Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/r-D1cv1HqzL_njIgGEm5bSuLTKc.roa
File: r-D1cv1HqzL_njIgGEm5bSuLTKc.roa (raw, json)
Hash identifier: LADcmn9tUqH3d5bqIDtT8RLYuge57NKu7s6kt10lpt0=
Subject key identifier: AF:E0:F5:72:FD:47:AB:32:FF:9E:32:20:18:49:B9:6D:2B:8B:4C:A7
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 3A0AF98C
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/r-D1cv1HqzL_njIgGEm5bSuLTKc.roa
Signing time: Sat 01 Jan 2022 14:00:43 +0000
ROA not before: Sat 01 Jan 2022 14:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203685
IP address blocks: 157.25.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973797772 (0x3a0af98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afe0f572fd47ab32ff9e32201849b96d2b8b4ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:fe:e8:75:f5:55:6c:95:ab:16:91:80:35:
36:8b:56:3a:6f:18:da:f8:aa:a8:a3:39:cc:9b:93:
b5:36:ac:c5:a7:f6:5a:77:e9:96:fc:ba:28:cc:b0:
75:c8:6c:3e:6e:ec:85:94:87:79:d5:4c:73:11:c9:
ed:1e:02:d3:07:d2:7a:d1:15:f4:2c:06:47:8d:8b:
04:14:10:05:27:31:cd:90:d8:5f:d3:15:14:0d:3c:
9b:82:2e:9b:0f:e3:6f:60:90:de:5e:42:20:86:d8:
c2:dc:b2:37:5b:e5:cc:b4:8d:c6:59:0e:55:38:b1:
45:8f:f9:12:b5:99:bf:f6:a1:0b:86:bf:96:54:e0:
15:e5:22:2c:ad:b3:fd:a1:c2:96:6b:16:f2:f0:e3:
c2:7e:6f:b1:20:5b:44:03:f1:a8:e7:ec:b8:28:19:
39:f3:81:af:08:6b:95:b9:bf:d8:48:f8:dd:18:04:
73:e2:82:cb:1f:98:9d:72:4a:a3:d6:c8:f0:ae:0c:
06:e8:91:7c:06:bf:db:7e:fe:ee:92:4d:ba:6e:77:
41:5d:71:9b:58:4c:fc:e4:6d:d7:16:e4:cd:c2:0a:
84:2c:33:f2:93:b1:29:44:c2:e8:6e:a1:3a:d0:c4:
03:2c:c9:8c:25:d2:e5:f0:6e:b0:d6:a6:04:7b:f0:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:F5:72:FD:47:AB:32:FF:9E:32:20:18:49:B9:6D:2B:8B:4C:A7
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/r-D1cv1HqzL_njIgGEm5bSuLTKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.25.132.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5f:b5:43:6e:d0:8f:d1:ec:1e:ee:4c:29:52:17:09:7f:83:
3b:8d:9c:dd:5f:0b:9a:e9:fb:5e:7f:25:8e:4c:5e:5d:3d:a4:
da:e5:ff:53:14:0e:4f:06:b2:8d:cd:0d:3f:78:66:8e:b1:3e:
5e:42:79:0e:e7:25:c2:1c:47:b5:ba:21:30:c7:35:b9:b7:5c:
c8:af:f8:1f:24:5d:74:76:56:02:a3:a2:e1:85:c1:81:6e:1f:
8d:3f:2b:59:48:85:24:50:3b:64:0b:e2:97:1d:ed:1b:88:fb:
5c:79:b8:10:bf:2d:f5:a7:13:65:4e:49:b4:36:9f:4b:a8:22:
8c:35:b5:fd:85:b9:09:3a:8b:54:bd:ac:d9:27:8f:4c:d1:5c:
b8:07:dd:4e:49:71:4f:1d:ac:4e:e6:67:3a:3d:53:62:8e:ce:
62:6c:f6:5a:4a:af:92:6b:e3:af:31:db:43:e1:88:e0:a5:5e:
6c:97:d7:35:19:e0:d0:49:09:4f:8f:97:b9:26:b1:f7:42:03:
db:73:a2:6c:0d:03:a6:14:0b:8d:3a:7e:01:90:43:47:00:d6:
b6:ee:c6:dc:ff:1d:b4:33:5e:67:db:7c:9d:bc:ac:a1:07:10:
2a:16:58:ea:e0:a9:29:11:cb:04:00:66:c4:74:0f:5e:7f:17:
a9:99:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:02 2023 by rpki-client on console-ams.rpki-client.org