Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/GIveoqIE7V5GuO10Fq13Z0OFY1s.roa
File: GIveoqIE7V5GuO10Fq13Z0OFY1s.roa (raw, json)
Hash identifier: UVaeqTWgkvm15fphvxnjJJ0caifYJfH2OQ9Zb8nYukA=
Subject key identifier: 18:8B:DE:A2:A2:04:ED:5E:46:B8:ED:74:16:AD:77:67:43:85:63:5B
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0184EC27297EAA5AD9EE8ABF4849A1814286
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/GIveoqIE7V5GuO10Fq13Z0OFY1s.roa
Signing time: Wed 07 Dec 2022 10:35:00 +0000
ROA not before: Wed 07 Dec 2022 10:35:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7470
IP address blocks: 163.171.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:27:29:7e:aa:5a:d9:ee:8a:bf:48:49:a1:81:42:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Dec 7 10:35:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=188bdea2a204ed5e46b8ed7416ad77674385635b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:ce:d6:6c:d4:d6:d5:d4:43:cf:02:34:a5:
7a:b4:45:6b:a7:19:04:d9:a0:1d:35:b2:6c:72:72:
cb:ad:32:f5:cb:93:98:84:62:cc:76:cf:1a:6e:4a:
7c:89:f4:16:28:47:44:05:dc:36:9d:a7:a9:12:ec:
15:e5:f8:41:a9:d7:c5:f3:a3:fd:19:f8:8a:e6:f5:
33:d3:a3:22:85:e1:95:bc:d0:00:c5:2e:1e:b2:f7:
bf:27:3c:bb:f8:f2:23:11:6f:60:de:36:79:a8:b8:
78:af:6e:a4:a0:e0:88:7c:17:5b:08:a5:80:31:99:
60:01:b0:f0:1c:19:59:39:af:cb:c7:ae:fe:6a:38:
15:a5:eb:b7:b3:63:26:12:c9:db:f1:5b:a7:bd:bb:
44:d6:83:4a:95:5b:7d:25:c1:0c:41:ec:24:34:c2:
94:ff:26:61:29:4b:78:41:8b:de:20:e4:94:15:1f:
95:a2:70:f4:92:68:7c:17:3b:1a:96:7d:e9:f2:47:
94:60:e9:c8:69:82:2f:b1:db:52:85:ed:3c:bd:01:
1c:dd:96:c5:5c:ad:23:c5:1c:bc:d2:63:f9:c8:27:
31:2b:d9:e5:59:7e:c2:c4:0b:19:cd:31:c8:ba:b4:
fb:9b:39:e7:1e:cb:1a:57:20:97:51:51:8d:04:f9:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8B:DE:A2:A2:04:ED:5E:46:B8:ED:74:16:AD:77:67:43:85:63:5B
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/GIveoqIE7V5GuO10Fq13Z0OFY1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.171.68.0/24
Signature Algorithm: sha256WithRSAEncryption
78:44:32:36:71:fc:bf:7e:b0:d7:dd:98:89:3d:2b:c9:07:f8:
01:d5:f2:5a:e2:8c:e9:9a:a3:cc:74:d2:5f:d7:00:14:8f:39:
8c:8b:be:b0:8c:77:b6:48:b3:53:30:bf:0c:85:81:2a:e9:72:
12:97:6e:54:16:dc:57:97:ad:18:60:df:20:34:3c:b7:94:0e:
88:e6:e3:ca:01:9e:b4:03:5a:cc:c5:fa:9c:df:47:5a:92:37:
14:f6:45:f2:6c:bb:53:c4:f5:24:f5:44:e4:27:89:ae:22:0e:
fc:6f:f1:34:a4:4e:54:80:a6:c7:44:fe:5f:2f:e0:0c:88:28:
43:68:99:01:03:15:4b:f5:20:aa:8a:1c:f7:5c:1d:5c:fe:cd:
b6:6e:db:84:09:d8:b2:84:c9:9c:78:33:38:22:d8:14:32:a4:
9a:d9:51:e9:d1:1b:12:ab:17:41:4f:39:0c:be:02:bf:0b:d5:
dc:12:41:b4:d6:b3:a3:a3:ca:e7:6c:4e:74:13:cc:0e:5b:de:
47:a0:fb:ac:d0:86:e9:a5:f1:b6:cd:12:e9:d9:30:cd:2a:3e:
53:0a:df:1d:7e:3b:b9:31:91:4e:bc:b0:b9:7c:a3:fb:5b:0b:
94:5a:25:73:fb:b5:a7:81:cf:1d:13:67:d9:45:83:57:99:af:
d0:c5:ba:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org