Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/a87XSPvyUEqA-PFEC90-AJZWRVQ.roa
File: a87XSPvyUEqA-PFEC90-AJZWRVQ.roa (raw, json)
Hash identifier: Ayaj3i8zj33h9m4mLUlmPuFTMcwnyx22wjOKS4hGGJA=
Subject key identifier: 6B:CE:D7:48:FB:F2:50:4A:80:F8:F1:44:0B:DD:3E:00:96:56:45:54
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 06DC06A4
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/a87XSPvyUEqA-PFEC90-AJZWRVQ.roa
Signing time: Sat 01 Jan 2022 12:02:29 +0000
ROA not before: Sat 01 Jan 2022 12:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56911
IP address blocks: 139.28.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115082916 (0x6dc06a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jan 1 12:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bced748fbf2504a80f8f1440bdd3e0096564554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:54:a5:06:40:4d:13:5a:a5:65:d9:89:f7:
8b:df:f1:52:d9:ae:c8:eb:86:fa:1c:b2:68:60:93:
12:a5:35:80:0d:e5:dc:79:26:6a:1c:84:52:85:b4:
f9:e1:ec:74:ac:e5:14:04:43:48:db:d7:22:9d:9e:
26:aa:58:77:af:bd:e4:54:cf:d1:63:bb:e6:64:0f:
b0:be:bd:bc:e2:73:4c:29:f5:f0:28:8e:2c:92:05:
b4:81:0b:ff:52:a9:f5:7b:c3:ab:ab:5d:47:f6:33:
b8:4e:e3:0c:e5:f2:c8:2d:1a:88:14:01:22:97:7d:
27:00:d1:e8:38:0d:28:8c:15:1a:31:34:b6:bb:99:
86:6d:59:45:05:2e:6f:66:c2:2e:e6:de:5d:9c:bb:
46:0c:02:21:a0:cb:9b:b0:f8:a9:82:cc:fd:0b:af:
75:c5:a9:12:a5:93:8c:e5:d1:26:40:2f:49:8e:d8:
27:8f:48:15:c4:bf:de:07:2f:0b:71:b5:b3:1d:69:
6f:ae:15:7d:a8:a0:3b:0d:7a:50:02:f1:43:3e:c7:
a7:e0:3c:4d:56:d2:8b:e2:ee:40:8e:36:39:47:9e:
41:f2:05:19:eb:7c:7d:25:c6:ad:41:90:c8:40:82:
f2:25:38:85:a6:fc:43:45:72:71:5b:2f:ba:87:66:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:D7:48:FB:F2:50:4A:80:F8:F1:44:0B:DD:3E:00:96:56:45:54
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/a87XSPvyUEqA-PFEC90-AJZWRVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.157.0/24
Signature Algorithm: sha256WithRSAEncryption
04:68:44:0a:cc:9a:18:2c:a1:d3:cb:ca:d4:3a:a5:66:c0:a4:
eb:ce:01:0d:42:f0:4b:61:6a:de:49:b8:3f:ce:13:2b:57:ee:
92:a0:18:a8:1d:e5:67:bf:d7:f0:0b:be:43:a1:06:d9:1e:a2:
7d:0c:0d:83:ab:66:cd:32:9d:b0:15:4f:dd:2b:10:da:a7:87:
28:0b:02:44:fc:43:6c:3e:00:e7:54:bc:f3:dc:ae:2e:50:a1:
46:4a:ab:dd:ec:55:ba:9c:7d:1e:04:d4:a6:07:4b:70:1f:f4:
df:52:5e:f4:2e:ad:b2:d8:4d:46:f7:e9:26:52:d9:fb:ef:75:
e0:3f:66:87:c9:8d:ba:db:14:eb:ff:46:58:c4:53:eb:aa:c9:
bb:c0:f5:87:44:4d:48:05:fa:9e:c1:84:41:3d:4c:13:0d:99:
0d:07:cd:47:c6:ca:bd:e6:0d:0c:42:51:29:cb:11:74:25:a2:
56:e2:1d:62:10:d6:b8:2a:6a:ac:15:8c:9c:62:3d:90:25:cf:
28:92:4e:9c:75:9d:1d:10:c8:25:d0:82:88:dd:98:3d:7c:85:
5a:0d:85:5a:d6:37:9d:39:38:6e:a6:54:96:4d:77:12:b3:fe:
7c:24:f6:5b:21:d4:5b:5a:3e:15:dc:22:92:aa:49:79:a7:5c:
1c:fa:6e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:30 2024 by rpki-client on console-ams.rpki-client.org