Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/rirTAEjgC5iJiqWkpFP8ZVW4QgQ.roa
File: rirTAEjgC5iJiqWkpFP8ZVW4QgQ.roa (raw, json)
Hash identifier: kGYHkiqJAJWYts284UYFwHZwZoNnmTq6++N3EOaPxDk=
Subject key identifier: AE:2A:D3:00:48:E0:0B:98:89:8A:A5:A4:A4:53:FC:65:55:B8:42:04
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 1C8B231F
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/rirTAEjgC5iJiqWkpFP8ZVW4QgQ.roa
Signing time: Sat 01 Jan 2022 09:03:01 +0000
ROA not before: Sat 01 Jan 2022 09:03:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13097
IP address blocks: 159.255.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478880543 (0x1c8b231f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jan 1 09:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae2ad30048e00b98898aa5a4a453fc6555b84204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:55:02:60:9d:f8:51:10:bb:e0:9c:ed:75:
a6:0b:8e:92:ae:c4:cb:e9:15:0a:83:c7:a1:0a:01:
46:32:52:78:b8:5c:15:e1:6a:7a:6b:c4:2b:85:bc:
d0:27:a7:11:98:c0:4a:ad:fc:69:64:8f:95:9d:4a:
2c:57:21:cc:cd:ad:24:2f:35:9c:1e:be:02:f1:40:
01:34:64:f9:a1:d0:6d:9c:75:c4:b4:94:d7:ba:1b:
b1:f8:12:92:94:7c:6f:aa:5b:5d:92:21:64:ca:aa:
01:f1:7f:f8:65:a2:eb:d4:4e:1a:c5:01:cc:98:79:
58:b0:42:86:c5:a0:96:98:fe:16:80:90:a2:87:ad:
04:28:fb:4d:c2:b8:c0:98:56:be:59:2b:46:81:9f:
bb:42:7b:25:8c:82:fc:13:05:40:c1:f2:1c:16:b2:
c8:60:0f:dd:de:c5:f3:97:76:b0:e4:65:14:0b:31:
96:17:66:9a:88:10:f9:33:94:6f:69:58:db:30:e9:
fd:f4:77:68:8d:0f:fb:a1:ad:84:7f:b5:2f:ad:6c:
0f:25:fb:c0:c1:0d:11:b9:11:4b:86:97:06:71:e0:
d2:ee:a4:da:f6:2a:c9:7e:77:2c:f0:16:4d:34:4c:
24:0c:06:ba:eb:d4:f8:96:e4:4c:43:c0:7a:b9:31:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2A:D3:00:48:E0:0B:98:89:8A:A5:A4:A4:53:FC:65:55:B8:42:04
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/rirTAEjgC5iJiqWkpFP8ZVW4QgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.156.0/24
Signature Algorithm: sha256WithRSAEncryption
64:33:a8:96:78:7c:aa:49:09:61:2b:d1:ab:55:2e:c7:01:ec:
0c:4c:03:38:96:19:e6:d4:bc:b8:0e:1d:d7:cb:57:b6:75:75:
89:ee:dc:9e:1f:1e:ed:77:30:19:ea:74:2d:44:1b:88:44:ec:
70:fa:04:91:c9:be:35:11:0d:c8:92:d6:9f:f0:89:11:bd:e4:
d5:91:bb:ef:7d:87:ed:52:7f:a9:22:0e:55:ad:4e:95:43:48:
7c:43:7f:35:02:79:38:27:1c:2f:b2:2c:04:5f:7b:ff:d4:dd:
2e:9c:c5:25:68:76:d6:9f:7c:30:a8:93:72:1d:55:b9:e6:eb:
f9:c4:23:54:78:cb:62:f6:9a:c7:63:7a:cf:c0:36:06:0a:9d:
20:2d:15:d3:1c:8a:a3:98:97:40:51:a8:3a:49:13:e0:d3:5b:
61:e6:90:4a:17:1e:6e:75:c5:92:94:03:16:e0:3d:68:38:3b:
8a:55:f0:41:f6:e0:4c:a0:64:b4:c4:9e:9f:0d:0b:27:04:1e:
98:54:ea:99:77:14:2d:71:0e:ec:21:4e:50:8e:34:02:c1:ab:
42:db:ea:94:7b:23:9f:21:cc:7a:2d:92:dd:d7:f0:8c:00:a2:
17:cc:ad:23:4e:1b:74:83:69:5b:75:f6:ad:e8:80:ab:36:9e:
76:72:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:40 2024 by rpki-client on console-ams.rpki-client.org