Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xjp2a89MvGMdd0MTtEfHAsxzPyI.roa
File: Xjp2a89MvGMdd0MTtEfHAsxzPyI.roa (raw, json)
Hash identifier: QwJQgjdKT2HVRL6jYlB8pitYd1RWXjVS6OYX/aKhja8=
Subject key identifier: 5E:3A:76:6B:CF:4C:BC:63:1D:77:43:13:B4:47:C7:02:CC:73:3F:22
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183462F998F7A251E18BF0880E4441ECAF6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xjp2a89MvGMdd0MTtEfHAsxzPyI.roa
Signing time: Fri 16 Sep 2022 12:04:28 +0000
ROA not before: Fri 16 Sep 2022 12:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 212.192.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:46:2f:99:8f:7a:25:1e:18:bf:08:80:e4:44:1e:ca:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 16 12:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e3a766bcf4cbc631d774313b447c702cc733f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:ec:a2:19:bc:09:62:27:32:54:9c:c2:ba:
92:0c:f6:27:96:30:a3:60:ca:63:51:ab:61:49:e0:
4d:26:78:cc:06:0e:88:c3:16:6e:a0:41:0a:52:07:
8a:8c:c2:3b:38:d3:25:23:e9:e3:e0:00:d0:93:ca:
c4:cb:b3:50:79:f3:1b:65:11:c6:74:df:5b:28:6c:
6d:a1:cc:8a:f3:7d:60:b2:27:11:00:be:8c:29:e8:
b2:df:dd:8d:0a:84:ad:b2:53:6c:1e:30:2c:49:a5:
69:7c:ef:3f:07:9d:f1:b3:8c:e4:a0:8e:6d:52:c4:
74:72:b5:2c:1f:fc:2d:95:78:bb:87:f8:34:89:10:
8b:0b:0e:04:4f:94:be:e5:81:9d:bc:ce:6b:4b:e2:
bd:76:cd:d3:c1:88:c4:84:21:98:88:67:35:2c:b2:
cc:22:ec:1f:ba:69:84:a9:a8:b3:95:dd:45:e0:5f:
d2:10:d0:19:07:9f:b6:df:af:34:41:fe:42:20:35:
cc:79:9b:cf:11:46:02:9e:0c:de:6d:04:89:03:83:
43:c3:86:3a:da:2f:19:7e:29:37:b3:55:90:9e:2a:
9f:6f:2e:b8:98:41:f2:7b:bc:5e:50:37:82:5d:59:
44:66:c6:a2:78:1b:ba:27:6d:63:cf:c4:9d:c9:e7:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3A:76:6B:CF:4C:BC:63:1D:77:43:13:B4:47:C7:02:CC:73:3F:22
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xjp2a89MvGMdd0MTtEfHAsxzPyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.221.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a3:27:fc:4c:f9:b3:8c:76:41:e5:44:15:48:a1:37:83:69:
5d:c8:6c:65:b1:ca:ef:a7:19:32:2e:f7:6e:4d:04:52:d7:57:
b1:7c:81:01:4a:58:8c:7a:1c:e4:f3:bb:eb:e0:17:d3:42:dc:
79:cd:46:d7:6f:c3:67:f7:dc:92:6b:6b:88:3e:38:45:30:5b:
64:65:de:80:26:70:e7:14:5e:45:0e:df:82:c9:f3:0f:b9:f4:
aa:b8:53:cc:65:e0:08:48:ba:10:69:3e:b5:36:04:97:3b:af:
f3:ac:d9:2e:ac:5c:24:34:0b:3e:94:6e:bc:73:e4:9e:ce:38:
f8:0b:a3:e4:be:d0:f6:72:eb:87:40:0a:81:46:ec:24:80:4a:
92:ed:a7:92:1c:59:5d:e5:fd:01:19:51:69:64:5a:26:04:33:
54:e9:9d:94:06:f8:7a:25:13:79:7e:f9:04:88:2a:3e:70:fe:
18:36:96:f4:2b:ca:b5:4b:0c:b0:b0:10:b4:15:59:37:18:11:
ea:96:c5:ba:a1:11:3c:02:51:39:b0:fc:1d:d5:3f:7e:33:46:
03:ed:e8:98:35:a5:35:33:15:20:82:4d:88:f2:2b:6d:18:36:
a6:7a:15:3c:9c:5a:41:ec:ee:03:bb:83:3e:f9:d9:ed:d8:7b:
0e:91:0f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:05 2023 by rpki-client on console-fra.rpki-client.org