Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/q5rKVUDAeAZGHhqdm_9F6k7cnow.roa
File: q5rKVUDAeAZGHhqdm_9F6k7cnow.roa (raw, json)
Hash identifier: wX5uzSzq6rTYb0JP0yaXRGn0RTCNeH1T9oMKxV8mfIQ=
Subject key identifier: AB:9A:CA:55:40:C0:78:06:46:1E:1A:9D:9B:FF:45:EA:4E:DC:9E:8C
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0388878E
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/q5rKVUDAeAZGHhqdm_9F6k7cnow.roa
Signing time: Sat 01 Jan 2022 15:57:26 +0000
ROA not before: Sat 01 Jan 2022 15:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56322
IP address blocks: 78.142.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59279246 (0x388878e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 15:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab9aca5540c07806461e1a9d9bff45ea4edc9e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:87:15:9a:48:dd:b5:49:1d:d9:00:cd:17:
a5:46:03:3c:0d:3c:7b:be:25:ff:03:9b:37:55:e2:
b8:c2:be:45:08:bd:76:9b:7b:3f:30:17:34:80:7a:
60:29:2a:db:ae:5c:a2:47:bc:0b:ac:20:aa:2d:0e:
7f:e8:f2:0a:32:4e:3d:6e:1d:e7:4d:fa:8f:e2:a1:
8f:2d:92:81:0d:b2:94:20:24:6b:96:9c:53:4e:ec:
36:5e:30:97:09:9e:96:0f:7b:f5:9c:9d:92:3f:19:
d9:0e:79:ae:2e:25:a4:83:ab:2f:9b:d7:3d:19:29:
02:3c:3d:d9:bb:96:af:04:42:8e:f8:db:ff:1c:aa:
96:04:e8:e0:20:69:16:8c:68:b2:7a:55:5e:7b:d0:
8d:e4:43:42:0d:1a:d7:d2:c4:f5:83:2c:04:7f:7d:
b2:28:e3:c4:90:e4:05:73:8e:be:e7:24:1b:31:51:
b2:3f:b1:cb:93:f5:4a:65:4c:cc:74:60:0e:dd:a9:
41:c5:6a:15:9e:1a:36:c8:01:e0:59:6a:98:23:d7:
6d:cd:d4:eb:7c:9e:57:17:f0:2d:36:c9:de:23:21:
e9:14:0b:7f:8e:62:4a:4d:a9:a2:0e:d4:27:f1:e5:
e7:75:62:8e:18:b7:3a:47:19:88:13:bf:18:ba:c6:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9A:CA:55:40:C0:78:06:46:1E:1A:9D:9B:FF:45:EA:4E:DC:9E:8C
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/q5rKVUDAeAZGHhqdm_9F6k7cnow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.217.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0b:70:76:7d:ee:9f:fa:f0:ea:0d:a6:53:30:45:98:ab:67:
23:66:b7:21:2d:1f:40:be:86:1d:11:33:96:d3:90:1d:5e:f7:
71:c9:9a:c3:49:21:8a:d3:79:6c:a2:39:15:ca:b7:58:fc:ba:
08:31:cb:aa:19:c1:6f:06:07:fa:d8:51:af:62:84:d7:91:f5:
b6:ec:e8:4d:60:c2:db:11:78:ca:e8:70:a3:25:72:11:61:e1:
4b:cc:50:20:e2:bb:5e:db:36:ef:65:5f:76:ad:57:eb:10:4d:
e6:75:a8:ff:90:d4:f2:a5:0c:e2:ac:fb:ce:ac:52:9a:3e:96:
ed:c0:ed:ac:ec:26:36:30:29:e2:a5:b6:39:63:de:30:60:3d:
0a:91:e2:c4:7a:8c:d8:51:6e:bb:97:46:97:b3:0b:33:e4:2b:
5f:2e:78:b4:95:2a:00:ca:0c:6d:ce:b6:27:80:1b:13:0a:d2:
50:be:ed:fc:44:44:55:03:1a:ef:9a:08:f0:77:6f:b4:1a:e3:
c6:8e:7d:73:24:55:35:b4:c4:c5:a5:d0:1c:ba:52:71:2e:9a:
5d:1e:ed:c7:0a:db:31:39:b3:7c:45:dc:7e:ae:1c:a2:91:ff:
25:9e:d6:c5:4f:c6:cb:0e:93:c3:46:42:21:00:38:62:ab:18:
f3:42:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org