Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-vaOjGyBpQt-voPDruiowM9wR5w.roa
File: 1-vaOjGyBpQt-voPDruiowM9wR5w.roa (raw, json)
Hash identifier: f5uJhN3YZPpG/YU503UkPpTTfD5EsGdNG7fTF1e8uV8=
Subject key identifier: FA:F6:8E:8C:6C:81:A5:0B:7E:BE:83:C3:AE:E8:A8:C0:CF:70:47:9C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 19B3877D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-vaOjGyBpQt-voPDruiowM9wR5w.roa
Signing time: Fri 04 Feb 2022 08:08:50 +0000
ROA not before: Fri 04 Feb 2022 08:08:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 217.156.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431196029 (0x19b3877d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 4 08:08:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faf68e8c6c81a50b7ebe83c3aee8a8c0cf70479c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:87:c1:08:25:ff:ec:11:60:b7:19:a2:34:
02:2f:91:22:7c:0f:cd:aa:75:7c:99:a7:a2:77:94:
61:39:ba:6c:d4:9d:ac:5c:18:7c:16:43:ba:28:51:
78:ae:92:e7:bb:0b:3f:f8:91:92:21:94:2a:b7:0f:
a8:1b:ba:49:e7:6d:5c:94:ee:07:3e:fc:a1:9d:34:
dc:69:0e:49:08:10:89:20:ed:2f:ca:67:a7:05:c3:
f2:b1:67:d4:b4:58:8f:6a:1b:13:c0:ba:6e:f1:74:
03:e0:59:fb:b0:26:d6:62:bb:30:05:91:f7:74:f0:
ad:c3:36:4e:6a:52:f1:a0:d0:e9:30:5e:39:01:2d:
32:c0:09:8c:a2:d3:ba:68:ca:c9:50:b1:b4:49:4e:
18:8f:d5:61:8c:e5:34:4f:ca:8b:4e:01:f3:f7:3c:
5c:8a:dc:ad:a4:ee:aa:08:05:e3:29:34:6d:83:41:
2b:13:ab:d6:19:ff:95:34:cb:41:df:d2:9f:ea:9e:
97:a6:14:ca:94:01:71:ef:0a:a2:dc:f7:82:bd:c2:
d7:43:2e:75:0d:08:e8:4e:33:ed:2e:86:f3:25:b2:
f9:50:b6:fb:37:34:c1:f5:df:7a:9f:76:46:5a:d4:
a4:6a:3f:99:68:55:53:64:91:fc:1f:fd:ee:de:ea:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:8E:8C:6C:81:A5:0B:7E:BE:83:C3:AE:E8:A8:C0:CF:70:47:9C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-vaOjGyBpQt-voPDruiowM9wR5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.96.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b4:45:1d:27:8c:8b:f0:f1:40:56:72:ae:7d:15:0d:38:42:
c4:46:f0:1a:20:6f:1a:cc:38:db:c3:38:41:c5:f1:03:23:f9:
3d:86:8d:19:5d:f1:84:9d:68:23:dc:f6:a2:46:2a:f3:96:a9:
c0:ce:54:50:71:24:4b:20:0d:1d:80:3f:fa:15:e8:0e:52:40:
a4:5c:3e:16:46:d4:3b:47:f9:30:70:27:66:d1:a1:fe:28:14:
29:e7:fd:45:dd:97:2a:73:f9:6a:6e:68:37:e3:2f:74:71:bc:
14:93:d4:54:ea:6f:1d:1f:3e:a9:8e:d0:c3:44:46:c4:ca:f7:
6f:8d:59:5c:a6:02:64:a5:63:9c:03:fd:40:a3:46:d8:7c:23:
38:0f:4c:0b:ca:69:9b:da:ec:c8:ef:2c:78:2e:00:a7:32:3b:
73:ba:0e:29:49:cf:dc:c2:79:c1:5c:14:35:6e:4b:dd:03:cf:
bd:2c:ae:77:57:8e:f8:01:32:ba:1e:26:54:6a:92:ab:5f:31:
9a:8b:ce:69:02:ae:ba:bf:f9:fc:90:3a:d2:e6:d3:a1:c8:32:
5d:73:03:72:5b:1f:8e:f8:37:24:bc:02:e8:25:02:fc:31:c8:
8d:a8:c7:de:d8:a5:ec:b9:33:92:e6:93:62:d8:f7:f7:9e:ab:
1d:32:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org