Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/T5aIEdeXzHxJQSh472HaMA8uU5c.roa
File: T5aIEdeXzHxJQSh472HaMA8uU5c.roa (raw, json)
Hash identifier: y+sjo34+sBacPcgvK3A8SyJ0iLzxPQz+p13aC7w/p+M=
Subject key identifier: 4F:96:88:11:D7:97:CC:7C:49:41:28:78:EF:61:DA:30:0F:2E:53:97
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 09EA48E9
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/T5aIEdeXzHxJQSh472HaMA8uU5c.roa
Signing time: Sat 01 Jan 2022 12:56:02 +0000
ROA not before: Sat 01 Jan 2022 12:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1213
IP address blocks: 143.239.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166349033 (0x9ea48e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Jan 1 12:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f968811d797cc7c49412878ef61da300f2e5397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:ff:47:40:fa:67:78:23:98:39:09:dd:ac:
4d:13:bb:93:ee:12:35:4a:9e:cf:8c:24:49:1a:09:
20:48:26:86:43:ac:50:79:65:e9:49:cb:75:fe:00:
23:cc:48:7f:a7:97:80:d2:48:c5:2a:66:d4:c6:e5:
21:62:c4:5e:ef:27:51:90:a5:34:44:0f:18:df:5e:
b8:be:d7:73:62:eb:d5:71:9b:fb:7f:62:e7:61:57:
e3:af:83:64:a6:3c:f9:ec:36:ff:ee:4e:05:e1:38:
ef:4b:7a:19:f0:34:b5:7f:ca:69:60:d2:b7:99:1c:
01:83:83:4d:48:23:c9:58:38:50:02:67:af:38:92:
bb:c0:11:d5:58:e0:89:54:38:80:e7:c6:5b:d2:0a:
5c:d1:02:98:5a:e6:3b:6e:78:04:81:b1:1b:19:9b:
e0:70:3b:b8:45:1a:17:46:7b:fa:27:53:af:b0:a8:
3f:c2:0e:20:de:ba:f9:35:60:e8:1b:2a:5a:5e:85:
5e:3a:b2:b5:c6:3d:fe:09:96:57:3d:91:3a:80:66:
01:e2:f2:af:4f:ea:5a:5a:d7:d4:22:18:fe:f1:a4:
f1:1b:e3:d7:4a:52:40:ed:a3:b2:c2:84:3b:ba:28:
b6:12:bb:4b:fd:1e:53:c8:22:27:e2:a8:0b:b0:13:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:96:88:11:D7:97:CC:7C:49:41:28:78:EF:61:DA:30:0F:2E:53:97
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/T5aIEdeXzHxJQSh472HaMA8uU5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:d8:6f:b1:ed:5e:4b:cc:2f:4c:14:2e:b8:a1:14:96:48:eb:
be:37:a2:9d:11:b7:83:b8:fb:3b:6e:70:00:d4:d0:06:4f:cc:
81:9e:8f:5c:a5:dd:50:f9:c3:ce:11:c9:c6:a5:bf:fd:c4:7f:
f7:1a:d2:1f:24:83:82:63:48:61:f5:2a:79:c7:a4:21:20:45:
f0:ad:d2:f9:d0:5c:8c:d7:01:fa:bd:28:ea:ee:f6:73:4a:fc:
79:57:3c:eb:88:ab:59:54:6f:12:69:0c:ab:d2:d4:0d:5b:b0:
b6:7a:51:58:c7:63:ff:1b:56:9a:4b:08:a5:83:2f:6a:4b:5d:
cb:72:6b:46:d2:04:46:3a:b2:27:2d:ce:c9:bb:8a:c7:9e:a4:
64:eb:6f:af:ef:b9:67:95:22:0d:47:75:7c:0c:fe:cb:c7:2c:
23:66:c0:7b:52:0d:4e:0e:69:40:8c:e6:be:36:88:34:bd:bf:
4e:c9:6d:18:92:fb:6d:55:4e:ad:16:d5:0a:a8:c5:84:71:a9:
50:61:42:c4:02:56:18:ab:3a:26:dc:ab:e7:83:6d:08:fd:f8:
08:83:eb:54:05:21:e0:23:2e:73:ff:b8:1d:75:44:8a:98:7b:
a5:c2:d7:5f:99:80:e6:37:e9:5f:a4:dc:2d:60:bf:d7:21:08:
77:9f:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:25 2024 by rpki-client on console-fra.rpki-client.org