Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/5Dk8Mrpki1KKbJgKUd5JI7B59ms.roa
File: 5Dk8Mrpki1KKbJgKUd5JI7B59ms.roa (raw, json)
Hash identifier: oz1GkUs8DOh+KfZOG7RZqC14IDiA0VBkNjS1/z9fxrU=
Subject key identifier: E4:39:3C:32:BA:64:8B:52:8A:6C:98:0A:51:DE:49:23:B0:79:F6:6B
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 6A14F0
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/5Dk8Mrpki1KKbJgKUd5JI7B59ms.roa
Signing time: Sat 01 Jan 2022 02:56:58 +0000
ROA not before: Sat 01 Jan 2022 02:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15557
IP address blocks: 143.196.125.0/24 maxlen: 24
143.196.124.0/24 maxlen: 24
143.196.126.0/24 maxlen: 24
143.196.127.0/24 maxlen: 24
143.196.130.0/24 maxlen: 24
143.196.144.0/24 maxlen: 24
143.196.143.0/24 maxlen: 24
143.196.159.0/24 maxlen: 24
143.196.158.0/24 maxlen: 24
143.196.0.0/24 maxlen: 24
143.196.1.0/24 maxlen: 24
143.196.17.0/24 maxlen: 24
143.196.16.0/24 maxlen: 24
143.196.20.0/24 maxlen: 24
143.196.21.0/24 maxlen: 24
143.196.18.0/24 maxlen: 24
143.196.250.0/24 maxlen: 24
143.196.252.0/24 maxlen: 24
143.196.253.0/24 maxlen: 24
143.196.163.0/24 maxlen: 24
143.196.162.0/24 maxlen: 24
143.196.164.0/24 maxlen: 24
143.196.160.0/24 maxlen: 24
143.196.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6952176 (0x6a14f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Jan 1 02:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4393c32ba648b528a6c980a51de4923b079f66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:1f:e7:3d:d5:36:d8:a1:fd:58:8f:ed:cc:44:
14:2e:97:0d:7f:89:d8:f5:54:a3:e8:e7:15:e5:60:
97:12:56:60:9a:a3:12:c2:12:87:70:c2:bc:23:3a:
63:f8:8c:0f:f0:81:26:0b:8c:f4:69:7d:44:a0:7f:
b0:cf:c5:8f:c5:0a:fb:1d:ce:88:26:5f:7f:b3:1c:
00:cf:7b:8f:04:b2:f0:80:91:c7:7d:f8:1c:a9:2d:
ce:3e:73:a6:d6:02:0a:17:56:9b:17:f6:61:b0:34:
12:1a:46:fc:51:fb:5a:2e:a9:26:b8:96:1f:58:30:
8c:f4:bc:8e:0b:6b:7e:f5:c8:88:ce:dc:43:37:6d:
62:e3:70:b9:36:96:04:65:ed:a9:8b:44:1e:f0:69:
6d:1e:ba:96:fe:ef:14:76:76:0f:28:cc:24:85:87:
1b:81:94:38:87:d1:d3:37:61:be:51:6f:55:34:22:
f6:fb:1e:3d:b7:84:47:f0:43:47:ca:58:95:90:a4:
fb:d6:98:c4:c7:99:ba:bf:2a:0a:60:46:ab:9e:10:
39:b7:a4:ee:d2:73:a7:37:e0:f4:79:df:6b:14:e9:
93:52:21:fb:6b:70:c4:09:b1:45:2b:dd:c2:83:a5:
f8:22:53:bd:ad:fc:be:da:41:5c:c0:1e:50:ff:49:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:39:3C:32:BA:64:8B:52:8A:6C:98:0A:51:DE:49:23:B0:79:F6:6B
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/5Dk8Mrpki1KKbJgKUd5JI7B59ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.196.0.0/23
143.196.16.0-143.196.18.255
143.196.20.0/23
143.196.124.0/22
143.196.130.0/24
143.196.143.0-143.196.144.255
143.196.158.0-143.196.164.255
143.196.250.0/24
143.196.252.0/23
Signature Algorithm: sha256WithRSAEncryption
12:f1:70:8b:3c:da:44:c4:8e:c3:15:1e:3e:77:b2:6c:0d:28:
d7:a2:0a:50:6b:ea:56:6c:19:c9:12:0c:8e:ed:ac:cb:21:a5:
72:d2:96:86:5e:c1:c5:89:2d:13:ed:c9:e3:39:2b:8f:c3:e4:
91:04:4a:af:c1:1f:5f:b1:e8:16:a1:a9:cc:5d:60:da:94:36:
bf:16:5e:76:ea:9f:23:3e:ae:12:9d:64:f8:14:3b:bb:e0:00:
e1:ca:67:40:b3:ed:05:a8:0e:0a:79:e5:f8:50:65:69:ca:59:
c1:a9:00:5f:ff:b8:3f:a3:c2:7b:fb:71:63:46:50:83:a5:98:
12:3c:aa:71:de:90:b7:29:23:88:11:30:45:1d:ea:fb:61:d9:
0c:d2:5a:71:e7:00:12:39:08:b1:b5:7f:01:a0:79:eb:03:01:
72:09:c0:0a:18:00:57:8d:bb:c1:4d:30:88:99:74:28:91:ca:
21:13:95:ca:7f:07:27:1e:a4:ed:f7:e7:b4:f2:f1:98:45:5b:
fe:64:c2:03:d3:2a:5c:7f:59:97:69:8e:a7:84:3a:38:e3:97:
e0:70:2b:57:e1:69:b8:8c:d7:20:3c:21:e9:05:fe:a3:e1:df:
b6:1e:1e:28:41:1f:a5:b2:df:6c:e6:25:7b:12:e3:f3:56:a0:
f9:62:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:11 2024 by rpki-client on console-ams.rpki-client.org