Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/O-rAjzD2uwkYm7Ec8Mz0AqaZZeg.roa
File: O-rAjzD2uwkYm7Ec8Mz0AqaZZeg.roa (raw, json)
Hash identifier: dxlfwOiFuzn36MEE68yMUZl0cE4h9h/T9gzifRhAmtQ=
Subject key identifier: 3B:EA:C0:8F:30:F6:BB:09:18:9B:B1:1C:F0:CC:F4:02:A6:99:65:E8
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01847B7A9DC86FDBD614A0909F324637F70B
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/O-rAjzD2uwkYm7Ec8Mz0AqaZZeg.roa
Signing time: Tue 15 Nov 2022 13:29:04 +0000
ROA not before: Tue 15 Nov 2022 13:29:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212609
IP address blocks: 171.33.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:7a:9d:c8:6f:db:d6:14:a0:90:9f:32:46:37:f7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Nov 15 13:29:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3beac08f30f6bb09189bb11cf0ccf402a69965e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1c:18:41:c6:25:1b:35:c6:ff:94:a9:82:dc:
48:14:17:48:67:1c:ce:53:15:cb:f0:7e:f5:36:9c:
01:4f:9e:54:4d:08:26:dc:32:27:48:9f:a6:10:92:
97:57:27:7a:82:78:2f:26:b7:59:10:9e:23:a7:31:
a0:8a:67:9e:e3:89:c6:e4:c1:4b:e7:0d:4a:35:c4:
30:70:91:cb:fe:08:77:04:1a:58:c2:3a:7f:af:27:
26:cf:de:dc:c8:d2:49:a8:89:3c:70:08:4d:54:be:
46:16:63:a9:ad:08:fc:e1:e1:b9:89:7f:ba:a1:5d:
83:ab:e1:60:c7:09:3d:24:03:c7:03:ca:5a:a6:d2:
60:f8:dc:74:4f:69:b4:34:0e:2c:51:92:b5:b9:63:
a1:91:a1:70:37:8b:63:bc:c7:83:f0:4c:fd:99:40:
5f:92:57:40:70:5a:af:5f:35:2d:f8:92:d2:26:13:
bf:c0:20:96:63:6d:ba:9e:d5:ef:a3:70:71:51:49:
e3:59:c9:2c:1e:69:9b:49:0a:a9:94:fd:bd:38:c5:
26:1d:3f:df:a0:92:38:96:73:d7:53:6e:c3:00:dc:
0a:e5:b3:91:00:7e:c8:b3:95:f1:bd:c7:e9:f6:f0:
3c:d8:62:de:19:00:48:15:01:d2:d6:b4:cc:b4:21:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EA:C0:8F:30:F6:BB:09:18:9B:B1:1C:F0:CC:F4:02:A6:99:65:E8
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/O-rAjzD2uwkYm7Ec8Mz0AqaZZeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.240.0/24
Signature Algorithm: sha256WithRSAEncryption
15:94:fa:7a:f8:00:5c:13:e1:70:16:71:be:84:d4:23:67:0c:
59:a8:20:2d:67:6f:ec:27:66:a0:54:16:65:2c:53:9e:63:c0:
4e:d8:6b:9f:25:dd:75:fd:a2:e5:6b:55:c9:e3:bd:8c:3b:ff:
8f:9a:07:d6:be:82:6d:f5:78:bc:c2:c8:6e:53:6e:78:6d:5a:
9e:60:fd:de:d9:0e:5f:ba:10:a9:cb:dd:e5:fd:45:9f:a2:84:
dc:7e:55:5c:3c:ed:87:7e:bf:5b:73:10:40:52:2b:1e:86:bc:
4a:06:98:8d:c7:dc:dd:55:97:02:1c:e5:b8:a6:15:02:6c:cb:
c7:a8:e2:2d:bd:fb:6c:7a:ed:3e:64:ab:05:91:32:50:53:38:
fc:b1:cf:54:99:2d:0a:af:c9:b9:7e:16:3f:e6:72:8a:45:c7:
05:3b:4c:4d:cc:98:34:e2:ba:60:b3:44:a8:f7:04:63:c5:80:
22:b6:63:33:21:8f:de:da:81:5f:30:0c:1e:8d:36:82:93:50:
41:73:80:73:cc:b0:41:9f:b2:de:a8:99:c4:ea:61:9f:9d:f2:
fb:b0:5b:5c:91:87:20:19:32:40:d0:d8:5c:42:97:63:15:39:
c5:66:6e:42:4d:e6:ea:d0:08:e3:ee:a7:fe:fc:1a:0b:34:78:
86:c0:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org