Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/XBo9EBcM8Wllm6hYNySdwtTXQas.roa
File: XBo9EBcM8Wllm6hYNySdwtTXQas.roa (raw, json)
Hash identifier: sqZIU1Buzbj8nRCHR0diBhDMHWn9lzgJy2IciZE56/g=
Subject key identifier: 5C:1A:3D:10:17:0C:F1:69:65:9B:A8:58:37:24:9D:C2:D4:D7:41:AB
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 044DE2C2
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/XBo9EBcM8Wllm6hYNySdwtTXQas.roa
Signing time: Sat 01 Jan 2022 06:54:27 +0000
ROA not before: Sat 01 Jan 2022 06:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23344
IP address blocks: 157.23.224.0/20 maxlen: 24
2a0e:bbc0:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72213186 (0x44de2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 1 06:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c1a3d10170cf169659ba85837249dc2d4d741ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:1e:f6:30:18:07:fc:1b:38:4d:ff:c5:20:
96:a0:4b:6e:d8:d1:d0:f0:d8:03:f1:b7:48:b5:b8:
df:48:65:06:d5:76:51:8f:11:8a:c7:43:9b:3e:0c:
60:fb:14:9e:2e:1f:f1:05:ca:3b:c9:d8:4c:b1:7f:
c5:89:4d:d7:d8:67:61:05:b4:99:04:86:79:e2:45:
28:63:da:53:31:95:1d:77:2e:e1:b7:27:1d:51:6b:
f5:3e:56:4a:2c:2b:66:85:03:9a:96:c0:80:f1:e7:
82:9b:d0:ac:2c:b7:a3:49:25:96:d6:8c:f2:f4:0b:
64:c9:fb:38:d4:50:c7:9c:95:81:52:b3:cd:a3:76:
79:f2:e6:ea:53:be:a4:14:75:9c:5f:da:71:01:23:
59:75:dd:8c:ea:d2:88:00:59:ae:17:07:ae:2b:f5:
83:1e:35:55:f0:2f:f9:3b:f8:d8:f3:db:e7:ac:73:
02:d2:25:59:38:89:26:3d:4b:78:39:0b:3e:8c:05:
47:3d:8b:72:75:f0:2c:e9:ed:34:1c:2a:f8:87:2d:
db:dd:00:d9:01:8c:8c:51:19:77:6f:c0:da:5a:af:
7f:25:1b:1f:67:b4:09:db:7c:33:e8:9e:be:94:50:
ef:2a:a1:cd:cc:bc:29:9c:a6:d5:7a:25:71:ff:93:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:3D:10:17:0C:F1:69:65:9B:A8:58:37:24:9D:C2:D4:D7:41:AB
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/XBo9EBcM8Wllm6hYNySdwtTXQas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.224.0/20
IPv6:
2a0e:bbc0:8000::/40
Signature Algorithm: sha256WithRSAEncryption
8e:c5:f9:56:67:3c:10:9b:c0:e5:8a:ca:42:f6:44:ad:1f:f9:
65:55:c6:7b:16:7c:36:30:f2:45:6f:b4:33:a2:61:f2:05:4f:
52:b1:74:28:5a:fc:9f:26:fb:e1:4c:fc:a0:d5:99:73:33:79:
26:e6:cb:ba:a2:77:98:b9:b4:12:38:c5:28:ef:a8:60:1a:ca:
95:ab:5c:99:43:3c:8a:d3:82:80:20:86:53:75:4f:ff:52:ba:
22:cf:e1:13:56:36:e0:6a:e3:38:84:0a:bb:b3:2c:ce:d5:0e:
1a:2d:7c:66:a8:e0:c4:e5:e5:03:c8:19:7e:6e:86:c6:f5:29:
72:be:dd:1e:94:f0:29:e5:30:af:5c:44:12:b3:05:aa:86:46:
df:a6:34:ff:be:e1:ff:61:01:1f:0a:aa:0c:2e:4e:f7:f6:3e:
71:0d:23:c5:be:8e:40:98:00:c0:08:3b:ce:6b:e6:13:3b:87:
e3:b1:27:bf:da:3b:72:ac:45:e3:00:44:47:4d:91:15:63:a2:
8b:4d:69:d2:dc:11:a0:6a:8f:61:19:e2:c1:86:c4:75:77:fd:
ce:0b:35:35:37:01:24:d4:af:d5:5c:b4:94:8e:b8:b5:b7:3c:
18:65:b8:59:c5:0b:b9:38:e6:00:4f:76:7e:25:df:2f:1c:5a:
61:74:4f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:32 2024 by rpki-client on console-fra.rpki-client.org