Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/B2O1bEq0eMQqSoHsz8CfAlgt0xI.roa
File: B2O1bEq0eMQqSoHsz8CfAlgt0xI.roa (raw, json)
Hash identifier: zsHP98S10zQ81rhkE1Gu5Uo/0zX9Yq5weBdSl+pXtd8=
Subject key identifier: 07:63:B5:6C:4A:B4:78:C4:2A:4A:81:EC:CF:C0:9F:02:58:2D:D3:12
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 044BE4D4
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/B2O1bEq0eMQqSoHsz8CfAlgt0xI.roa
Signing time: Sat 01 Jan 2022 06:54:26 +0000
ROA not before: Sat 01 Jan 2022 06:54:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 11251
IP address blocks: 157.23.224.0/20 maxlen: 24
2a0e:bbc0:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72082644 (0x44be4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 1 06:54:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0763b56c4ab478c42a4a81eccfc09f02582dd312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:4e:3f:eb:54:88:42:25:ae:b1:18:67:74:
d1:92:8c:47:2a:4f:5a:8d:0a:4c:20:67:65:5d:5d:
13:6b:46:c6:5a:63:8c:48:ab:82:18:8c:6b:bc:25:
ea:ee:cf:c9:a8:8a:21:20:f0:24:5c:f9:95:85:ad:
bc:76:dc:04:ef:c3:55:6f:a9:85:85:6a:b1:86:06:
67:14:43:cb:8e:3d:ad:ca:ab:88:c2:96:58:7b:f9:
55:c9:bb:29:64:f4:53:38:c8:c1:41:09:11:7c:68:
36:47:50:f0:39:3b:af:45:8e:6a:f4:47:c6:b7:81:
a9:23:8c:5f:dc:bd:2a:e1:6b:15:4b:5f:dd:e9:83:
70:cd:63:ce:ea:8a:31:6b:1c:2e:b4:f8:cf:f9:0a:
10:2d:87:54:32:67:6c:7c:1e:ce:a9:7f:a1:40:0a:
45:0d:e7:c4:cd:4e:6c:37:1b:ed:ea:e4:a8:5b:4e:
2e:bb:52:54:bb:c1:c9:4d:11:dc:f7:cc:83:ac:81:
61:a2:eb:89:95:e8:5a:43:0d:41:e6:1a:ed:64:3a:
4a:33:e3:01:c2:21:69:53:d1:52:0d:56:dc:9f:f2:
9c:8d:04:22:f6:28:0c:86:91:50:09:ba:15:ea:11:
36:3d:8c:b2:b1:97:47:a3:bd:ca:b7:a2:8c:82:a6:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:B5:6C:4A:B4:78:C4:2A:4A:81:EC:CF:C0:9F:02:58:2D:D3:12
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/B2O1bEq0eMQqSoHsz8CfAlgt0xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.224.0/20
IPv6:
2a0e:bbc0:8000::/40
Signature Algorithm: sha256WithRSAEncryption
5f:13:4e:bb:d3:bc:72:f0:4f:be:8e:59:6e:c8:b3:c2:20:db:
6c:7e:6e:10:f3:df:62:38:0b:73:a0:1f:b7:f4:f3:96:ae:0a:
5f:d2:86:fd:c3:cb:6a:b7:99:c2:c1:f3:b5:4f:c3:e3:5c:22:
0e:b2:35:74:1f:a5:3e:5d:53:f8:47:aa:05:4e:2b:55:9a:15:
a1:aa:5e:3c:31:04:f0:b6:d2:cb:15:7b:ed:46:27:03:d3:14:
4e:85:be:11:3e:c5:d5:68:fa:bf:3d:d6:41:5f:39:4b:d2:ad:
f4:71:ba:c9:31:22:8e:bf:41:57:18:6b:9a:d9:56:3e:0b:a0:
98:6d:0a:94:83:2d:87:81:54:24:0c:6f:34:9e:30:c2:97:48:
67:ff:c2:08:41:51:fb:39:1d:18:a0:c7:60:63:2f:f4:f0:4d:
b7:1f:d6:07:f9:96:7e:78:b0:c9:d2:68:4c:f8:6b:49:51:cb:
ae:2c:5c:d4:3b:d6:3f:f2:e3:0e:57:0b:f1:19:e8:09:6b:53:
9e:25:e1:31:52:13:83:68:b0:00:e2:5a:1c:e5:4a:68:91:6b:
2b:de:c3:fa:b4:cb:ac:b9:33:33:71:c7:9b:00:71:18:00:03:
cb:4c:09:1c:80:06:e7:23:79:c1:14:c2:55:71:e5:5e:b5:ab:
cc:75:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:32 2024 by rpki-client on console-fra.rpki-client.org