Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/peciCCJG7_usb6_r37NkiGqh8zI.roa
File: peciCCJG7_usb6_r37NkiGqh8zI.roa (raw, json)
Hash identifier: bgPw+Qu5cn/djXcSgDH3AYA+cLMlFcec+VlHzhCzzl8=
Subject key identifier: A5:E7:22:08:22:46:EF:FB:AC:6F:AF:EB:DF:B3:64:88:6A:A1:F3:32
Certificate issuer: /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial: 13269DC6
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/peciCCJG7_usb6_r37NkiGqh8zI.roa
Signing time: Sat 01 Jan 2022 06:59:16 +0000
ROA not before: Sat 01 Jan 2022 06:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 137.248.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321297862 (0x13269dc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Validity
Not Before: Jan 1 06:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5e722082246effbac6fafebdfb364886aa1f332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:22:24:df:fa:62:af:ef:62:58:19:27:39:
f9:9f:77:a4:db:2e:a4:70:87:01:6f:be:f3:50:fb:
49:33:9c:89:7a:9e:e3:10:67:97:05:f0:77:b4:64:
47:4d:f2:d9:1b:39:86:db:9d:60:fa:28:5a:cc:03:
7e:ae:a2:8d:92:2b:75:9f:da:88:71:71:fe:96:41:
cd:a6:80:03:d6:2f:58:fc:4c:80:31:75:e0:3c:94:
d8:ad:eb:a0:01:31:4a:81:4a:2d:b2:90:54:c7:06:
61:3d:7a:08:41:ed:c5:b7:f8:38:4a:38:1c:25:21:
f2:c0:f2:25:e7:3f:7a:ba:c9:a6:92:f2:90:5b:57:
17:ed:82:99:59:0d:0a:f7:64:1d:b1:d0:5b:37:05:
8c:ea:bd:83:7f:75:47:61:54:67:ad:27:3b:aa:1a:
4c:6d:6b:cf:32:03:48:cb:b0:c1:34:0c:c5:84:94:
8b:ac:50:a9:4b:33:c4:0e:c2:66:ee:49:e8:5f:c3:
d2:34:d7:a7:9f:6d:58:bc:64:f3:61:aa:88:d2:64:
33:4d:4b:78:01:8a:56:cf:b0:0c:4c:b1:4f:ab:f2:
c8:10:cc:65:c3:5f:65:1b:fa:bd:33:cf:dd:2b:a1:
01:ed:27:e4:35:d3:15:0c:56:81:48:33:75:56:e7:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E7:22:08:22:46:EF:FB:AC:6F:AF:EB:DF:B3:64:88:6A:A1:F3:32
X509v3 Authority Key Identifier:
keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/peciCCJG7_usb6_r37NkiGqh8zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bc:39:24:a7:18:b0:66:c2:51:41:c5:e4:69:e7:8f:76:ae:71:
d9:82:41:45:2e:3d:d8:51:19:75:6c:e2:59:18:1c:57:3a:96:
1d:c7:75:d1:c2:0f:77:e3:f1:c6:57:b3:cb:25:7e:c0:f0:17:
20:53:12:95:39:b4:19:01:5a:2d:13:c3:7a:1f:96:ff:20:1f:
16:db:7e:ee:23:21:91:e4:af:18:d7:67:ec:c9:7e:c6:b2:ff:
92:fb:f8:ee:53:3c:7e:33:6a:98:9b:27:fd:79:76:1e:1b:10:
37:57:ec:5a:00:c1:4b:43:f0:e8:ad:c0:8b:26:93:d4:a2:75:
4d:52:03:de:02:bb:7d:03:40:eb:fa:3f:63:53:22:58:7a:63:
0b:88:b5:72:f3:02:9e:a5:bc:eb:4a:3c:dd:72:c2:4d:bd:fe:
5f:a8:dc:dd:1d:fa:0e:9e:a3:5a:12:a8:8c:ad:4f:51:ba:f3:
16:a7:eb:c2:fa:8a:d8:95:37:a9:5a:26:60:86:11:b2:5b:2c:
77:d5:c4:34:a7:fb:82:f4:7f:77:1e:64:71:0d:80:14:55:c3:
9f:ef:25:83:67:26:ee:5f:57:bd:8b:59:48:48:54:43:d1:61:
f7:df:4d:ea:de:60:da:ef:d5:c7:b5:5f:bf:8b:36:22:c2:da:
34:4e:be:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:23 2024 by rpki-client on console-ams.rpki-client.org