Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/M3izGuHNl51wZ7YFFF6i1CRBAxY.roa
File: M3izGuHNl51wZ7YFFF6i1CRBAxY.roa (raw, json)
Hash identifier: IguXLq94HyYxZXavzmAIXy3JK0k6UxnFtjycEIvLi0w=
Subject key identifier: 33:78:B3:1A:E1:CD:97:9D:70:67:B6:05:14:5E:A2:D4:24:41:03:16
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0184800E7FD4D48E7B9D83660EC6A06CC719
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/M3izGuHNl51wZ7YFFF6i1CRBAxY.roa
Signing time: Wed 16 Nov 2022 10:49:04 +0000
ROA not before: Wed 16 Nov 2022 10:49:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60362
IP address blocks: 78.142.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:0e:7f:d4:d4:8e:7b:9d:83:66:0e:c6:a0:6c:c7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Nov 16 10:49:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3378b31ae1cd979d7067b605145ea2d424410316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:5a:39:0b:5e:4b:70:ed:20:f4:0b:60:70:
4d:29:7b:26:ba:5c:32:a2:2e:d2:c3:ea:2e:b0:4b:
0c:73:ef:b5:07:db:17:ae:6f:d6:ab:0d:1f:2c:c6:
51:ca:3d:44:55:69:0b:fa:7b:d6:da:eb:9b:cc:24:
5f:42:67:4b:ef:93:b5:af:97:15:fc:bc:5a:61:bd:
66:c8:5d:c8:fc:3f:1a:7d:d8:e4:b1:46:fe:a7:62:
bc:4c:b9:e9:4a:08:6e:75:80:f9:9a:54:5a:7d:5d:
54:42:89:1d:e1:02:1c:20:96:5b:26:34:a6:b7:20:
dc:b5:f7:76:1f:cb:a6:de:cf:1e:06:8d:8a:fa:fc:
a4:67:0e:9d:c0:db:69:f9:50:ab:93:51:19:a9:7f:
50:50:60:22:bd:bf:09:6d:92:ee:8e:dd:ef:6b:c6:
16:4c:c6:f7:e3:a0:9f:45:97:1d:81:1b:58:5b:f5:
16:71:42:72:79:21:58:d7:56:27:60:26:8e:63:43:
4d:53:b6:41:58:aa:78:3b:be:94:80:5f:ed:64:30:
08:fa:af:34:b4:54:24:5c:8d:9a:3d:f6:f0:26:5d:
9c:b9:54:8b:63:d6:2e:a8:97:36:32:67:a0:8b:32:
ee:df:c8:99:50:2e:87:5b:d6:d2:ce:3f:1b:ed:fb:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:78:B3:1A:E1:CD:97:9D:70:67:B6:05:14:5E:A2:D4:24:41:03:16
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/M3izGuHNl51wZ7YFFF6i1CRBAxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5a:18:e9:19:f0:be:d0:33:7f:0f:08:cc:28:3b:a9:f9:ce:
e4:b7:1e:e1:bc:35:67:35:73:87:2c:a3:57:ad:37:bb:00:12:
46:a8:07:1e:d6:27:ca:5c:b5:13:38:95:dd:1b:83:d2:70:a2:
2c:a8:51:6c:02:37:24:6f:0a:b7:a0:56:09:73:0f:89:15:77:
fa:f2:e6:75:80:54:aa:aa:92:c9:1f:68:7b:d9:a7:ad:1c:34:
ea:4d:22:05:08:b5:be:d4:8c:ed:d9:84:fc:69:8e:d7:7b:d1:
c5:8e:f0:c5:f3:07:49:c8:35:50:61:4d:c5:23:bd:b4:42:52:
97:35:53:d5:fd:c0:fb:8d:b0:05:f1:48:82:e3:8c:a8:6d:ae:
97:ee:d9:6f:c1:8d:4e:68:e0:b2:e7:30:a3:9c:80:34:1a:d2:
6d:04:58:93:9b:e1:b1:d2:d4:df:f6:9d:37:ff:d4:5a:79:2f:
d2:67:4b:05:53:89:16:0c:79:ff:75:35:1f:ac:cd:86:c0:9d:
db:14:f8:2a:3e:91:be:fa:0c:9d:21:3b:fa:97:2d:fb:15:ab:
f6:55:57:4b:2d:f8:7d:ef:ef:ed:00:e0:a7:72:da:49:6d:b2:
52:c6:3b:85:9a:ac:68:cd:26:01:95:11:0a:bc:81:a5:27:28:
21:e1:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org