Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/61_6yDyRo4tguPwVP1t-Sj5HopY.roa
File: 61_6yDyRo4tguPwVP1t-Sj5HopY.roa (raw, json)
Hash identifier: 2w57t4clEJM1unqxQEopztmJ1+kidkgItrxRyyaQpEU=
Subject key identifier: EB:5F:FA:C8:3C:91:A3:8B:60:B8:FC:15:3F:5B:7E:4A:3E:47:A2:96
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0185077876B40EB7C3A9BB927EB8C5559B9B
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/61_6yDyRo4tguPwVP1t-Sj5HopY.roa
Signing time: Mon 12 Dec 2022 17:53:33 +0000
ROA not before: Mon 12 Dec 2022 17:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41782
IP address blocks: 151.237.16.0/24 maxlen: 24
151.237.17.0/24 maxlen: 24
151.237.18.0/24 maxlen: 24
151.237.19.0/24 maxlen: 24
151.237.29.0/24 maxlen: 24
151.237.30.0/24 maxlen: 24
151.237.31.0/24 maxlen: 24
151.237.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:78:76:b4:0e:b7:c3:a9:bb:92:7e:b8:c5:55:9b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Dec 12 17:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb5ffac83c91a38b60b8fc153f5b7e4a3e47a296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:b2:93:3a:ce:76:64:13:f7:5d:a8:9b:24:
13:ba:48:99:a2:78:f6:7a:c0:19:bb:80:0a:97:31:
01:d3:b1:13:1d:f4:22:1d:f3:8e:80:a8:f7:be:7b:
8d:72:55:f9:2a:b7:3b:68:b3:85:9b:85:7f:5d:6c:
d1:3b:56:7d:cb:d4:f6:3e:dd:5b:99:e1:85:47:d1:
1c:12:57:41:26:8b:be:95:eb:27:d4:1d:14:ae:86:
83:76:1d:ea:ab:fb:8c:c3:5f:27:78:12:e4:df:78:
b9:ff:1a:f9:75:3a:e0:2b:f6:78:72:6a:d9:ae:f6:
d5:ef:bb:1c:69:2d:60:14:99:ba:97:f3:7d:57:89:
28:a4:9c:86:8b:78:da:82:91:1a:52:da:51:0c:e4:
5f:e5:ef:ff:7f:97:99:c7:4c:33:62:c4:8e:94:d9:
03:79:62:63:3d:d6:75:60:00:20:4d:fc:83:0f:e3:
9e:71:47:a7:a8:08:3d:07:4a:cc:fb:44:98:97:87:
6a:59:c2:73:d8:69:1b:f6:90:01:99:bd:b4:23:85:
29:90:8a:a9:c9:16:f7:af:e8:c9:62:ff:85:87:4d:
8c:b5:6a:84:09:86:12:62:59:a2:11:d2:d7:c5:d7:
07:02:91:dc:2d:f2:50:49:91:91:aa:0e:81:6a:a1:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5F:FA:C8:3C:91:A3:8B:60:B8:FC:15:3F:5B:7E:4A:3E:47:A2:96
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/61_6yDyRo4tguPwVP1t-Sj5HopY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.16.0/22
151.237.29.0-151.237.32.255
Signature Algorithm: sha256WithRSAEncryption
e2:fc:cb:a7:fa:70:a3:5d:05:67:49:3b:e4:74:ac:a6:e8:29:
0a:c8:79:0a:2c:73:40:d4:6c:8a:68:b7:2b:23:a8:a7:98:62:
dc:f4:b2:6e:b6:9c:ab:09:e5:e7:8f:d0:0c:56:5f:14:30:2e:
80:7e:14:d9:ff:5c:83:9b:77:c6:26:c0:18:87:78:25:37:e9:
52:21:d4:25:9d:d2:ce:4e:65:5c:45:8f:3f:43:84:6b:2d:c5:
76:19:6f:e3:d3:cf:d2:72:e7:75:3a:62:e3:70:97:93:55:8b:
6a:bb:19:a5:46:43:0e:a9:b9:2f:fc:d5:b1:12:35:9a:ef:64:
11:95:7b:45:63:98:ab:75:d2:39:5c:26:f8:04:ec:c5:94:82:
c9:03:90:66:4f:4a:ce:11:39:53:15:80:b3:bd:27:ab:67:52:
62:17:e6:ea:51:ac:2a:09:7a:87:2a:c0:7e:90:3a:7f:51:e0:
8a:7d:35:5f:10:0b:ce:48:15:b8:ad:58:09:58:5d:bc:02:e1:
5c:20:84:c9:82:cb:90:51:f6:a8:30:c6:07:bf:f1:8a:60:f3:
26:07:50:3f:1b:b1:fc:5f:e1:01:63:87:1d:72:33:b3:22:e0:
ba:43:d7:de:37:e4:37:38:83:f0:d9:bc:d9:6c:04:46:3c:47:
12:23:eb:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org