Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9QFQOnXBiXTr9vmQyAo7Ckf9MVA.roa
File: 9QFQOnXBiXTr9vmQyAo7Ckf9MVA.roa (raw, json)
Hash identifier: YzD0m1PDNmG0px92pPhpD77wKaLWrTBOjbJrB9qqmTM=
Subject key identifier: F5:01:50:3A:75:C1:89:74:EB:F6:F9:90:C8:0A:3B:0A:47:FD:31:50
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38B8CDCD
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9QFQOnXBiXTr9vmQyAo7Ckf9MVA.roa
Signing time: Tue 17 May 2022 05:30:26 +0000
ROA not before: Tue 17 May 2022 05:30:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198938
IP address blocks: 213.222.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951635405 (0x38b8cdcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:30:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f501503a75c18974ebf6f990c80a3b0a47fd3150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:e5:a6:9e:0f:10:78:fc:57:ac:a7:5e:06:
46:d4:eb:d3:df:37:a1:30:d1:d2:f7:0b:ac:40:45:
e0:21:7d:7b:a3:02:b1:11:a8:1f:74:f0:bc:aa:3d:
95:c2:f9:62:7f:2d:5f:af:9a:58:cd:b0:dd:bd:eb:
68:31:ef:56:30:41:b3:13:dc:62:65:36:bf:fa:4f:
2a:17:93:94:6c:0d:83:3b:fe:f2:88:c1:2b:a3:38:
9a:86:26:8f:51:4c:c1:26:c0:71:14:0b:b5:cd:e6:
cf:32:fa:11:0e:12:a9:a7:02:20:f7:ac:43:57:98:
f2:f2:72:5c:09:5c:fb:c9:84:dd:e8:37:72:48:c8:
39:7e:08:3b:21:7a:6a:87:d3:8a:68:64:1f:bd:ee:
de:5f:4b:44:c9:4a:e8:ab:29:d9:0c:8b:a1:b0:0c:
c1:ef:42:d6:b8:fc:3b:de:e1:38:e4:25:3d:f1:e6:
8d:f5:45:a6:b3:1a:56:6e:86:e4:16:30:2a:16:1a:
2b:4b:82:b6:f8:e6:06:7d:b5:c1:9f:3e:3d:b6:9c:
88:33:d9:74:68:67:76:40:8f:7d:44:63:82:88:f0:
cf:95:22:0b:e5:5f:9c:70:c1:2a:de:08:a5:b0:7d:
d8:71:78:ed:90:27:f3:0b:4d:2d:b9:47:ee:f8:e8:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:50:3A:75:C1:89:74:EB:F6:F9:90:C8:0A:3B:0A:47:FD:31:50
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9QFQOnXBiXTr9vmQyAo7Ckf9MVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.222.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:91:a7:cd:a7:a1:42:6d:34:7c:f5:b8:ea:44:b0:d6:63:00:
f7:da:15:38:24:b7:55:19:3a:cc:62:a0:06:d9:c2:92:35:86:
4c:39:ac:ba:75:4c:5c:22:74:73:92:14:ef:72:34:73:91:1e:
74:2b:47:b0:86:d3:a2:fa:0f:65:ca:14:73:1e:26:4d:fd:2c:
a7:63:6f:25:f9:cf:9c:77:66:b1:e1:77:e9:4d:58:f1:89:d5:
1f:64:2b:4e:fd:a7:43:14:9e:71:6a:1a:b3:a8:ad:ba:a1:16:
78:5d:63:09:7f:47:ea:db:e3:f6:26:36:d8:26:ed:17:dc:3e:
cb:dc:be:da:e5:31:3a:f8:37:d7:2d:fa:85:ab:46:8a:12:f6:
79:a3:ab:49:27:ee:00:0e:28:2f:03:d6:87:2a:08:dd:b2:f2:
7c:c0:48:61:0a:e5:38:50:b3:8d:aa:fd:00:46:8b:a2:ea:ae:
3a:18:cd:5d:25:b9:04:17:c6:82:aa:8c:0a:40:36:70:fe:f3:
ea:48:b1:95:49:70:5f:2a:ae:b5:81:b2:97:aa:00:36:fe:c7:
85:c9:2a:46:e2:89:64:21:36:8d:b9:cf:a5:3b:2d:01:9f:a0:
40:ad:fe:cc:c6:c9:f3:ac:62:4c:c2:b0:29:e7:1d:dd:24:8e:
62:e2:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:18 2023 by rpki-client on console-fra.rpki-client.org