Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/kSV2EUAC-t37hqFwG_Fv_a1SY5o.roa
File: kSV2EUAC-t37hqFwG_Fv_a1SY5o.roa (raw, json)
Hash identifier: 7NbYNXiC6PytZoQB9aZG0RtXQLHaUrgX+yMKokst++E=
Subject key identifier: 91:25:76:11:40:02:FA:DD:FB:86:A1:70:1B:F1:6F:FD:AD:52:63:9A
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 03EED9B2
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/kSV2EUAC-t37hqFwG_Fv_a1SY5o.roa
Signing time: Sat 01 Jan 2022 09:54:15 +0000
ROA not before: Sat 01 Jan 2022 09:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139138
IP address blocks: 199.182.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65984946 (0x3eed9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 1 09:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=912576114002faddfb86a1701bf16ffdad52639a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:4c:05:00:0b:59:e4:78:09:37:08:4d:c9:
eb:3b:7b:fa:03:08:46:35:7f:b5:3e:2c:ce:32:60:
67:13:8a:52:c6:0e:6c:e3:b1:d5:44:e0:16:3f:b0:
78:a7:a0:e2:1a:db:a1:d2:c6:18:7c:5f:8b:44:72:
03:13:51:98:64:bd:e5:b1:2e:eb:c2:ba:56:e4:00:
a2:75:14:3e:38:f6:df:b2:ed:a6:34:7d:8b:f1:01:
92:1a:72:b1:6a:12:8c:d5:e0:b3:54:0e:b4:70:37:
9c:96:79:0b:6e:08:bc:57:84:43:1c:e7:60:8c:a0:
8a:10:80:35:8f:a5:2b:6e:5f:63:88:84:90:5d:0c:
31:3c:5f:05:97:af:50:ec:7e:dc:ca:69:7c:2a:64:
97:e3:6e:95:2c:14:7f:e9:e2:f4:a0:85:4c:b0:40:
50:b3:6f:f9:65:14:0f:de:07:4e:d9:58:2f:76:c3:
b3:83:aa:a0:6e:97:8c:16:6f:36:88:e3:18:86:28:
33:71:e0:23:0b:fb:a9:d1:9b:04:9b:f5:10:55:b5:
ed:01:c0:c5:88:28:52:58:04:8b:be:f9:ec:58:ed:
75:2e:92:ba:7f:b5:88:d7:38:8a:9a:4a:fc:6e:64:
53:6f:5e:70:27:62:de:07:6b:82:e8:99:ee:d6:1c:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:25:76:11:40:02:FA:DD:FB:86:A1:70:1B:F1:6F:FD:AD:52:63:9A
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/kSV2EUAC-t37hqFwG_Fv_a1SY5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.239.0/24
Signature Algorithm: sha256WithRSAEncryption
01:38:d1:9b:21:2a:4f:e1:4d:b6:cb:b4:d3:87:c2:30:cd:30:
a5:3e:8b:89:18:82:81:95:c0:f1:d3:03:9c:e8:69:43:2b:1f:
55:98:7f:d0:c8:6d:76:82:41:58:ff:b0:6a:13:99:17:0e:a4:
38:e7:06:92:7c:dd:fc:f9:3f:6c:d0:ce:07:07:e9:38:9e:7c:
13:a6:39:50:e4:1c:30:cf:69:a1:a5:fa:88:65:2b:db:13:8b:
70:c0:97:2c:9e:f1:c3:08:e2:60:b9:d1:6c:a7:69:31:90:5d:
6d:d8:43:8e:e7:0d:52:7c:07:5c:ba:8a:cb:4e:3e:d5:8f:1b:
1f:fe:e6:48:8e:43:7f:3b:5e:99:fe:be:3b:cb:24:11:34:34:
a5:8f:8e:9b:48:68:8e:bb:58:03:42:19:aa:11:55:99:9a:a4:
fb:40:9e:fc:9d:2d:8d:77:a4:fd:05:6c:c4:1d:fd:9f:1f:14:
dc:2d:e2:a5:3f:74:3e:04:2c:2d:45:63:38:c8:97:a8:18:9a:
3a:86:05:d8:22:56:2d:c7:b4:14:73:e2:9c:3b:79:ea:8c:fb:
a7:9f:ea:43:7d:07:57:05:7a:bc:62:3f:68:4c:dd:5b:22:c3:
4a:cc:60:69:87:20:92:62:a7:1c:21:2d:ea:40:86:95:5c:a0:
ce:e8:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:50 2024 by rpki-client on console-ams.rpki-client.org