Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/4CeOOAo95n7y2OD8CAU59SQfOWs.roa
File: 4CeOOAo95n7y2OD8CAU59SQfOWs.roa (raw, json)
Hash identifier: MAkSEMu7fEen6aSX40n9egKqqC5W/2MnC3bw1NWMfyE=
Subject key identifier: E0:27:8E:38:0A:3D:E6:7E:F2:D8:E0:FC:08:05:39:F5:24:1F:39:6B
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A85F883
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/4CeOOAo95n7y2OD8CAU59SQfOWs.roa
Signing time: Sat 01 Jan 2022 16:07:15 +0000
ROA not before: Sat 01 Jan 2022 16:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62110
IP address blocks: 151.237.78.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176552067 (0xa85f883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0278e380a3de67ef2d8e0fc080539f5241f396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:82:a6:b2:85:41:b3:63:af:6a:e3:17:36:
40:e2:05:47:5e:12:6a:7c:4f:68:73:0f:36:39:3c:
eb:16:ac:a9:09:4b:35:bd:dc:b0:90:50:1e:20:31:
a0:bd:4a:d3:40:0f:69:a7:0b:59:a3:fd:a1:54:74:
8a:ae:d8:56:c0:3f:28:6b:1d:e4:9a:86:6f:57:93:
e2:7d:24:a5:66:b3:f1:c4:14:dd:1c:00:a0:0c:cc:
f4:4c:cd:73:1a:04:e1:38:1c:9f:95:2d:19:b2:47:
ef:90:45:32:f6:1b:40:e4:89:2f:92:f7:28:a4:f7:
17:a3:d5:d8:fc:92:a7:ae:92:36:b4:f6:67:55:d3:
3d:1a:72:d8:9e:5b:c1:74:7a:dd:e0:a9:58:f5:4f:
e4:58:0a:7e:ce:b7:a7:ea:e5:f8:d4:49:96:93:db:
da:98:19:b6:b5:c9:fd:0e:59:4b:62:94:1c:2a:12:
7e:be:8f:46:04:be:36:e6:7b:fd:87:82:a2:d4:67:
24:4e:07:da:38:cb:90:03:77:6c:24:26:d0:69:12:
85:c3:9f:67:2b:2c:03:41:3d:2f:98:b0:a4:c4:f7:
2e:5e:94:25:11:3d:41:60:e2:d0:00:79:ff:1c:38:
9e:ff:d9:4e:07:86:4f:62:82:86:22:e7:8a:b4:d8:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:8E:38:0A:3D:E6:7E:F2:D8:E0:FC:08:05:39:F5:24:1F:39:6B
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/4CeOOAo95n7y2OD8CAU59SQfOWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.78.0/23
Signature Algorithm: sha256WithRSAEncryption
85:85:4b:0c:3e:7c:05:58:20:98:09:a0:96:f7:19:6d:e9:3d:
50:33:46:8a:2c:03:36:a9:dd:e1:c6:e0:d9:b6:63:04:d4:f5:
ab:88:aa:d5:14:0a:cd:6c:28:47:b3:7a:1d:0c:43:25:c8:62:
e5:67:27:df:61:26:2a:7c:a9:f9:6f:45:9e:4b:29:10:a7:e5:
60:8a:31:28:72:33:4f:70:ac:fa:7f:26:c9:14:47:54:e7:01:
3b:fc:ad:ad:5d:2c:bc:54:3d:af:f4:aa:72:9c:73:f5:fd:cc:
a6:e2:1a:b5:58:98:98:22:c6:40:5a:b5:e2:9c:3d:9a:f4:05:
0a:d4:89:d9:33:bd:c6:a8:ab:1a:22:52:61:4e:a9:5a:b1:91:
2f:d5:66:cf:0f:c0:b8:94:85:e8:7e:c6:94:c4:61:a9:fe:31:
ec:ca:9d:2c:d1:2a:7d:4f:27:a6:c9:4a:b5:4f:23:b6:c2:7d:
b0:f5:bc:99:38:d0:91:ce:2b:f6:8a:cb:fb:81:21:25:4f:ce:
04:eb:2e:76:f8:5e:86:49:b8:4a:e5:15:49:9d:a8:1f:02:3f:
91:b0:10:f3:bb:4a:0b:91:7a:8b:ce:5c:ca:bd:6d:48:88:7f:
e1:65:2b:27:9d:16:e8:14:56:22:de:2d:6a:06:e8:30:80:c9:
b9:ee:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org