Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/V0QQA81b5DWXFfdC7OfGUNisYOU.roa
File: V0QQA81b5DWXFfdC7OfGUNisYOU.roa (raw, json)
Hash identifier: Xu05ezg4bt8xPH6B8UN4Hrw9imxqhGwT5p7+DH2LNl0=
Subject key identifier: 57:44:10:03:CD:5B:E4:35:97:15:F7:42:EC:E7:C6:50:D8:AC:60:E5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1AD7E7C0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/V0QQA81b5DWXFfdC7OfGUNisYOU.roa
Signing time: Wed 27 Apr 2022 15:49:14 +0000
ROA not before: Wed 27 Apr 2022 15:49:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48931
IP address blocks: 80.96.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450357184 (0x1ad7e7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 27 15:49:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57441003cd5be4359715f742ece7c650d8ac60e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:a5:36:90:c1:a0:8b:b9:18:9b:17:fe:51:
c0:cb:5d:46:46:53:94:81:19:8c:cf:73:ba:51:29:
31:11:f0:96:4d:60:43:27:48:07:eb:1e:5e:65:5d:
45:84:6c:14:b3:3c:9f:d5:65:30:a3:9c:ec:3f:cd:
8b:ff:08:cd:a6:3e:1e:4d:38:9d:b0:e8:0e:fe:17:
99:ea:8b:d5:93:a9:fc:70:d9:a7:8f:f9:79:0d:29:
66:d9:97:57:ad:7c:b3:e7:67:a2:5d:7d:3b:1d:28:
c5:06:ea:2d:f5:cb:1c:9e:7d:a3:61:cf:cf:69:85:
06:ab:65:48:3f:8e:ed:19:5f:ca:2e:a9:77:4e:71:
c7:71:30:71:0a:51:bd:82:2f:03:1e:d9:61:8d:f8:
de:74:3e:cb:3f:7f:ae:91:d6:74:7e:f2:e5:9e:5a:
ff:92:16:01:99:f9:42:1c:58:f7:10:2d:f2:aa:2e:
5d:d7:78:36:b9:9f:35:1a:ed:c1:63:c1:53:3b:53:
55:b4:23:42:e1:4d:79:4c:a9:bf:cd:7a:aa:e8:ef:
38:78:be:42:17:f3:2f:de:27:78:6b:09:23:8e:f8:
18:90:93:fa:84:df:d5:66:12:8d:34:38:fc:3a:a5:
64:b0:ce:43:33:a8:8f:ec:cf:8a:12:eb:20:61:d1:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:44:10:03:CD:5B:E4:35:97:15:F7:42:EC:E7:C6:50:D8:AC:60:E5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/V0QQA81b5DWXFfdC7OfGUNisYOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8b:5e:2f:f4:62:d3:14:da:34:ff:0b:29:0d:ae:ba:b4:17:
05:9e:d2:c6:0b:83:57:89:9b:ac:a4:2d:30:38:36:93:eb:fc:
02:10:97:08:22:61:5f:bd:6b:34:1d:f7:0b:3a:41:db:1e:da:
ac:c2:3f:d6:f8:f7:6d:72:95:c7:1c:c1:37:d1:27:ea:e9:98:
4c:2d:b5:95:56:fd:31:ea:00:9c:96:06:8d:a5:c2:d5:68:99:
3a:65:f8:9d:e5:c6:c7:4b:33:58:ef:8f:9d:6a:cd:b2:43:c8:
42:97:c2:bd:b2:78:ef:86:b3:0e:8a:db:89:8d:af:34:ca:74:
95:c7:c6:77:ae:8c:01:63:b1:cb:04:9a:c4:37:df:f3:11:ba:
04:0b:84:ab:94:68:e6:fb:d2:c6:81:39:06:52:96:69:92:b0:
f9:7e:2c:04:a9:0e:4f:75:9d:a4:82:2b:58:de:4c:39:0f:ae:
07:2a:70:9f:1c:b6:ba:29:84:92:ce:9e:61:6f:d7:d6:46:b0:
bf:6f:36:db:d4:13:5a:5f:49:2b:c3:a8:4d:9a:2d:86:ba:e3:
43:b2:28:f8:7c:57:c9:f4:51:ec:8d:e2:21:cb:68:d2:90:77:
d8:a0:49:b2:70:0d:87:1f:17:0e:24:12:9b:50:c8:fc:88:b0:
70:62:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org