Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MvWsfhvKIjn14QbAJf-CjOggqs4.roa
File: MvWsfhvKIjn14QbAJf-CjOggqs4.roa (raw, json)
Hash identifier: XnIvCKWTnbU9Df+q3Pe+elhoy3LU8mp9q0PPW2cE4QA=
Subject key identifier: 32:F5:AC:7E:1B:CA:22:39:F5:E1:06:C0:25:FF:82:8C:E8:20:AA:CE
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0B27E416
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MvWsfhvKIjn14QbAJf-CjOggqs4.roa
Signing time: Thu 17 Feb 2022 16:01:15 +0000
ROA not before: Thu 17 Feb 2022 16:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41782
IP address blocks: 151.237.16.0/24 maxlen: 24
151.237.17.0/24 maxlen: 24
151.237.18.0/24 maxlen: 24
151.237.19.0/24 maxlen: 24
151.237.22.0/24 maxlen: 24
151.237.25.0/24 maxlen: 24
151.237.29.0/24 maxlen: 24
151.237.30.0/24 maxlen: 24
151.237.31.0/24 maxlen: 24
151.237.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187163670 (0xb27e416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Feb 17 16:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32f5ac7e1bca2239f5e106c025ff828ce820aace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:d0:2a:f7:b6:e3:85:9d:e2:df:47:bc:48:
13:d7:04:10:95:35:ac:df:08:78:fc:b6:6a:c0:03:
6a:23:74:08:93:fb:1e:08:77:16:07:9f:0c:4b:42:
62:c2:cc:23:82:2e:cf:e1:84:8f:37:f2:dd:e6:79:
c8:99:6c:8f:f9:dd:46:35:73:19:69:cf:29:3b:d3:
81:f1:42:8e:94:5b:55:bd:fc:2e:37:b3:f2:11:8c:
a6:1b:ba:75:77:e1:77:05:94:34:8d:86:6e:2f:8a:
a4:44:f4:1d:ae:ff:4a:1d:b0:40:2c:f5:81:79:11:
06:da:43:5d:74:ff:02:7c:b9:db:a5:5b:69:88:fe:
25:eb:4a:fc:50:7c:f8:6f:40:dd:0b:bd:41:85:71:
7b:40:d1:17:a3:ec:0b:c1:7a:18:74:b2:e1:66:5e:
0e:d3:21:68:c7:52:97:87:7c:43:ec:6f:c3:09:e3:
6d:b1:74:f1:4c:0b:34:28:ae:c8:d9:a3:b5:18:e9:
48:8f:25:df:f9:de:b5:73:cd:2e:05:96:3b:0b:24:
b9:24:af:ce:0e:a5:57:2b:40:74:39:03:e7:a6:92:
c2:4d:95:ed:08:21:92:34:93:32:e0:fd:92:84:17:
3a:af:f4:68:bb:09:fd:59:8a:7b:3d:cc:81:22:75:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F5:AC:7E:1B:CA:22:39:F5:E1:06:C0:25:FF:82:8C:E8:20:AA:CE
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MvWsfhvKIjn14QbAJf-CjOggqs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.16.0/22
151.237.22.0/24
151.237.25.0/24
151.237.29.0-151.237.32.255
Signature Algorithm: sha256WithRSAEncryption
10:ed:7c:61:76:73:73:0c:06:59:e4:1a:83:d0:ce:6d:3a:86:
5e:ad:5d:9d:65:f4:66:8e:6a:e0:ef:4f:1c:81:3b:59:83:de:
ec:e0:f3:48:59:a9:d2:83:e7:ed:de:70:37:72:9d:00:93:63:
1f:1e:27:ec:0c:db:0b:1d:5b:f5:93:96:be:00:87:7d:af:6a:
9a:7e:53:ae:8f:b0:17:0f:da:62:7e:18:3b:12:a4:5e:7c:85:
01:59:7e:52:e0:cc:49:e6:e5:3b:fd:2f:76:39:f9:bf:a4:c0:
f4:47:d5:a0:5b:27:a7:39:36:ea:9d:34:de:c2:c1:dc:9e:2f:
f8:6d:bb:12:c3:9f:6e:73:7c:e8:79:67:1e:c8:5b:5d:b1:bd:
e6:a5:e7:89:46:4b:b0:24:8e:ff:1c:67:66:9e:57:d9:cc:63:
e5:3e:34:5d:dd:5e:50:a4:56:9e:23:0e:79:b5:1a:7e:71:1b:
9e:bb:ca:92:16:d5:b3:f5:11:f3:9d:2e:7c:de:84:3c:c3:20:
5a:6e:ff:bf:1c:a6:58:c2:bb:f3:72:85:b2:a7:43:4f:23:f9:
9c:5f:e2:5d:3a:b2:e3:ae:b4:11:9b:d9:1c:ff:8d:ac:c9:fa:
96:73:1f:61:5b:dd:23:a4:d1:02:db:5c:4a:b9:bc:93:36:c8:
ec:08:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org