Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/5O2XEf5DE3KmSPZutzNLbMrmnLw.roa
File: 5O2XEf5DE3KmSPZutzNLbMrmnLw.roa (raw, json)
Hash identifier: xM3TnUYLYZ6Zpg3fFgHbgq+UbMyMxTXpdmTDm/w3sBU=
Subject key identifier: E4:ED:97:11:FE:43:13:72:A6:48:F6:6E:B7:33:4B:6C:CA:E6:9C:BC
Certificate issuer: /CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Certificate serial: 0418F7A8
Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/5O2XEf5DE3KmSPZutzNLbMrmnLw.roa
Signing time: Sat 01 Jan 2022 05:55:36 +0000
ROA not before: Sat 01 Jan 2022 05:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213050
IP address blocks: 149.3.168.0/24 maxlen: 24
144.2.168.0/22 maxlen: 24
2a0c:6ac0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68745128 (0x418f7a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Validity
Not Before: Jan 1 05:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4ed9711fe431372a648f66eb7334b6ccae69cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:50:a8:19:1d:e3:1f:9d:12:d3:86:0a:8c:
00:ea:02:76:0d:b2:47:33:75:60:1a:fa:d7:f1:05:
21:88:04:1d:a4:78:cb:1f:57:6c:45:0a:a5:1b:71:
8d:3f:e3:a6:52:a7:e0:fc:86:18:c6:9a:32:13:a8:
a1:8b:de:1f:3b:ca:6f:f1:49:b2:c5:15:25:47:c5:
ff:83:b8:a3:12:c0:b5:72:a1:bb:ae:43:4e:91:f5:
18:73:03:6e:bc:95:51:3b:7c:74:83:32:e1:5d:cd:
94:b0:59:1b:2a:f2:c3:10:42:40:73:3f:d8:93:aa:
d4:e7:88:76:fd:20:cc:08:48:eb:40:42:c3:fd:fc:
a3:a0:4c:da:76:e9:7b:d6:53:ce:11:77:df:8d:22:
11:36:aa:28:ee:d8:34:4f:0d:96:f7:80:52:a1:a1:
36:c9:df:2e:f1:f2:6b:a5:c2:a4:a9:20:d9:28:c6:
3c:38:7d:0d:0c:41:5c:92:c6:89:2e:17:c5:27:44:
39:9c:c7:79:87:03:71:38:ca:8d:84:85:82:2f:f9:
df:94:02:68:13:3c:23:89:d8:e7:5e:44:3d:cd:73:
d5:3b:bd:91:83:c8:79:27:dc:24:0f:10:58:fb:98:
2b:15:d4:aa:7e:35:6b:9e:43:9d:3f:98:b5:d1:aa:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:ED:97:11:FE:43:13:72:A6:48:F6:6E:B7:33:4B:6C:CA:E6:9C:BC
X509v3 Authority Key Identifier:
keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/5O2XEf5DE3KmSPZutzNLbMrmnLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.168.0/22
149.3.168.0/24
IPv6:
2a0c:6ac0::/29
Signature Algorithm: sha256WithRSAEncryption
89:70:e2:72:99:ec:e6:45:4e:e5:c4:2e:9d:45:9f:cd:5a:38:
53:d5:06:9c:05:8f:a2:47:74:52:d9:10:ff:9b:e4:db:35:2b:
c5:e0:2a:11:b5:93:4e:24:09:28:96:d4:9e:60:29:38:5c:87:
34:ac:a5:d1:87:74:1d:8f:cf:90:69:c6:54:47:c9:fa:4f:5d:
76:45:00:42:0a:07:09:17:10:3a:52:ef:49:7c:ae:c5:85:18:
0a:c4:cc:ef:3e:40:ec:00:7f:03:8c:af:24:3b:07:a5:d0:35:
a6:2f:8a:4d:45:29:2e:96:2b:41:72:0c:6d:bb:e4:8a:7a:3c:
b6:1b:9c:fe:4f:10:8d:5c:4e:33:02:34:f9:ed:9a:59:f9:08:
2a:b1:fe:2e:47:6e:96:80:d5:cc:7a:f4:5b:06:dd:0b:58:5c:
82:3d:78:a3:cf:89:56:78:7d:00:3b:a4:7b:9c:24:86:ca:2f:
ba:29:46:6f:da:6d:1b:0c:d7:49:94:23:a4:4a:77:0d:ff:fd:
8d:fe:05:ce:cc:39:c0:04:da:36:28:9b:28:bf:77:af:4c:be:
9a:11:31:c6:fe:49:ba:49:6f:81:ed:c4:0c:71:91:d3:e0:93:
7b:8c:4d:21:4e:cc:bf:7d:70:b9:8e:f9:38:5a:73:4b:ef:d7:
af:15:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:07 2023 by rpki-client on console-fra.rpki-client.org