Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p2vc4LQtAMOBTciNzGa2tYzPook.roa
File: p2vc4LQtAMOBTciNzGa2tYzPook.roa (raw, json)
Hash identifier: zW3FHMDK9lk0g+IltJindJXueXZSu66tJT3Nu4EUXQA=
Subject key identifier: A7:6B:DC:E0:B4:2D:00:C3:81:4D:C8:8D:CC:66:B6:B5:8C:CF:A2:89
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E1D1806
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p2vc4LQtAMOBTciNzGa2tYzPook.roa
Signing time: Sat 01 Jan 2022 01:58:17 +0000
ROA not before: Sat 01 Jan 2022 01:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 192.124.177.0/24 maxlen: 24
192.124.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236787718 (0xe1d1806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a76bdce0b42d00c3814dc88dcc66b6b58ccfa289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:d2:b6:a2:1b:cb:e5:fd:5d:37:65:45:ef:
5d:69:92:75:c3:c5:2d:a7:1a:55:4b:4f:eb:6f:a0:
15:f0:41:53:e1:cd:ae:e6:6a:58:fc:ac:fe:a1:43:
5b:65:d9:32:6d:21:9a:44:d4:65:f3:e5:85:9c:47:
7e:69:fb:a9:1d:44:c1:c2:79:9c:d3:52:9f:a8:25:
95:b8:a4:3d:0f:a2:c6:b4:d4:51:70:62:c1:e5:64:
bb:ae:da:1e:19:ed:4e:02:3f:84:e1:31:6c:33:45:
4e:d5:d0:12:e8:06:77:b5:90:41:a2:73:06:be:cd:
7d:66:dc:89:b3:0c:82:5e:4c:49:dc:4b:64:51:0b:
a0:f7:47:04:30:00:c2:5a:20:18:b7:8a:f2:4c:58:
d6:a1:3a:62:ef:f3:fe:ea:d8:ce:7e:9f:ee:4c:8b:
c1:9d:35:3d:18:1c:2f:55:60:17:be:e8:90:8e:40:
8e:b7:8f:d9:d3:d6:c0:44:4f:42:7a:3d:12:5f:61:
75:5f:65:66:44:93:72:10:49:f6:c6:96:1c:6b:6e:
f5:b3:1a:ca:1b:2b:4a:8d:c7:6f:e7:09:53:90:f7:
80:00:85:d7:6a:2a:3f:d1:b8:d6:5f:94:a7:a0:53:
47:65:c4:ba:39:c4:ac:2e:b0:75:f5:cb:27:ba:af:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6B:DC:E0:B4:2D:00:C3:81:4D:C8:8D:CC:66:B6:B5:8C:CF:A2:89
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p2vc4LQtAMOBTciNzGa2tYzPook.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.175.0/24
192.124.177.0/24
Signature Algorithm: sha256WithRSAEncryption
58:10:f8:3f:9e:31:db:e4:0f:15:ba:3e:ed:37:2c:e5:e9:da:
89:d4:fe:a8:1b:df:83:96:85:e2:32:83:e8:db:38:64:0d:04:
d9:a4:46:f2:1c:ed:bd:a4:31:e9:30:5d:22:d1:5e:fa:37:ea:
95:c4:03:c4:ea:39:18:af:41:05:b2:5b:a6:cc:15:a7:ba:c2:
cd:ec:89:47:ef:3e:cf:35:c1:ba:51:4a:8a:d2:64:84:50:1b:
ec:7b:b4:0a:8d:36:2e:ab:9b:26:d3:b6:ac:74:4a:79:ce:a7:
a6:5f:a2:79:07:27:4a:be:4d:11:1f:a4:a0:d5:7e:e3:13:9e:
7d:f7:7b:0d:a6:c0:8b:08:cb:5d:75:1c:c2:84:61:38:98:ca:
5a:a0:8b:0b:61:49:0f:64:b7:fc:38:62:8a:75:3a:83:33:6a:
ae:30:c5:71:88:04:e0:97:85:d1:8b:f2:38:6c:d0:4f:da:4a:
da:05:c6:a8:9e:46:71:f0:2b:88:18:cb:da:0e:50:09:ee:90:
a2:a1:80:83:78:0a:d8:59:85:90:ac:be:73:aa:ca:f9:c0:7d:
2f:77:5e:96:03:0b:c6:b2:48:ec:45:18:51:36:7d:f0:e3:23:
3e:b1:1c:fc:fe:01:86:ab:55:06:8f:6c:c8:47:9a:e7:98:8a:
25:3c:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:11 2023 by rpki-client on console-fra.rpki-client.org