Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/RupAcrYA28hsQvkbQDin-Ib6riQ.roa
File: RupAcrYA28hsQvkbQDin-Ib6riQ.roa (raw, json)
Hash identifier: WhHiWqfZSSYx04VKW9Cgw4ArNw0ZGm0GKCMUZpC2oOk=
Subject key identifier: 46:EA:40:72:B6:00:DB:C8:6C:42:F9:1B:40:38:A7:F8:86:FA:AE:24
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 04DA796A
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/RupAcrYA28hsQvkbQDin-Ib6riQ.roa
Signing time: Sun 15 May 2022 08:36:41 +0000
ROA not before: Sun 15 May 2022 08:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58153
IP address blocks: 188.213.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81426794 (0x4da796a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: May 15 08:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46ea4072b600dbc86c42f91b4038a7f886faae24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:a6:71:b9:13:40:af:20:c4:ba:ba:26:0d:
dd:c1:e1:38:8a:fb:30:fc:bf:7d:e8:91:06:c0:30:
04:be:b0:4e:27:6e:d9:49:03:fa:5e:6c:ec:4b:e8:
7e:63:61:82:a2:a8:90:27:f3:00:50:ba:87:8c:b6:
d7:91:59:9a:8e:4f:63:17:e6:8a:b3:82:89:09:a0:
f4:38:1a:0a:00:3d:a2:42:df:dc:d9:79:1a:e7:b3:
b6:76:2f:42:0c:41:06:e0:5c:66:22:64:64:0e:1a:
0b:ea:d3:f8:8a:2c:98:cd:28:16:95:7c:d3:9e:9d:
07:0e:5a:e1:91:e0:46:77:2c:87:51:2f:21:ed:9d:
99:a0:17:e1:ae:0b:ec:33:a7:c0:37:50:e6:14:21:
72:fa:f8:09:21:82:1d:1a:42:0d:61:82:dc:49:52:
4e:73:a6:57:84:4f:d0:ff:ef:9b:e5:46:0d:00:a2:
b3:dd:d5:20:92:38:a1:c8:06:07:a0:6b:1c:d2:46:
ed:f7:ee:01:76:7e:82:e1:ff:3c:7c:70:50:da:b2:
38:2a:cf:99:c8:b8:aa:91:a1:43:9d:5d:e6:d5:69:
84:7e:2c:02:0f:7f:d4:ab:a4:70:49:76:36:5b:52:
49:e3:ff:84:1f:72:9b:ed:8f:6b:c0:d5:a4:88:8b:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EA:40:72:B6:00:DB:C8:6C:42:F9:1B:40:38:A7:F8:86:FA:AE:24
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/RupAcrYA28hsQvkbQDin-Ib6riQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.17.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1c:17:bc:3e:b5:5b:cd:62:dd:69:72:6c:dc:d2:ce:bc:17:
ed:72:be:ff:bf:25:7c:2b:9e:a4:96:1b:b1:67:3d:25:09:86:
b1:62:51:a2:d3:db:3d:a8:04:05:7c:ff:24:b8:f6:3f:fd:18:
87:b0:23:f2:22:43:60:60:d3:40:d4:17:2f:ac:ca:9b:aa:5c:
2e:a5:e6:ab:7c:33:4d:93:9c:53:d3:c7:9e:24:00:4b:6f:34:
a0:68:85:95:d7:78:9c:2f:5e:5d:3a:6c:02:f0:ca:c5:5c:36:
00:f7:98:3a:9a:48:80:b9:88:ac:bc:f5:9c:7e:85:7f:b0:89:
38:83:46:1a:48:28:20:8e:3f:0c:c2:92:8a:fa:48:8e:de:5e:
a3:b3:90:67:d6:cd:18:a6:f5:ba:d0:f6:d0:3c:76:15:c1:f8:
41:e9:df:79:56:87:5c:d4:d5:3f:28:cd:9d:5e:0b:0a:0e:e8:
a0:4a:79:56:1f:24:62:96:33:4a:8d:94:42:e3:b1:51:d9:25:
cf:08:9a:65:af:af:70:ac:6b:70:7d:24:c9:b5:38:1a:71:f3:
07:83:f8:01:3a:c3:c7:76:fb:9a:f9:4a:e9:2f:3c:d2:a9:11:
56:b9:cb:b7:b3:03:67:d8:53:4e:09:2e:68:a0:79:60:ea:26:
57:36:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:41 2023 by rpki-client on console-fra.rpki-client.org