Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1DRXoatCKr6GzqFjjhvUJke5wDQ.roa
File: 1DRXoatCKr6GzqFjjhvUJke5wDQ.roa (raw, json)
Hash identifier: iFnVDPWtaULCeKe5noXe2ClCgaiSlRxoxWx3HvYXpPI=
Subject key identifier: D4:34:57:A1:AB:42:2A:BE:86:CE:A1:63:8E:1B:D4:26:47:B9:C0:34
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018413274BFBD783B28890712EAC751CF5E9
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1DRXoatCKr6GzqFjjhvUJke5wDQ.roa
Signing time: Wed 26 Oct 2022 07:17:33 +0000
ROA not before: Wed 26 Oct 2022 07:17:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212249
IP address blocks: 141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:27:4b:fb:d7:83:b2:88:90:71:2e:ac:75:1c:f5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 26 07:17:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d43457a1ab422abe86cea1638e1bd42647b9c034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4a:6a:b1:34:82:3d:7f:ec:c4:bf:a5:9e:e1:
68:15:0b:32:55:33:b5:d0:fe:f7:5a:d1:76:84:5e:
71:93:e0:6a:21:82:25:2d:ff:f7:2d:3e:e9:3f:88:
3c:07:6f:30:d0:80:e2:4b:d2:cf:68:a1:45:09:f7:
d5:3f:2d:8b:01:c6:fa:0a:48:3e:08:39:d7:04:44:
b7:06:63:34:8c:6e:0b:4a:69:b8:56:8e:0d:e2:12:
a4:a7:8b:74:f5:7a:c9:ca:ec:d0:9e:42:cc:93:2c:
01:2c:72:c6:d8:a4:05:39:df:5e:bc:8d:b5:1a:99:
92:f4:d9:18:fd:74:03:e0:93:1b:2d:8a:f0:05:74:
9d:6a:1e:68:3d:8c:58:bb:35:35:95:c4:e7:d2:fd:
95:b4:8e:45:b7:f9:87:7c:04:73:07:a3:c0:e7:f7:
10:66:89:4e:6f:ac:42:17:cf:58:d1:23:cd:06:bc:
a8:25:ae:d9:df:15:e7:d9:61:51:23:01:f1:89:35:
59:e5:1c:b2:4a:5a:70:98:c6:f6:41:04:0e:94:83:
66:74:f0:98:71:f8:a4:84:87:e3:b4:5d:40:e3:01:
d6:9e:09:43:1e:dd:9a:46:6d:3d:bd:ac:5e:71:2f:
f9:e3:4c:7c:24:f0:e8:b2:9f:ed:68:d3:78:81:80:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:57:A1:AB:42:2A:BE:86:CE:A1:63:8E:1B:D4:26:47:B9:C0:34
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1DRXoatCKr6GzqFjjhvUJke5wDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.113.0-141.98.114.255
Signature Algorithm: sha256WithRSAEncryption
bc:65:a3:5e:80:04:36:65:c5:e6:23:6c:36:21:c8:e5:26:9b:
42:ff:6c:ed:81:e5:b1:ae:28:51:cf:76:e6:39:8c:3a:72:bd:
17:be:e9:c0:d4:b2:1a:c8:c4:d5:16:5a:78:27:94:25:72:1e:
2d:c2:1e:d0:92:9f:a2:b1:9d:39:2f:57:00:63:ba:98:26:26:
c6:df:5d:3c:f4:22:47:d8:04:46:7a:1d:60:b4:c1:49:a3:e4:
e1:b0:8e:06:fa:c5:32:32:f7:2d:55:f4:67:11:e1:27:99:eb:
3a:ae:3c:81:2b:d9:d8:99:36:c8:32:ed:22:bf:82:22:f2:ba:
c8:2f:1e:0e:61:52:a0:50:71:33:34:62:4d:12:f1:28:bf:7e:
3e:32:8e:ba:55:61:16:fb:e0:00:9e:7c:9f:df:9c:75:07:86:
15:5b:2f:3f:5a:c4:5c:78:fb:3e:e8:c9:a9:c1:34:c6:59:80:
13:cb:98:99:4f:67:46:eb:74:ad:ee:ae:69:fc:ae:9a:f9:39:
51:d2:77:0e:f5:c7:bf:b6:48:d1:26:2c:62:ca:33:9a:2a:1f:
c8:b9:ce:70:0b:2b:6c:87:a4:fa:95:20:d5:98:be:ca:ab:64:
af:5f:cc:b6:d2:84:35:16:8c:12:5e:62:72:59:c1:76:45:cb:
87:2d:db:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org