Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2Z-S1zQ_ZOimjSsypaQbtEsZ_R0.roa
File: 2Z-S1zQ_ZOimjSsypaQbtEsZ_R0.roa (raw, json)
Hash identifier: FpnWoJ7PY1cYoTTyoDD1ZqFUhwDhxMjU/Oad3jVedq0=
Subject key identifier: D9:9F:92:D7:34:3F:64:E8:A6:8D:2B:32:A5:A4:1B:B4:4B:19:FD:1D
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A979480
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2Z-S1zQ_ZOimjSsypaQbtEsZ_R0.roa
Signing time: Sat 01 Jan 2022 16:07:22 +0000
ROA not before: Sat 01 Jan 2022 16:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211159
IP address blocks: 151.237.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177706112 (0xa979480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d99f92d7343f64e8a68d2b32a5a41bb44b19fd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:0d:4c:09:76:1e:13:58:9e:25:ce:7b:46:
a8:46:3c:78:f5:5f:de:81:94:6d:bb:76:6a:1f:01:
5d:37:76:24:89:9b:f0:9b:39:ab:e4:87:06:2e:b9:
0f:b9:6a:90:78:0a:9a:00:97:2a:48:ee:73:09:88:
25:4a:8b:c1:dd:ae:ad:f5:bb:58:80:f4:fb:60:32:
27:f1:5a:77:a0:69:f5:3a:de:3e:ef:94:5d:e0:f4:
66:46:2c:c7:b2:1d:1d:7a:fa:a4:52:cf:fe:45:7c:
7c:ae:bd:0c:17:77:86:98:32:c3:b7:79:75:3d:10:
76:91:9f:0b:88:31:cf:6d:63:61:5a:ad:fc:c3:dc:
a6:c7:0a:d8:0f:57:82:49:af:0d:0b:4e:2f:f0:8e:
20:e0:ea:f3:db:f3:34:e2:13:81:0d:6b:2c:c0:df:
57:95:19:0d:16:e7:17:87:0f:b3:1b:25:63:22:a5:
49:d6:1d:17:52:7e:6a:ae:b1:56:4b:9c:29:ae:bb:
63:24:82:10:f0:93:12:33:7c:21:66:e1:35:90:8a:
c8:e7:1d:c0:5a:95:b7:3b:db:45:5d:99:4d:1b:e4:
f6:38:79:78:b8:bc:88:b4:68:31:d2:80:7b:6d:db:
7c:a0:7a:b5:29:3f:f0:2f:e0:c4:b3:6e:8c:21:f9:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9F:92:D7:34:3F:64:E8:A6:8D:2B:32:A5:A4:1B:B4:4B:19:FD:1D
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2Z-S1zQ_ZOimjSsypaQbtEsZ_R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:78:d5:58:b6:51:50:cc:2b:46:d4:26:4a:93:4f:e4:49:53:
c4:e0:a0:94:0e:83:46:e3:95:b3:62:f7:ce:b6:21:42:ba:a7:
54:33:13:ac:b7:51:fa:07:b5:e8:39:6b:40:8f:01:7b:40:51:
9d:7f:c3:12:54:cb:9b:fd:63:0d:67:12:3f:b3:07:5b:75:3e:
e3:f4:bf:7c:a6:a9:a6:4b:ad:cd:62:78:b1:a1:5a:4f:b6:bd:
ad:91:ef:60:e9:30:7d:b9:03:5c:08:c8:1b:6b:97:3e:3a:ba:
e6:3d:53:e4:9f:6b:a6:a5:79:f2:77:bf:f8:83:56:df:cb:d2:
b2:6d:aa:e3:27:bf:41:d3:57:87:2a:f8:82:76:b0:33:38:c0:
d3:3e:31:5c:09:ba:cd:b1:79:d6:68:66:6a:5f:c7:9c:b4:9e:
8b:b9:30:ca:4c:a2:c2:46:76:c2:66:8d:de:6d:60:4e:d9:2c:
9f:e6:48:c3:00:6a:37:0c:6a:b2:78:4b:07:35:25:34:67:e6:
87:62:89:27:3b:c2:46:ad:fe:7d:7b:37:38:81:8b:0d:46:da:
01:b7:54:49:07:22:ba:d4:31:c0:b6:1a:fb:62:8b:b2:ec:e8:
d0:4d:0c:9d:28:dd:f7:f5:90:21:c6:aa:c8:18:82:6e:58:6a:
62:64:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org