: dsslSlbLR9ziKdV7ifsikS7CEzQJpSU2rime6P8gf/s=
Subject key identifier: ED:1F:4F:F6:E3:D4:AF:60:7C:FE:40:C4:5C:AE:12:87:FD:5B:2A:8B
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0B6BF5E8
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/7R9P9uPUr2B8_kDEXK4Sh_1bKos.roa
Signing time: Mon 11 Apr 2022 14:19:20 +0000
ROA not before: Mon 11 Apr 2022 14:19:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191624680 (0xb6bf5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Apr 11 14:19:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed1f4ff6e3d4af607cfe40c45cae1287fd5b2a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:f0:5d:09:e8:cf:70:b8:10:11:f3:0c:12:
a1:08:a6:3d:5d:b8:ac:51:ce:da:05:8a:65:21:22:
7f:40:08:25:02:f0:1c:ee:fe:81:72:06:b1:20:dd:
13:e0:27:6f:96:7a:df:70:aa:41:ac:83:7c:50:2a:
ce:4a:b6:4a:5d:45:10:27:06:07:14:74:64:d8:f0:
33:3b:25:c2:e7:84:87:1b:bb:7f:d6:9b:50:b2:b0:
39:e8:6d:6e:21:39:4c:0f:36:02:f8:05:f5:b7:06:
af:e9:35:48:64:3e:eb:5b:a6:1c:ea:f3:53:6d:85:
75:3e:b7:0d:7c:24:a6:21:b9:42:16:13:79:0f:30:
70:35:05:17:76:bc:3c:14:5b:6d:cc:a4:11:83:ef:
2c:07:9c:b4:5e:92:5d:b3:9b:a3:9e:bc:46:1b:f3:
3e:5d:41:62:ab:76:17:73:ac:a4:73:9c:25:8b:e9:
b8:4f:4a:55:da:a2:1f:41:ec:86:b1:3a:5c:a2:27:
ee:6e:6d:31:29:7a:b9:a9:8c:60:fa:3c:5a:8f:ed:
cb:b8:18:3b:9b:4b:97:d6:08:7d:c7:c6:a5:30:6f:
83:03:70:a3:e7:e3:48:01:95:e1:31:e6:37:d6:2f:
df:53:0e:5d:d7:93:d8:05:44:53:62:48:39:5f:58:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1F:4F:F6:E3:D4:AF:60:7C:FE:40:C4:5C:AE:12:87:FD:5B:2A:8B
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/7R9P9uPUr2B8_kDEXK4Sh_1bKos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
49:68:17:91:23:1e:fc:17:15:0c:44:e4:fc:c1:c8:f5:1a:aa:
66:5c:bf:71:5d:e0:5c:4e:36:8f:a1:c3:b1:6c:ac:25:43:fd:
94:f3:2f:42:cc:5e:dd:61:1a:d7:de:56:36:02:18:e9:08:1a:
fa:70:cf:15:de:5b:49:fc:36:9a:70:71:93:b6:2e:97:be:63:
6f:6a:76:a8:c9:80:19:bf:1b:80:0e:fb:60:cc:7d:03:b3:a5:
1a:00:2e:c1:7c:81:b1:50:50:fc:22:de:46:58:b3:44:ac:49:
7f:64:42:f5:65:7d:6c:f4:a1:df:6f:e0:45:74:8d:8d:2d:d7:
9a:82:2a:bd:ce:b2:ae:34:f4:8a:4b:f9:8d:9c:17:a0:97:60:
f8:f1:80:11:5a:cd:07:cb:6b:69:b4:e9:8f:43:2d:ce:fa:1e:
12:40:98:7a:3e:24:31:2c:68:47:e5:20:01:94:0d:43:93:ae:
6f:02:cc:6d:26:b1:70:b3:3e:42:ef:79:c2:c3:ba:3a:86:a2:
d1:be:c8:0d:6a:c4:fe:34:69:62:60:5e:fe:51:1a:c6:c9:bf:
b1:1c:68:ea:4f:f9:b8:bd:af:fc:91:b4:23:3f:35:9b:b1:47:
01:2d:94:97:40:52:2e:26:36:30:7b:42:6c:da:4e:da:d7:ba:
22:d2:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org