Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xfbBVh1NQGmYeG5vESErS9Zj2Sw.roa
File: xfbBVh1NQGmYeG5vESErS9Zj2Sw.roa (raw, json)
Hash identifier: bN3n4RTDdnzMokQdkPYn2SFcXRlY0+DDThY2xWEnYk0=
Subject key identifier: C5:F6:C1:56:1D:4D:40:69:98:78:6E:6F:11:21:2B:4B:D6:63:D9:2C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182FD69751574AF85962A6D74B5B8924007
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xfbBVh1NQGmYeG5vESErS9Zj2Sw.roa
Signing time: Fri 02 Sep 2022 08:55:23 +0000
ROA not before: Fri 02 Sep 2022 08:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51801
IP address blocks: 87.121.122.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:69:75:15:74:af:85:96:2a:6d:74:b5:b8:92:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 2 08:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5f6c1561d4d406998786e6f11212b4bd663d92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:28:3c:1c:56:fc:d4:bf:8d:a2:69:e7:13:05:
6b:f7:83:96:7e:ff:7c:67:32:16:e9:ae:da:32:a6:
25:26:e4:14:46:67:15:fb:2e:8c:e3:37:24:fd:d6:
81:48:0f:d4:7e:e0:f3:10:df:06:3f:c8:16:39:92:
4f:cb:ac:ea:c6:9c:40:72:f3:a5:02:bf:ed:f2:26:
69:b8:a8:3d:01:43:d8:c6:c3:33:9f:dc:38:ae:90:
0c:d1:6b:20:3f:14:3a:dd:02:77:f5:a2:be:8f:08:
94:53:d8:fe:5a:51:3b:0f:e0:65:db:80:dd:bc:ed:
09:a6:14:ed:9c:1e:b5:0f:e4:67:b5:51:e5:09:c9:
ad:49:d1:68:b1:08:f9:e6:6f:31:80:ba:1d:2b:01:
ff:b4:07:4d:23:02:59:8e:dd:84:7d:09:fb:c4:21:
bc:da:c4:d7:33:23:0b:97:df:dd:ce:fb:07:9e:2c:
5c:c3:e1:f8:89:5c:1d:ee:a8:6e:5b:b4:2d:5b:27:
65:80:ea:7a:39:60:64:07:3d:aa:8c:7e:25:3f:30:
39:84:92:0f:ce:67:db:42:2b:5c:22:42:30:aa:ed:
63:3f:cd:3c:96:e9:bc:ce:14:4c:15:fe:24:46:e1:
09:6b:20:8a:84:44:f7:b3:03:ac:b4:e2:55:f3:43:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F6:C1:56:1D:4D:40:69:98:78:6E:6F:11:21:2B:4B:D6:63:D9:2C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xfbBVh1NQGmYeG5vESErS9Zj2Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.122.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:ca:2e:7c:1e:4d:92:dc:a4:1a:d9:fa:33:28:f3:47:c2:3c:
23:bc:64:e1:af:e7:ee:3d:3b:b6:ed:a4:cf:c3:3c:ac:3d:cc:
e0:ea:b7:87:8a:0e:27:09:15:40:2d:cb:41:69:3f:ca:da:78:
74:8e:9c:f1:bc:a7:61:06:3f:09:bd:06:93:94:24:1f:ae:c6:
f3:80:1e:0e:1d:c2:13:ab:b8:67:06:5a:a3:ce:e2:88:81:12:
d1:9b:9d:6a:09:1e:83:cb:2a:04:a4:72:7d:ce:65:a7:13:d7:
3d:0e:53:19:17:1f:1f:09:6c:b3:d8:ac:22:f2:79:83:d0:f4:
d6:10:bd:75:86:05:82:c1:f0:28:2c:31:70:e3:48:c5:72:e8:
46:4c:2d:5c:c1:7a:e1:b5:fa:25:d8:01:c8:25:51:5d:fb:e8:
17:e5:80:f2:50:86:ef:55:eb:53:1e:c3:73:c7:48:86:cf:0f:
24:31:32:c9:b1:e3:ab:64:6a:7c:63:65:26:4f:e1:4b:32:2f:
4f:a1:31:f6:ec:cd:e7:40:dc:04:9c:67:f3:26:4d:29:99:e4:
05:32:c3:a3:0a:69:2a:06:14:69:f8:ee:b4:f2:e6:2e:a7:99:
e3:47:b2:15:dd:41:5b:11:9e:a4:32:a0:a9:90:b8:47:31:ac:
a7:25:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org