Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/V5zI5BFO9b_Y8yIqNFRJz3kdDsU.roa
File: V5zI5BFO9b_Y8yIqNFRJz3kdDsU.roa (raw, json)
Hash identifier: WL5FR7KoNSyV6EqTTKPcPWTMcDajQH8TAFl9IbE0wPU=
Subject key identifier: 57:9C:C8:E4:11:4E:F5:BF:D8:F3:22:2A:34:54:49:CF:79:1D:0E:C5
Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial: 06E58255
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/V5zI5BFO9b_Y8yIqNFRJz3kdDsU.roa
Signing time: Sat 01 Jan 2022 14:08:44 +0000
ROA not before: Sat 01 Jan 2022 14:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12551
IP address blocks: 158.47.0.0/16 maxlen: 16
146.133.0.0/16 maxlen: 24
146.133.124.0/24 maxlen: 24
146.133.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115704405 (0x6e58255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Validity
Not Before: Jan 1 14:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=579cc8e4114ef5bfd8f3222a345449cf791d0ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:5a:f8:58:68:76:04:7d:18:0d:4f:b0:78:
54:d4:46:ef:b8:5a:c7:c1:d0:a2:45:c1:27:8f:66:
58:7f:88:a9:59:56:2e:90:c7:3d:fd:59:8b:1f:94:
53:d8:31:ab:5f:7e:5b:81:63:94:d5:a6:81:d6:9f:
76:c0:ff:71:52:a8:a8:66:ff:1e:74:29:42:8e:5a:
16:ce:84:bf:1a:1e:41:93:50:81:60:53:91:d4:1c:
a4:d2:da:39:c2:dd:aa:c6:48:0c:2a:2f:8a:36:cf:
60:4c:56:26:4f:5b:8b:ae:5b:96:b5:c1:ee:17:cd:
e5:98:90:bc:62:50:f0:ab:13:50:da:a6:f1:c7:d3:
6c:f0:d7:1b:0d:10:1f:5c:04:8a:1f:bf:17:13:4e:
fc:77:f5:53:b9:d7:74:e6:c4:ec:bd:1b:d6:61:ff:
e6:51:9e:ba:a8:ff:49:db:75:23:a7:36:60:a2:c2:
83:f2:16:96:cc:31:f4:ab:30:ce:ad:28:f1:ae:b6:
f2:36:7b:02:14:c7:31:21:f6:3b:0f:ed:4f:3c:4f:
ba:f5:79:0f:3d:0d:1a:8b:25:70:60:5f:27:f6:d1:
36:8d:a4:f0:3d:be:64:14:6e:ff:81:1c:4c:be:53:
5d:24:d5:e3:98:8a:67:7c:c9:a9:d1:5d:cd:c5:48:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9C:C8:E4:11:4E:F5:BF:D8:F3:22:2A:34:54:49:CF:79:1D:0E:C5
X509v3 Authority Key Identifier:
keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/V5zI5BFO9b_Y8yIqNFRJz3kdDsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.133.0.0/16
158.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:05:aa:93:5d:74:aa:c2:8c:32:be:66:29:54:5b:05:05:03:
4a:93:6d:3a:22:9c:5f:eb:81:1f:44:8c:d0:02:f9:17:34:dc:
13:99:97:65:b8:2f:e4:23:0d:75:e1:4a:07:1f:07:f1:e8:a5:
3f:25:97:ef:4f:5f:e6:57:87:67:15:ad:8b:dc:b0:35:38:4c:
0e:b9:c4:c4:c1:a4:e3:87:fc:25:cc:b4:04:2f:00:d9:e9:05:
ee:ad:3b:48:d5:ee:b7:c2:a7:b5:66:b0:11:a1:33:00:8f:70:
db:23:00:57:56:75:6e:f1:4e:3d:c4:e5:62:68:92:35:f6:14:
fd:75:30:08:25:08:aa:39:f2:a3:70:12:7d:a1:8e:98:3c:85:
b3:75:d2:78:18:33:76:a5:41:26:c9:5a:ba:29:82:bc:76:dc:
4b:0c:38:7f:59:35:d7:9d:70:42:cc:f3:aa:da:41:33:ae:22:
66:4b:35:5f:f2:3f:f3:f3:ff:fd:80:9a:ba:93:6d:11:86:ef:
fd:53:34:20:e6:c0:77:4d:dc:b2:83:10:eb:e8:31:36:0f:13:
33:6e:cd:c0:64:3c:fd:86:d1:5e:cc:47:a3:a4:0a:ea:db:a4:
22:39:93:5b:8f:61:5b:11:0e:af:f2:47:63:c5:1a:d3:54:1c:
5d:10:ad:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:24 2024 by rpki-client on console-ams.rpki-client.org