Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/1V0uItqV5GgoLTmOh285lCP1MRE.roa
File: 1V0uItqV5GgoLTmOh285lCP1MRE.roa (raw, json)
Hash identifier: MAD7/88rHDs0dGRS0evFBUKGUINl7kffjky00OEwQV8=
Subject key identifier: D5:5D:2E:22:DA:95:E4:68:28:2D:39:8E:87:6F:39:94:23:F5:31:11
Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial: 1620D613
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/1V0uItqV5GgoLTmOh285lCP1MRE.roa
Signing time: Sat 01 Jan 2022 14:05:56 +0000
ROA not before: Sat 01 Jan 2022 14:05:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12662
IP address blocks: 192.162.132.0/22 maxlen: 22
192.162.132.0/23 maxlen: 23
192.162.132.0/24 maxlen: 24
192.162.135.0/24 maxlen: 24
192.162.134.0/24 maxlen: 24
192.162.134.0/23 maxlen: 23
192.162.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371250707 (0x1620d613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Validity
Not Before: Jan 1 14:05:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d55d2e22da95e468282d398e876f399423f53111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:39:60:66:43:07:02:b8:5a:51:f6:b4:9e:
dc:4a:a1:1b:47:56:1c:23:1e:27:dd:ce:58:bd:10:
8a:a8:4e:de:d4:74:46:09:6d:b6:c1:4b:9c:45:d9:
06:f2:82:5c:e7:c0:9a:79:04:cc:d7:67:02:93:64:
f7:0f:bc:4e:28:1f:1c:9d:a3:c0:cd:2e:01:39:9a:
9f:13:1a:0d:1c:6d:09:97:70:12:52:4a:b1:6d:44:
a0:cc:4d:21:c4:fa:55:3c:8e:19:67:42:20:6e:8d:
a1:df:d5:43:ac:0f:5e:14:44:7b:20:6f:9b:63:27:
7e:71:46:c4:24:e1:74:75:e7:24:52:6a:25:e0:fb:
92:6b:40:b3:66:58:ad:ed:a0:6d:5e:88:e5:66:dc:
7a:82:82:e2:9b:c1:9e:65:e6:e1:23:4f:dc:ab:b6:
e1:0d:c0:4c:d4:87:79:9e:fd:09:d4:7d:a0:ac:85:
0e:11:ad:9d:5d:c7:97:36:62:5f:9e:47:6c:29:72:
5f:57:56:e7:92:71:19:76:b7:2c:d3:bf:bb:7a:91:
2e:f2:f0:bc:73:10:27:9a:e7:f9:8d:1c:95:5a:ae:
14:3c:d9:80:8d:d8:2d:30:4e:34:97:7f:b1:c9:ab:
24:95:ed:77:6a:0b:e7:4d:ab:3e:4f:16:fd:fb:0e:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:2E:22:DA:95:E4:68:28:2D:39:8E:87:6F:39:94:23:F5:31:11
X509v3 Authority Key Identifier:
keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/1V0uItqV5GgoLTmOh285lCP1MRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:5a:9c:8d:29:36:c3:ca:77:0a:c8:7c:41:db:f1:f9:22:48:
b5:f6:a1:ee:78:b1:64:0b:3e:fa:3d:95:59:db:6a:9f:df:ef:
4b:fe:d2:3e:20:75:04:51:8a:8f:7e:b1:63:35:96:77:df:39:
58:b7:08:5b:2e:e4:f1:a2:52:00:44:2b:91:f4:20:fd:33:75:
b9:b7:f4:7f:d3:62:4d:89:5b:74:45:a2:b5:cb:37:af:43:7c:
f8:56:9e:7d:f7:df:e4:7d:6a:2c:ad:1d:11:11:5b:99:be:d1:
15:ac:d8:8c:cb:66:9c:5b:a5:48:db:ca:c5:1f:8a:70:c7:d2:
7d:15:f5:ef:3d:d8:a2:48:4c:1b:34:b7:15:5c:7b:2d:b8:d8:
98:e0:78:e9:6f:32:e8:75:c2:65:37:82:62:f2:2a:d9:2d:9c:
c7:51:b0:41:4b:71:de:e5:2d:dd:12:1a:63:93:51:cd:e6:4e:
bd:3d:d9:7d:68:00:eb:92:14:f3:6a:60:76:bf:3e:c1:f1:73:
ad:6e:1c:b6:9c:e3:89:6c:29:dc:00:8c:af:ee:c2:6a:11:e3:
c5:89:f1:d2:fc:4a:3a:b3:39:aa:e4:79:31:76:fd:d8:54:4c:
6f:75:ac:f9:99:38:ac:a5:29:1f:73:02:cf:a9:f7:56:30:cc:
a4:86:d6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-fra.rpki-client.org