Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/Sm14u-MOlJcEbEsbwnjrYGyctUQ.roa
File: Sm14u-MOlJcEbEsbwnjrYGyctUQ.roa (raw, json)
Hash identifier: WBzI0+yBYzi/0zU8vDxbZCaSPCoLVCDQ8l8YZ0xiNtc=
Subject key identifier: 4A:6D:78:BB:E3:0E:94:97:04:6C:4B:1B:C2:78:EB:60:6C:9C:B5:44
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 34B0214E
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/Sm14u-MOlJcEbEsbwnjrYGyctUQ.roa
Signing time: Sat 01 Jan 2022 14:57:40 +0000
ROA not before: Sat 01 Jan 2022 14:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1221
IP address blocks: 153.112.128.0/24 maxlen: 24
192.131.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883958094 (0x34b0214e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jan 1 14:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a6d78bbe30e9497046c4b1bc278eb606c9cb544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:47:dc:ae:13:a5:16:ef:02:1c:77:a1:8a:
0d:d1:57:3b:1a:8e:3c:e2:22:4b:58:2a:6a:74:67:
a9:c9:5e:e1:dc:c1:c8:af:79:36:71:ce:97:de:af:
78:f4:3e:89:ba:18:d3:d8:e2:87:5e:7e:bb:61:e8:
2c:91:2a:f4:27:e6:ec:76:1c:59:36:25:ea:53:72:
13:89:e0:45:48:a2:ed:c7:a9:a1:56:fe:63:ec:38:
4f:1f:1b:70:ba:a2:b3:67:43:4a:54:4f:a3:59:cb:
5b:86:c2:62:ad:da:5c:26:1e:f0:03:a7:c9:a7:df:
c2:93:f6:43:26:d0:95:25:38:4a:57:cd:4d:91:e5:
3f:51:fd:3d:69:23:52:26:51:0a:ca:d7:6e:06:df:
35:9d:d2:b1:f3:9a:cb:3c:75:2a:89:8e:d1:3b:19:
44:95:41:19:f2:d7:2d:56:31:d1:e8:ee:7e:ab:6d:
97:07:65:c9:b2:8c:8c:18:d7:d0:a8:d4:b4:f7:dd:
ab:9d:a3:88:b7:4c:94:fd:10:67:ac:9a:12:b0:61:
ec:8f:05:79:c5:18:ac:b9:15:70:0d:5d:a8:76:cd:
ca:91:54:da:ef:52:60:e6:af:54:33:b2:54:0b:91:
89:63:b6:cd:bb:a9:e2:4a:11:19:d0:a2:e2:a6:f0:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6D:78:BB:E3:0E:94:97:04:6C:4B:1B:C2:78:EB:60:6C:9C:B5:44
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/Sm14u-MOlJcEbEsbwnjrYGyctUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.128.0/24
192.131.25.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:91:b5:17:2f:5c:a9:f3:b8:f4:8c:1e:b7:2b:79:ea:b0:2a:
8d:7f:94:f0:19:91:fd:07:68:bc:65:d7:95:86:a5:f8:07:f2:
67:c8:59:23:42:75:b2:a0:f4:81:a1:fe:c5:06:8d:cb:6f:f1:
2c:32:79:78:03:16:f8:58:b3:19:b5:55:b9:3d:bb:2a:86:27:
10:7e:7c:1f:f3:49:62:03:18:a8:fb:7d:8e:99:58:db:2b:b3:
e3:db:52:41:63:5a:7d:a0:77:27:95:bd:e2:4c:77:36:aa:4b:
eb:1c:99:7d:36:19:3d:3e:7d:3b:22:06:9b:ba:c1:a9:14:2f:
82:fa:de:b4:8f:f9:03:5a:d8:33:50:9e:70:1b:9f:eb:8b:80:
e3:4a:75:35:97:73:19:1f:63:8b:d0:59:c1:6f:5d:e2:a7:ec:
a1:78:a1:ce:2b:09:d8:c6:3b:80:7f:13:66:e7:57:b1:79:0e:
04:d9:34:9a:f3:e6:93:e2:fa:5f:a3:62:43:90:2c:01:ea:2b:
8f:1f:9e:6d:71:e7:72:0d:80:c6:97:bb:a1:88:b4:8c:57:42:
d7:97:e9:49:a2:ea:ea:ac:ce:61:9c:30:97:57:02:de:a3:7e:
ac:48:07:30:f8:19:ad:84:4b:66:f1:e9:93:ac:3e:ed:bb:e3:
ec:6b:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org