Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/83yaEAJv1P_J6iHdHzNM2L0VSv8.roa
File: 83yaEAJv1P_J6iHdHzNM2L0VSv8.roa (raw, json)
Hash identifier: 0p4pDyrupGLwsHun56TvkC7Cee3HDyXfAXyt2KpKn8o=
Subject key identifier: F3:7C:9A:10:02:6F:D4:FF:C9:EA:21:DD:1F:33:4C:D8:BD:15:4A:FF
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 0182B1BAF42B11E2DA11B01B86300FE66D36
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/83yaEAJv1P_J6iHdHzNM2L0VSv8.roa
Signing time: Thu 18 Aug 2022 16:13:15 +0000
ROA not before: Thu 18 Aug 2022 16:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19551
IP address blocks: 149.126.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:ba:f4:2b:11:e2:da:11:b0:1b:86:30:0f:e6:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Aug 18 16:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f37c9a10026fd4ffc9ea21dd1f334cd8bd154aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c3:24:f2:0e:80:30:4b:64:3a:2b:5e:a2:04:
0a:4f:12:27:f2:87:ec:35:de:2a:6a:b7:f1:e9:bf:
2a:15:98:d3:3a:64:17:20:81:41:1b:1c:57:02:9a:
18:6c:41:a6:ac:8a:66:da:f1:11:f1:e0:ff:df:b0:
9c:bc:20:f8:31:b0:f3:aa:07:51:12:04:c5:24:81:
58:16:6d:cc:57:41:aa:91:36:de:df:ee:14:c9:dc:
e8:04:0f:45:88:17:71:ae:c1:b2:0b:d0:9a:03:9f:
75:d2:18:b3:be:a8:9f:0c:48:68:6d:aa:28:a0:ef:
2d:40:e3:c9:30:47:91:66:e5:28:a1:29:86:7c:da:
a3:70:ab:11:12:36:55:79:b3:c3:45:5a:f9:f6:d4:
5a:a1:2d:e5:03:e4:b7:d5:a8:0c:9b:2f:2a:c1:b3:
09:7e:4f:4c:7d:0f:57:a0:49:5c:02:72:2e:c7:45:
0f:85:0c:df:18:72:91:21:eb:51:7d:c6:9b:55:d1:
ad:3b:17:96:48:cc:af:e3:2e:a1:e8:79:8d:4a:17:
e9:ff:15:e6:87:dc:34:67:ea:5b:01:c0:d4:5e:37:
d3:4d:ba:1a:96:43:c8:5e:d6:ab:70:72:b6:6f:1f:
1b:57:1e:84:e0:1f:2a:27:dd:a3:aa:03:4c:b2:48:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:9A:10:02:6F:D4:FF:C9:EA:21:DD:1F:33:4C:D8:BD:15:4A:FF
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/83yaEAJv1P_J6iHdHzNM2L0VSv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.72.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0e:b6:f5:e1:45:f6:3d:dc:9e:a4:15:4a:23:c7:6e:12:9b:
45:c7:96:28:b4:a2:eb:2d:49:98:c1:72:2d:d8:fe:61:60:fb:
57:f4:13:17:ad:b7:6e:ca:46:17:85:7b:b5:8d:b5:86:d5:6f:
15:51:fd:82:3c:4d:ca:98:df:03:ba:78:99:cf:05:29:24:57:
59:4a:ad:6a:62:bd:5f:5f:b6:ca:ee:0e:08:7a:f0:fb:2c:f7:
3c:c6:4e:1c:f0:c0:74:bd:ee:73:15:c4:f4:e4:1f:f5:aa:fe:
33:52:ef:94:d3:30:d2:6a:ae:e1:95:c2:ca:0f:d9:2c:e4:cc:
1d:5f:a6:f4:bd:ee:a1:e5:c4:6c:37:e6:ae:fc:23:36:76:79:
b1:29:ac:24:66:d4:2a:2d:8f:19:3f:ba:a8:31:24:2e:e0:24:
ba:b1:7f:2b:ea:c8:bd:e3:cd:76:db:86:5d:da:5f:4a:04:27:
77:40:84:77:20:51:c7:1d:bd:8c:3f:64:92:72:40:2a:c7:24:
83:63:bd:57:20:8e:4b:7c:be:5d:5f:3b:9a:10:4d:35:48:38:
ac:1b:99:fc:b2:4c:68:f7:4e:f8:9f:92:77:4e:7e:33:15:33:
b5:9b:74:2e:21:21:e1:3e:76:4f:e6:d8:01:70:76:49:97:25:
fc:40:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org