Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/9aC79NRE5R5DYdleYA2Dlfe7s6U.roa
File: 9aC79NRE5R5DYdleYA2Dlfe7s6U.roa (raw, json)
Hash identifier: 2lWhSudOP+NgQgTjMxeTqILI1YY4F9iih/B0pZislqE=
Subject key identifier: F5:A0:BB:F4:D4:44:E5:1E:43:61:D9:5E:60:0D:83:95:F7:BB:B3:A5
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 103F7AE1
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/9aC79NRE5R5DYdleYA2Dlfe7s6U.roa
Signing time: Sat 01 Jan 2022 07:55:22 +0000
ROA not before: Sat 01 Jan 2022 07:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 149.222.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272595681 (0x103f7ae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Jan 1 07:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5a0bbf4d444e51e4361d95e600d8395f7bbb3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:02:eb:be:45:64:cd:44:2f:e8:6f:b0:b0:
34:8c:72:12:9e:c5:7b:3a:22:36:bd:b8:24:64:2e:
61:f7:41:3b:91:b7:2d:ed:ee:23:d6:8c:80:a1:44:
33:f0:a9:86:82:04:92:17:87:60:16:ac:fb:fa:a9:
9a:af:94:53:d2:f4:13:5f:93:fb:19:3f:ce:50:c2:
6f:f1:2f:7a:d8:76:ae:ec:c3:79:dd:ae:18:3e:00:
15:c8:ee:e3:b3:22:7f:bf:69:c7:37:d3:be:35:36:
db:c7:02:f7:c3:d9:2b:7f:05:75:10:e5:71:73:ca:
ea:5b:b3:9a:dc:a9:ec:c0:2f:ab:0a:7b:ff:95:3e:
d7:20:6b:24:a0:e2:53:3e:74:fa:07:1e:85:b0:d9:
3c:1e:c0:78:e8:fa:27:25:05:0f:24:c6:1c:94:92:
fd:c0:36:34:fc:18:28:23:33:76:8b:6e:32:2a:09:
a5:19:1f:c1:f0:2b:fc:75:0c:4e:52:67:a5:e2:fc:
c8:53:c8:74:eb:f1:2f:f8:e8:aa:1a:47:64:f0:e5:
f6:81:92:88:9a:f0:25:76:ec:c3:ed:6b:5d:f8:a2:
ac:1c:24:10:79:86:d9:67:e6:87:a7:e8:27:3f:7b:
96:2f:c9:ec:a8:16:45:dd:2d:a4:57:e5:29:66:23:
b8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A0:BB:F4:D4:44:E5:1E:43:61:D9:5E:60:0D:83:95:F7:BB:B3:A5
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/9aC79NRE5R5DYdleYA2Dlfe7s6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:00:7f:cc:be:32:11:25:67:5a:5e:b6:cc:4e:f1:50:c3:ea:
30:d0:37:15:27:7e:ff:2b:20:0c:03:05:1b:2e:ea:3b:7c:77:
e7:3b:3b:e6:b2:54:ec:85:97:6d:12:01:66:ba:da:93:a6:6c:
f2:5c:5d:08:7b:01:e0:2d:91:78:3e:d3:b1:74:a8:0f:16:3d:
75:eb:06:1b:b3:7a:23:c0:ff:6c:17:1b:65:e6:85:e0:e5:65:
4f:35:34:61:f4:96:1e:c8:81:73:93:cb:84:62:59:0f:d3:98:
19:cc:8b:ab:f4:8a:5c:21:9d:a3:08:f1:ee:7e:6a:54:c0:1b:
f7:75:9d:6f:07:54:02:5e:6c:1b:3e:bd:b6:d9:2a:33:9a:36:
b4:c5:69:3f:c1:75:c7:61:14:a7:79:f3:87:7a:94:03:30:7d:
2c:b3:fc:2e:ad:6c:79:e3:89:40:3b:92:6e:da:e8:bf:8e:4e:
81:e6:10:55:c4:87:15:59:6b:e8:58:37:15:39:5e:05:d3:cf:
af:a6:93:ab:5f:f0:ef:6f:60:6e:de:24:7f:c8:a3:6f:0a:0d:
b0:aa:8d:06:b3:32:7d:03:65:14:53:9f:5b:88:75:d9:8b:48:
bf:49:96:9a:38:67:9c:61:0d:2b:31:b3:77:d5:e3:99:d4:01:
82:a7:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org