Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/mc4vPjYY2dTk6g8O66HiwXPWmJ4.roa
File: mc4vPjYY2dTk6g8O66HiwXPWmJ4.roa (raw, json)
Hash identifier: T95alWL9aLThL4PcMW7omSttmEKb18PqUERV4xzx12U=
Subject key identifier: 99:CE:2F:3E:36:18:D9:D4:E4:EA:0F:0E:EB:A1:E2:C1:73:D6:98:9E
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 0182819860D732C3DB970F10D6C0FF36FA7A
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/mc4vPjYY2dTk6g8O66HiwXPWmJ4.roa
Signing time: Tue 09 Aug 2022 07:53:43 +0000
ROA not before: Tue 09 Aug 2022 07:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208107
IP address blocks: 217.199.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:98:60:d7:32:c3:db:97:0f:10:d6:c0:ff:36:fa:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Aug 9 07:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99ce2f3e3618d9d4e4ea0f0eeba1e2c173d6989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:2d:71:27:e6:76:6c:5b:ca:e7:9a:dd:ad:
39:e9:b5:9a:f3:ad:17:cd:81:5a:a2:9d:9e:10:6b:
97:9d:27:10:d3:2e:50:fa:58:32:57:32:54:cc:9d:
ec:41:86:3f:64:69:d7:b5:68:5a:58:b5:00:f9:f6:
85:1f:17:22:f7:92:11:bd:16:ff:d2:95:97:da:7b:
16:d2:56:e9:26:ac:b6:96:e7:96:1a:c5:00:b7:c9:
b4:d7:4a:06:f7:45:7a:b0:d1:0f:38:b7:99:9e:29:
6b:79:e6:3c:84:26:e6:6c:bf:0f:93:94:cd:9f:63:
bb:69:26:af:2f:6a:32:51:ad:b6:3b:0c:b5:f1:97:
93:20:95:02:d9:e2:4d:cb:69:6c:80:94:3e:42:60:
a5:fb:ff:77:fd:5c:30:3d:82:7e:9c:8f:16:2c:68:
b0:1d:49:55:2f:f7:29:e1:9a:2f:5c:97:72:a4:d8:
1d:12:56:4e:7d:13:19:b8:1f:e0:57:18:32:62:de:
02:29:58:9b:79:65:59:99:94:a6:b2:1e:57:96:2d:
b1:c6:43:0f:c8:64:1c:0f:44:65:c3:09:39:9f:6c:
d5:95:3d:f3:1e:98:a7:71:e6:cf:23:85:c0:e5:86:
f5:49:ec:60:f5:2f:52:68:25:a2:30:4d:05:30:46:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CE:2F:3E:36:18:D9:D4:E4:EA:0F:0E:EB:A1:E2:C1:73:D6:98:9E
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/mc4vPjYY2dTk6g8O66HiwXPWmJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.199.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fb:9c:01:4c:73:34:dd:08:5e:4b:f5:2a:6b:e9:64:e7:c0:
ee:94:b1:be:23:e7:76:ee:56:de:06:4b:80:63:87:17:86:e5:
d0:63:1b:bb:b5:9b:83:c1:c2:f3:c6:1d:79:8d:3d:15:8a:32:
62:20:8a:0a:02:d4:89:98:3d:79:41:f9:64:e5:60:dd:37:4a:
4a:11:06:f2:12:50:2d:46:2b:80:62:cb:40:4a:76:e5:ad:8d:
26:27:ca:bc:98:65:5d:c5:05:36:2d:a6:78:d3:fc:ed:ab:0c:
be:7f:45:d3:12:b9:f5:fb:99:a2:68:ea:61:51:9a:2a:86:e5:
c5:5b:3e:7f:37:fe:03:b9:cd:db:42:72:c8:95:6f:b2:62:63:
02:26:e4:af:8c:4d:0d:8d:79:3e:19:22:a9:1a:91:90:47:ca:
0e:41:72:55:0d:ad:a4:1a:d0:76:37:4e:cd:db:f2:13:e0:bb:
ae:11:4e:26:75:b4:89:44:fc:6f:05:fc:6d:66:3f:ae:1b:06:
27:75:2b:42:a4:ea:ec:e6:12:00:eb:58:f6:58:b2:b6:2a:22:
d2:4c:9c:f6:7e:7f:55:b7:99:04:3d:22:06:7b:05:9e:6f:04:
d5:08:e2:03:5a:9d:4b:e8:73:3e:a1:b5:3b:90:a9:f0:bd:25:
ea:12:9b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:48 2024 by rpki-client on console-ams.rpki-client.org