Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dc-K3w4_Nt2RWjvk_57dmv2KADk.roa
File: dc-K3w4_Nt2RWjvk_57dmv2KADk.roa (raw, json)
Hash identifier: 7vHm7nkKrRg2ReCDeC//CcLMJux1cCFOI0+Pr7NqaqI=
Subject key identifier: 75:CF:8A:DF:0E:3F:36:DD:91:5A:3B:E4:FF:9E:DD:9A:FD:8A:00:39
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0181FC78CBFFB31BA1DE38FDD36F3C183D4A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dc-K3w4_Nt2RWjvk_57dmv2KADk.roa
Signing time: Thu 14 Jul 2022 11:29:43 +0000
ROA not before: Thu 14 Jul 2022 11:29:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 217.156.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:78:cb:ff:b3:1b:a1:de:38:fd:d3:6f:3c:18:3d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 14 11:29:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75cf8adf0e3f36dd915a3be4ff9edd9afd8a0039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ac:b2:08:cb:56:61:5e:aa:c8:c5:d2:f6:f9:
de:e5:c8:dc:48:67:95:6e:af:44:9a:5e:c1:e9:cf:
c7:95:91:cd:4e:8f:df:71:1f:33:45:17:8a:a5:8b:
0e:d0:38:71:c9:e1:c5:8b:0b:82:60:c3:23:2d:89:
d0:58:c8:03:21:fa:75:5b:0d:a9:58:f5:30:eb:93:
77:35:60:9c:29:0b:12:83:74:77:b6:1f:95:ce:7d:
6c:82:4c:64:46:41:32:b2:22:58:90:54:4e:b9:12:
d7:17:3e:05:f2:90:0e:a8:af:cf:e8:44:da:92:5b:
1e:6a:d0:df:0d:d3:1f:b6:df:ad:d4:b3:bb:55:42:
89:3b:04:5c:b3:6c:36:9a:43:f2:ab:2e:ff:ae:a9:
64:f9:68:d7:d7:73:5a:54:20:4e:ad:d5:38:e4:96:
a3:85:34:17:2b:68:20:63:32:e7:85:dc:52:92:52:
3c:93:aa:68:ad:38:36:2b:47:31:12:b9:3f:f7:fc:
c7:86:94:5e:43:15:79:6a:1b:b2:29:63:b6:bd:d4:
15:16:18:f8:9c:aa:36:ce:3c:7b:5c:1a:00:88:96:
6e:ab:47:e8:5c:ca:1c:b7:1d:04:17:7d:8f:42:8f:
d9:5b:7e:ee:95:0d:9c:66:da:62:63:fc:e6:e0:0d:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CF:8A:DF:0E:3F:36:DD:91:5A:3B:E4:FF:9E:DD:9A:FD:8A:00:39
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dc-K3w4_Nt2RWjvk_57dmv2KADk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.96.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8c:e1:b7:74:6a:91:fb:27:e7:da:2f:d9:6b:54:25:d5:d8:
5c:c9:12:86:ab:65:48:0b:c7:af:08:7e:c0:7d:43:b8:e2:42:
a8:a2:fc:67:9e:e4:f2:c6:cc:f5:e9:e6:c1:7e:84:e5:84:26:
5a:26:9d:9e:b1:ba:26:22:7e:83:d1:ed:f0:bf:7d:6b:50:e3:
17:2a:b0:9c:6e:c2:c2:b3:0a:8b:c6:22:61:85:c1:d5:41:e1:
c8:34:36:64:47:42:01:45:4e:e8:c4:cf:69:53:7b:95:0f:93:
24:e0:fa:84:6e:fc:1b:38:1f:7b:cc:26:21:29:28:c0:6c:b3:
6d:8a:70:13:75:f2:5c:3f:06:a4:0e:4a:20:06:66:8d:0c:4f:
d5:57:eb:fe:e9:af:e1:2b:e7:7b:73:22:aa:7e:a3:bf:39:e8:
d8:77:c4:86:0a:04:5f:8c:71:39:ba:69:a1:00:50:1e:db:de:
e7:2a:3f:0f:67:25:bd:ec:4a:61:ae:cf:c9:45:ba:08:67:8c:
c0:c4:d8:6c:01:ab:da:c1:3a:29:67:95:a0:8f:24:8c:84:c0:
3b:ea:29:0f:c9:28:95:88:67:92:68:b3:a7:c0:af:76:ec:e0:
50:f3:82:e6:33:be:9a:46:e4:71:a9:f6:c8:7e:ff:d4:82:51:
45:47:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org