Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/mQAfjhiz8R--992gvnzr8xRQCtc.roa
File: mQAfjhiz8R--992gvnzr8xRQCtc.roa (raw, json)
Hash identifier: mqL52SewSKsgy+dyUEFLOOy5R2VBWNhPIbOmi4ULvIM=
Subject key identifier: 99:00:1F:8E:18:B3:F1:1F:BE:F7:DD:A0:BE:7C:EB:F3:14:50:0A:D7
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 34B4FC28
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/mQAfjhiz8R--992gvnzr8xRQCtc.roa
Signing time: Sat 01 Jan 2022 14:57:43 +0000
ROA not before: Sat 01 Jan 2022 14:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53007
IP address blocks: 153.112.195.0/24 maxlen: 24
192.157.17.0/24 maxlen: 24
192.157.16.0/23 maxlen: 23
192.157.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884276264 (0x34b4fc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jan 1 14:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99001f8e18b3f11fbef7dda0be7cebf314500ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:9e:eb:10:37:66:b7:84:f9:5b:2d:cc:2d:
eb:c1:84:7b:54:9c:89:32:4d:7a:bf:bd:f9:f0:25:
01:53:31:92:5f:3e:9e:7e:b8:77:5e:9b:84:d3:ac:
b6:0d:0a:92:31:57:78:4d:9c:6b:aa:2d:66:a9:cd:
60:70:53:11:69:9e:18:59:48:a3:87:b1:88:87:26:
08:cd:84:59:13:e9:d9:91:24:29:ed:4c:bd:2a:b8:
b6:ba:47:d8:bc:44:eb:5b:17:1b:8e:47:83:d4:f6:
10:f8:6b:b7:72:26:d4:73:b7:30:06:1f:74:c9:81:
5b:1a:14:c6:64:bd:d0:5b:78:a7:ad:3d:f0:0c:17:
0f:9b:df:84:9d:fa:ee:b6:3c:1b:b6:ac:32:71:5a:
28:93:2e:67:97:2e:42:59:16:c4:ba:77:53:67:39:
7c:fe:97:a4:ad:34:ee:bc:2e:9e:c0:12:98:24:15:
bc:e0:fd:a5:9d:b8:73:5f:8d:0e:b0:e5:02:f3:ef:
3f:85:d8:d1:f6:ac:3d:81:09:db:dd:a5:13:b8:41:
a2:06:28:6f:59:23:c8:39:db:f1:64:40:4e:36:66:
d4:fe:bf:e4:e5:51:4a:72:a8:42:f0:d8:da:39:4d:
af:00:52:00:d7:b8:c0:5b:93:fd:b5:2c:c2:5c:d0:
82:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:1F:8E:18:B3:F1:1F:BE:F7:DD:A0:BE:7C:EB:F3:14:50:0A:D7
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/mQAfjhiz8R--992gvnzr8xRQCtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.195.0/24
192.157.16.0/23
Signature Algorithm: sha256WithRSAEncryption
63:8e:75:e6:39:df:39:79:0f:1a:fc:4e:de:7b:ca:d2:25:cf:
b8:c4:92:9a:cb:7e:08:1b:f1:41:2e:73:18:90:00:26:79:4f:
bc:0b:0c:79:c0:df:b6:d1:c0:ca:e1:7a:79:3f:a9:a6:a7:5b:
00:96:4f:1c:8c:2a:ff:19:be:36:65:3e:0b:41:6f:75:38:f0:
a4:d5:ba:69:40:40:22:3a:af:8b:41:24:e2:9e:c7:44:22:46:
7f:b8:cc:4c:88:97:11:74:dc:ba:30:20:fd:58:8f:ae:08:4c:
ea:1e:5b:36:ee:85:96:1b:43:3e:d4:5b:0e:c8:7e:c7:db:c3:
f0:5d:08:dc:ae:c3:3d:f3:13:cf:22:57:1a:95:ce:4d:9c:ad:
4a:d9:05:94:29:80:e8:56:2f:f8:cd:ef:3e:39:fb:0f:b0:42:
f0:83:49:6a:56:ae:40:ab:19:91:1c:94:9c:bf:8f:57:12:96:
b5:3f:69:fd:50:f9:b9:a7:0b:43:39:41:ed:f4:08:fd:78:6c:
13:e9:3f:91:85:a4:fa:39:fb:c1:ba:93:bf:02:5d:fa:c1:21:
c7:7b:86:30:83:2b:c5:c3:88:a6:6d:17:b0:81:73:f5:37:eb:
80:2c:93:e1:f8:5c:13:51:c5:c8:6f:cc:79:f9:44:ce:95:76:
4e:f5:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:17 2024 by rpki-client on console-ams.rpki-client.org