Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qWutBAyT8Dh60WDqhTona6WF50k.roa
File: qWutBAyT8Dh60WDqhTona6WF50k.roa (raw, json)
Hash identifier: LxI3KdgwNK2zRnv+ZaTdPzgVuj27qVNsFAoksgQnINg=
Subject key identifier: A9:6B:AD:04:0C:93:F0:38:7A:D1:60:EA:85:3A:27:6B:A5:85:E7:49
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C87E097
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qWutBAyT8Dh60WDqhTona6WF50k.roa
Signing time: Sat 01 Jan 2022 01:02:49 +0000
ROA not before: Sat 01 Jan 2022 01:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202160
IP address blocks: 87.120.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478666903 (0x1c87e097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a96bad040c93f0387ad160ea853a276ba585e749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:bb:d1:38:27:42:17:e5:0f:e5:db:d4:3f:
35:00:98:99:ae:d7:99:ff:72:54:79:fe:dd:e5:83:
59:ef:e3:10:86:8a:8d:70:5c:26:fa:c9:22:14:21:
54:04:6e:f0:29:19:b7:23:32:9a:8d:9f:48:a1:4d:
5d:b7:8a:5a:43:16:35:b0:24:a6:42:d2:ae:88:21:
70:fa:03:4d:e0:e8:5e:13:6a:50:da:7a:3a:04:41:
17:54:58:c3:ce:3b:c6:47:e0:fb:35:62:ca:ec:87:
74:52:3f:31:47:fd:01:22:53:29:9a:7b:b4:1f:61:
82:20:06:9a:38:d7:e2:92:09:34:02:79:a5:f7:6f:
a2:ed:7e:7d:5b:dd:97:6d:24:8d:ff:8c:ad:c9:5e:
30:bb:63:b2:42:74:32:18:64:91:97:b4:27:81:eb:
96:65:a5:e6:ed:53:12:69:6b:48:3b:7b:b4:14:4b:
b3:01:11:27:2d:18:39:5c:02:b0:ef:d8:de:be:91:
1d:34:41:ca:0c:b6:e4:65:22:a1:09:da:37:b2:99:
b5:62:c0:18:4d:ac:51:03:e9:d0:9c:4e:eb:87:4c:
5b:e5:89:d5:8b:51:69:c4:30:90:9d:70:03:53:95:
d0:99:75:d5:1f:2c:f6:7f:8f:54:86:4c:cc:44:a2:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6B:AD:04:0C:93:F0:38:7A:D1:60:EA:85:3A:27:6B:A5:85:E7:49
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qWutBAyT8Dh60WDqhTona6WF50k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.142.0/24
Signature Algorithm: sha256WithRSAEncryption
31:45:48:d9:f0:35:b8:2d:40:a9:29:73:a8:7c:16:4e:31:2b:
93:2d:da:08:73:f7:b2:6a:a1:f3:98:07:6c:33:77:c9:eb:47:
ee:a0:9c:43:a3:5c:55:34:96:b5:64:18:b1:91:16:e3:c7:09:
9e:68:0e:11:11:b1:87:18:11:3b:92:e3:72:b7:9f:2c:0b:12:
f0:d3:6d:1d:96:79:51:a0:d1:27:18:d0:69:2e:3a:3d:4b:25:
36:12:b2:cc:67:01:43:8d:b9:a2:32:06:da:ce:3d:4d:fa:55:
0b:39:2c:51:85:80:f8:b6:0c:e9:d9:1d:13:8d:8b:27:6a:f4:
45:10:5d:26:88:13:57:60:67:69:c5:36:01:44:cd:f6:85:57:
dd:01:30:ed:ee:0f:15:9b:f9:75:1f:71:da:f7:81:05:00:16:
8b:39:e2:c8:d3:48:e2:e2:f9:6d:03:52:c5:42:56:7a:8b:37:
4e:0a:a4:b5:fd:62:b9:1a:4b:da:9d:38:fc:83:b5:34:2b:44:
2f:f3:9d:6f:bc:88:32:23:1f:81:39:48:2d:4b:ba:6a:15:09:
6c:ee:81:2b:ab:77:de:97:fe:ac:82:0e:ef:7f:f3:9f:23:eb:
65:2b:2d:a6:31:c0:72:d6:5a:ef:9d:4d:18:43:58:f2:3e:e5:
26:29:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org