Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0p1p92ewmOxXfhvyeASRFAtXDt8.roa
File: 0p1p92ewmOxXfhvyeASRFAtXDt8.roa (raw, json)
Hash identifier: aDOx/DoSzl4+NsDjsutPSUjY2IJnwiYHo8EAtPlsJsc=
Subject key identifier: D2:9D:69:F7:67:B0:98:EC:57:7E:1B:F2:78:04:91:14:0B:57:0E:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C83165B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0p1p92ewmOxXfhvyeASRFAtXDt8.roa
Signing time: Sat 01 Jan 2022 01:02:47 +0000
ROA not before: Sat 01 Jan 2022 01:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200068
IP address blocks: 87.121.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478352987 (0x1c83165b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d29d69f767b098ec577e1bf2780491140b570edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f6:0a:1c:18:72:ed:ce:f6:fd:58:54:91:9d:
83:23:15:e6:a9:11:74:14:e3:a1:ae:e9:6d:b7:70:
36:c7:ea:15:83:f4:39:58:85:f3:10:c2:f3:90:e8:
c0:d2:24:7a:a0:e7:12:16:dc:ca:1c:ec:7e:c5:c2:
6f:39:14:33:f5:f3:16:20:0e:4b:24:b7:6c:97:7c:
9c:10:95:5f:70:42:ea:d3:62:ad:04:72:f1:dc:f3:
64:c0:78:01:54:78:13:73:f0:e3:36:96:4b:cf:c2:
52:3e:9c:fc:9c:07:f4:af:95:da:3d:32:c4:b5:ec:
7b:f6:47:21:a9:70:3d:84:0c:9c:6d:5b:7b:7c:54:
ae:88:0f:b3:59:a3:c6:eb:f6:d7:99:02:6a:15:90:
8d:d6:c3:6b:04:2a:39:30:93:03:88:b2:77:c1:0c:
20:74:f5:82:cf:79:07:4c:cb:e6:3e:bb:12:3d:a4:
ea:14:bb:38:2f:4c:87:1e:5f:a4:36:c5:af:84:cc:
5b:cd:f8:0d:f9:a7:45:e4:92:3b:f6:ff:01:b7:bc:
c3:17:32:cf:20:88:d1:b5:a0:3d:63:94:5a:e0:0c:
59:a3:11:c2:7c:a9:45:a9:1c:3c:4a:13:95:29:34:
3f:d3:98:83:d9:f4:f3:68:61:91:51:29:e6:b4:5b:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9D:69:F7:67:B0:98:EC:57:7E:1B:F2:78:04:91:14:0B:57:0E:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0p1p92ewmOxXfhvyeASRFAtXDt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.58.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ff:81:d5:24:20:3e:f0:01:43:f4:6b:9e:9c:86:c4:3c:8f:
39:74:1b:81:39:b2:f0:d1:6d:33:86:88:26:14:4b:ff:84:60:
4e:d1:d1:2f:0a:a5:0a:a0:7b:1e:95:77:0f:b0:13:19:af:7e:
6f:06:69:35:31:06:de:32:38:66:ac:11:11:20:98:6b:97:5c:
6b:82:a9:28:2f:b7:17:d8:3e:71:79:f4:8d:ed:f4:78:04:94:
a4:b3:fa:44:39:fd:71:14:61:85:d9:1f:cf:22:4d:6a:2b:17:
89:94:df:48:9a:76:31:f0:e2:18:22:d3:83:9a:19:13:41:ee:
67:aa:e8:cd:90:08:40:82:05:f3:d7:55:e1:6b:2f:cb:cc:ae:
e9:13:0b:ce:03:2d:8e:39:fd:98:32:8f:32:47:86:98:98:16:
48:34:08:e3:68:12:bc:b0:42:b0:89:35:b6:ce:f8:ef:81:cf:
4b:36:f3:58:fd:0f:f3:f6:2a:23:2c:28:f4:a2:2b:5e:1a:0b:
d0:6b:6a:4a:92:58:ab:b9:f4:f8:ae:c3:5b:46:e6:5e:b2:74:
db:a3:e2:c0:79:21:59:29:10:1a:bf:17:b1:dc:b9:bc:64:68:
02:81:80:6d:95:2a:6e:d4:bf:87:2c:cb:9f:7c:96:89:fd:d2:
c9:13:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org