Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/pIbjfmUkVKT-ViZdta6WbNVuF_Q.roa
File: pIbjfmUkVKT-ViZdta6WbNVuF_Q.roa (raw, json)
Hash identifier: WXQTkfibrRPFYOiechzypeJRu3f8tIYCey8LUep/dGI=
Subject key identifier: A4:86:E3:7E:65:24:54:A4:FE:56:26:5D:B5:AE:96:6C:D5:6E:17:F4
Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial: 0182248DB63938C4F592BAD892BD6FD5231C
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/pIbjfmUkVKT-ViZdta6WbNVuF_Q.roa
Signing time: Fri 22 Jul 2022 06:17:23 +0000
ROA not before: Fri 22 Jul 2022 06:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8447
IP address blocks: 157.247.0.0/16 maxlen: 24
192.102.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:8d:b6:39:38:c4:f5:92:ba:d8:92:bd:6f:d5:23:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Validity
Not Before: Jul 22 06:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a486e37e652454a4fe56265db5ae966cd56e17f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:9c:a0:ad:97:d9:82:99:46:05:e8:46:cf:
cf:c9:9a:b5:3a:44:1f:ba:e3:4d:00:05:ce:40:c4:
b9:2e:33:a8:00:51:a6:de:b9:8a:f8:9f:f0:5a:00:
d7:7c:dc:f8:30:59:3b:d4:0c:9f:52:7c:13:11:50:
8a:64:3f:49:ea:96:05:45:d7:d7:34:8b:d8:e8:f6:
0b:84:23:5d:10:7d:13:be:ab:92:41:52:e2:fe:ca:
ea:8d:fd:aa:e7:bb:51:61:bf:d4:cb:b8:60:b0:80:
d9:4e:e8:ba:20:6e:b6:65:07:1e:3d:a2:00:f5:cd:
fd:c3:2e:9c:90:85:6c:1a:69:0f:af:f5:9e:17:43:
d1:59:29:62:83:4f:d8:72:b1:3c:3c:9e:f1:e8:de:
14:4b:63:87:a5:45:11:43:cb:e0:1e:3a:4c:5f:67:
8c:cf:ef:9a:f5:c6:79:f2:e3:26:4c:ec:da:f2:74:
92:98:73:53:6f:66:eb:86:32:de:2e:b0:90:17:e1:
2a:d7:00:d3:eb:a0:3c:8c:f1:76:64:0c:7a:aa:bf:
19:20:e4:98:d5:5e:18:b8:05:cd:c3:82:83:15:87:
a9:42:b5:74:c8:a5:93:ee:18:5b:06:49:3e:b3:cc:
94:40:b2:52:b5:8b:04:f5:2d:26:fc:64:1f:8e:e3:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:86:E3:7E:65:24:54:A4:FE:56:26:5D:B5:AE:96:6C:D5:6E:17:F4
X509v3 Authority Key Identifier:
keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/pIbjfmUkVKT-ViZdta6WbNVuF_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.247.0.0/16
192.102.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e5:ff:48:b1:8a:d4:72:98:46:62:90:1c:90:81:73:49:f4:
aa:78:58:29:6a:8e:33:bc:c2:8e:1b:55:37:e5:e2:91:f2:59:
cd:b8:9c:27:59:4e:85:08:c7:ad:6d:14:34:15:85:ce:6d:74:
18:4b:bd:b8:a1:f2:aa:8b:be:53:94:ca:08:30:5d:58:49:87:
2c:eb:2c:7d:1c:45:de:5a:20:20:b5:97:80:87:fe:a0:bc:8d:
a7:66:fa:c1:1f:23:f8:5e:e3:be:b4:cf:d4:94:77:a0:ba:ee:
3a:b0:fb:7d:b6:11:49:ed:f5:b9:ff:c2:d8:0e:a6:00:6d:b4:
34:99:6d:d0:1c:34:2e:4a:61:39:ec:b4:bf:40:98:9f:7c:33:
4a:4c:93:c4:4e:7a:5f:9a:36:41:17:e8:20:48:02:02:42:30:
33:1e:b2:f8:14:68:83:eb:8a:75:a9:48:c3:4b:a0:6f:73:f7:
bd:17:c1:55:16:82:07:88:0a:c9:aa:22:b5:db:e0:f8:98:cd:
ac:f8:4b:b2:40:a6:10:d2:c4:ed:41:15:4a:a8:b2:3c:e8:be:
11:65:94:2c:3d:86:3a:c1:ab:d4:92:59:36:bb:ac:5c:c2:74:
80:74:cb:93:9c:76:fb:43:6e:ab:d8:fa:0d:0f:4a:57:fc:aa:
8b:2d:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net