Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/btvYpEIGSri3ZTbI3JXq536h_JE.roa
File: btvYpEIGSri3ZTbI3JXq536h_JE.roa (raw, json)
Hash identifier: hfXf1v3SXlB1C9MGeUdM/mkRH4jGkMHi294a1Tin5l4=
Subject key identifier: 6E:DB:D8:A4:42:06:4A:B8:B7:65:36:C8:DC:95:EA:E7:7E:A1:FC:91
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 3A0125E6
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/btvYpEIGSri3ZTbI3JXq536h_JE.roa
Signing time: Sat 01 Jan 2022 14:00:37 +0000
ROA not before: Sat 01 Jan 2022 14:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198216
IP address blocks: 157.25.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973153766 (0x3a0125e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6edbd8a442064ab8b76536c8dc95eae77ea1fc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:60:0f:61:6d:5b:51:ab:37:4b:1b:0a:08:
8c:f7:c9:f4:e3:08:20:42:bf:b8:f6:39:57:03:d4:
a1:de:5e:8e:3c:87:19:59:c7:c0:3c:93:00:57:d0:
78:c3:bf:96:be:d5:a6:66:5f:6b:1c:97:10:16:f6:
1e:cd:ce:61:34:8b:fd:b3:58:36:a9:5c:44:31:1b:
65:f9:66:c0:7f:36:56:59:15:c1:ab:2c:fc:74:0f:
65:e7:54:ed:c9:3a:08:93:6f:39:12:12:a9:49:ef:
05:79:35:a9:62:31:0a:1b:d9:77:13:d7:16:23:2a:
79:8a:ff:40:71:8f:8a:83:03:8e:19:5f:3f:bc:a0:
e8:ae:83:86:1c:d7:d3:0f:e4:d2:d7:3f:82:d6:fc:
70:b2:e9:92:f9:e0:7c:38:4d:82:f3:67:5a:e8:49:
24:39:8e:4c:d4:c0:81:02:da:d7:4e:87:d7:f4:b0:
3f:a8:0e:e5:e0:09:6f:6e:c4:82:e4:09:81:99:e3:
f1:b6:77:19:1a:f8:6f:42:4d:2c:40:4a:98:e9:e0:
e9:23:e4:05:bf:37:ae:c4:cb:2d:f6:d1:ee:c1:c1:
ee:30:37:98:d4:5e:b0:04:96:15:6d:99:2e:f0:57:
99:7e:a4:f2:ee:e9:38:a2:d6:e7:2d:21:63:95:34:
98:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DB:D8:A4:42:06:4A:B8:B7:65:36:C8:DC:95:EA:E7:7E:A1:FC:91
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/btvYpEIGSri3ZTbI3JXq536h_JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.25.68.0/24
Signature Algorithm: sha256WithRSAEncryption
55:41:89:c6:89:ae:65:bd:4c:e5:a7:88:09:3b:8a:1e:08:55:
1d:5a:05:2b:71:41:69:bc:a7:44:43:ef:58:41:28:c2:aa:ef:
0c:e4:b9:f1:fa:2f:ea:0b:6d:cb:3d:a3:bd:ed:bb:95:e4:5f:
12:12:04:db:e4:d9:6a:27:a6:97:77:24:0f:84:18:0b:22:bc:
93:69:2f:b7:09:5f:e8:d3:37:9a:26:06:93:4d:d1:27:14:0c:
00:1a:f6:75:d6:1c:88:10:09:06:54:8c:ed:98:9e:35:12:5c:
9f:49:09:c5:bd:19:ae:d0:09:48:a0:96:f5:c5:01:b4:3c:e0:
5e:ad:41:06:7d:b1:1e:27:5c:da:3e:79:13:cd:43:e7:75:1e:
02:4b:6f:de:53:5d:5d:86:17:ae:e0:01:88:e4:c5:32:db:60:
29:cc:a4:dc:15:5a:34:85:41:d3:78:c5:3f:e6:04:4f:a1:ce:
ce:4e:b3:e1:34:e5:15:06:85:62:d3:75:48:9c:00:d3:53:c3:
53:b9:ee:d8:e4:ff:e3:94:5b:4d:bd:bd:eb:fb:c9:38:84:33:
1f:31:f2:00:0a:ce:58:89:d9:93:7a:62:d1:2c:73:ec:73:0a:
f1:a6:9d:db:3a:ce:b0:8b:f5:98:f7:68:a6:67:1a:7e:87:02:
3a:af:a4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-fra.rpki-client.org