Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/wMejASITf5egIse_AXiwjG8ybLc.roa
File: wMejASITf5egIse_AXiwjG8ybLc.roa (raw, json)
Hash identifier: pXxUZVw4quxqZRMorVTQbG/6N2hmgNPyQFfydB52ZAA=
Subject key identifier: C0:C7:A3:01:22:13:7F:97:A0:22:C7:BF:01:78:B0:8C:6F:32:6C:B7
Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial: 0268666C
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/wMejASITf5egIse_AXiwjG8ybLc.roa
Signing time: Sat 01 Jan 2022 07:02:19 +0000
ROA not before: Sat 01 Jan 2022 07:02:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13287
IP address blocks: 155.133.195.0/24 maxlen: 24
153.92.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40396396 (0x268666c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Validity
Not Before: Jan 1 07:02:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0c7a30122137f97a022c7bf0178b08c6f326cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:12:e8:01:09:83:f2:e1:96:23:e2:28:c5:
1d:65:36:b2:c2:f2:d1:b5:47:b6:66:2e:88:9d:01:
93:28:33:93:36:37:71:07:af:c9:04:87:cb:3f:99:
32:08:b6:03:45:0e:fc:18:e9:dd:a6:2f:b1:92:3e:
50:24:93:b5:50:2d:2f:70:06:28:0d:87:51:3e:47:
88:43:fd:fd:18:65:4f:5c:ab:6a:cb:1d:93:e6:2a:
eb:d4:53:4c:d3:95:a1:c3:95:27:7d:7d:fb:32:ba:
44:76:41:98:d8:5a:18:72:1c:60:4c:c8:46:ae:55:
ec:89:10:65:23:54:81:87:5d:02:e0:be:f6:3d:87:
3b:1d:18:b6:c9:d7:b8:13:76:9e:c3:cb:2d:a7:68:
70:f5:c4:10:d7:2c:c2:c5:22:46:2f:92:9b:92:d7:
9f:5c:bc:21:a8:29:bd:be:07:cb:0c:29:85:3a:a5:
bc:90:c6:c7:d2:1a:da:80:33:84:85:ec:cf:1d:2b:
4a:17:b8:a2:55:76:ca:b7:b8:aa:b9:ae:cf:7b:93:
06:f1:4c:6d:2e:4c:18:d3:10:2c:0e:f0:be:24:3f:
78:cd:be:08:56:27:c9:0f:93:da:45:1c:f8:54:97:
71:c5:42:ae:e4:61:a2:fd:bf:b1:54:e8:58:25:67:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C7:A3:01:22:13:7F:97:A0:22:C7:BF:01:78:B0:8C:6F:32:6C:B7
X509v3 Authority Key Identifier:
keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/wMejASITf5egIse_AXiwjG8ybLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.42.0/24
155.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ee:6f:dd:15:59:65:24:1c:85:9f:c0:b0:8a:0d:78:0f:4c:
ae:7e:60:cb:c5:2b:e0:37:4a:22:c3:0b:b4:6a:16:bb:b8:11:
79:be:2f:f4:42:0a:88:84:38:dd:c2:52:35:69:32:8b:4c:84:
9c:ed:76:eb:30:77:eb:12:82:28:80:b3:ba:32:75:cc:03:6a:
77:82:47:08:65:a2:79:5b:59:36:4e:06:50:40:b6:9c:dc:1b:
19:29:96:20:bb:bc:c2:49:7b:cb:41:27:15:cd:9c:45:e5:c3:
00:66:a2:b3:0c:75:44:f5:c8:f6:18:e2:30:65:2b:9c:7e:d1:
63:5e:fd:32:ff:b9:ce:83:50:b4:96:f0:fa:2c:d0:52:bb:92:
ce:b5:cc:65:b9:c9:4a:12:fd:69:90:3e:ee:35:d0:85:26:11:
0e:2f:57:52:f8:bc:02:86:6e:5f:5a:b2:bd:5a:fa:ed:68:f3:
51:ec:b2:45:c1:eb:65:92:5d:ed:7b:de:33:69:51:25:e8:27:
fc:a6:ed:2f:f0:3c:eb:d6:f2:97:62:f8:23:2c:a7:ff:69:1a:
28:01:59:03:8c:50:84:b7:bc:c7:dc:c0:e2:8c:c5:ef:be:3c:
1e:47:be:55:2b:78:a3:82:ef:f0:7c:7f:3e:80:24:d3:5f:35:
f2:7a:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-fra.rpki-client.org