Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/avXsKGdTQ8JcUBtKUQK1oaFBkYY.roa
File: avXsKGdTQ8JcUBtKUQK1oaFBkYY.roa (raw, json)
Hash identifier: 3ONUmZ9tzyBy8ySAOy3zQfd8iKDdo9FGVuiJvfnI8DY=
Subject key identifier: 6A:F5:EC:28:67:53:43:C2:5C:50:1B:4A:51:02:B5:A1:A1:41:91:86
Certificate issuer: /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial: 096EB7AA
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/avXsKGdTQ8JcUBtKUQK1oaFBkYY.roa
Signing time: Fri 11 Mar 2022 18:33:50 +0000
ROA not before: Fri 11 Mar 2022 18:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56600
IP address blocks: 192.162.152.0/22 maxlen: 22
192.162.152.0/24 maxlen: 24
192.162.153.0/24 maxlen: 24
192.162.155.0/24 maxlen: 24
192.162.154.0/24 maxlen: 24
176.126.134.0/24 maxlen: 24
176.126.133.0/24 maxlen: 24
176.126.136.0/24 maxlen: 24
176.126.135.0/24 maxlen: 24
176.126.137.0/24 maxlen: 24
176.126.136.0/21 maxlen: 24
176.126.139.0/24 maxlen: 24
176.126.138.0/24 maxlen: 24
176.126.143.0/24 maxlen: 24
176.126.142.0/24 maxlen: 24
176.126.144.0/21 maxlen: 24
176.126.145.0/24 maxlen: 24
176.126.141.0/24 maxlen: 24
176.126.146.0/24 maxlen: 24
176.126.148.0/24 maxlen: 24
176.126.147.0/24 maxlen: 24
176.126.149.0/24 maxlen: 24
176.126.152.0/22 maxlen: 22
176.126.157.0/24 maxlen: 24
176.126.156.0/24 maxlen: 24
176.126.156.0/23 maxlen: 23
176.126.129.0/24 maxlen: 24
176.126.128.0/24 maxlen: 24
176.126.128.0/21 maxlen: 21
176.126.130.0/24 maxlen: 24
176.126.132.0/24 maxlen: 24
176.126.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158250922 (0x96eb7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Validity
Not Before: Mar 11 18:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6af5ec28675343c25c501b4a5102b5a1a1419186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:7c:e4:17:46:45:f8:b4:29:c4:85:06:7a:
70:b6:c3:f7:a9:35:fa:b0:6b:c3:4a:d4:a3:14:c6:
18:3f:b6:ee:0c:24:3e:56:e3:eb:8a:92:42:70:fc:
13:9a:55:d6:ae:06:a8:a1:98:e6:34:4f:18:41:91:
91:0f:f9:96:75:af:20:22:7b:22:10:8b:de:84:6e:
92:d6:1c:3c:5c:93:2d:f5:14:4c:f4:b8:96:27:ab:
b7:f1:76:36:49:30:27:b7:95:26:8c:ef:47:ae:31:
88:5a:4a:32:12:ba:8f:42:47:dc:bf:2a:75:c4:9f:
8f:83:32:a0:a2:f3:46:a6:0a:7a:5d:79:b0:ff:a1:
7c:37:95:b9:71:52:c6:b5:06:1e:3f:0a:b8:44:fb:
aa:95:16:fa:48:92:1e:ee:4a:fe:df:8d:43:94:5e:
b5:05:9a:0b:5a:6e:a4:9c:5e:c4:28:36:25:5e:37:
d0:2d:89:fa:25:d3:99:f7:ff:56:0d:c0:4a:2a:d6:
05:fe:7b:7c:ff:14:5a:ae:3b:1f:1e:ff:f5:42:ec:
2c:e5:96:98:d9:15:70:57:f2:2f:9a:f4:44:73:2c:
03:5c:86:f0:a8:69:ab:44:53:c7:b3:83:c4:01:6f:
68:1d:93:b8:61:e2:d2:59:c9:70:c5:c7:71:56:06:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F5:EC:28:67:53:43:C2:5C:50:1B:4A:51:02:B5:A1:A1:41:91:86
X509v3 Authority Key Identifier:
keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/avXsKGdTQ8JcUBtKUQK1oaFBkYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.128.0-176.126.157.255
192.162.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:23:fb:27:05:6c:0e:08:c5:9e:3e:fa:8d:fd:a9:ec:0c:c8:
a7:2c:14:12:0e:39:5a:6b:76:6d:2b:53:31:60:3a:64:df:99:
fe:8f:a8:6b:e2:64:16:ef:5c:7f:30:93:8d:0c:2f:54:25:e1:
6b:54:cf:53:0c:f2:d8:02:fe:e5:3b:32:a5:a4:be:27:b7:96:
b7:a9:db:70:7a:e9:78:6c:c1:4f:0e:5b:78:4d:de:40:d0:fd:
f5:d1:06:ee:55:30:63:bd:14:f7:16:18:d6:2e:e4:17:30:d5:
4c:9b:d9:45:dd:7d:4b:b3:5e:49:0b:2a:00:d2:14:38:3e:ca:
74:58:0c:6c:3a:69:f2:11:da:85:d7:11:ab:e5:c8:b4:e0:e7:
a4:4f:ed:70:63:47:ca:b8:85:65:60:4d:26:ee:73:65:0e:a7:
1d:15:09:97:b2:c1:44:dd:69:ed:60:63:f2:3e:b8:05:ed:82:
da:5c:4d:4a:3f:d6:2e:18:b3:45:95:84:c7:2e:c3:62:bb:99:
db:78:21:5b:b7:ca:8a:dd:54:21:fe:d5:af:b2:db:cf:61:5b:
cf:43:6a:f3:d0:dd:5f:72:dc:a8:e5:05:c6:42:73:31:41:55:
15:08:18:ba:f4:05:7f:e2:38:0f:bf:82:3f:75:0b:06:d2:17:
67:cb:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:24 2024 by rpki-client on console-ams.rpki-client.org