Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XDm4xqbEuS80RVe7jTSXQIF-Vh0.roa
File: XDm4xqbEuS80RVe7jTSXQIF-Vh0.roa (raw, json)
Hash identifier: bWkeGwFiw3ktyyfE8Zbjo6xmFVpYMLQLhPoaXNr37II=
Subject key identifier: 5C:39:B8:C6:A6:C4:B9:2F:34:45:57:BB:8D:34:97:40:81:7E:56:1D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018533969A32B8108B37A56D1E2A7163651B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XDm4xqbEuS80RVe7jTSXQIF-Vh0.roa
Signing time: Wed 21 Dec 2022 07:29:45 +0000
ROA not before: Wed 21 Dec 2022 07:29:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 193.57.41.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:96:9a:32:b8:10:8b:37:a5:6d:1e:2a:71:63:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 21 07:29:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c39b8c6a6c4b92f344557bb8d349740817e561d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:88:e9:e0:58:6a:bf:10:ec:7f:5e:5e:fb:
6b:cf:48:cc:74:58:08:14:ea:5b:8c:fd:1d:9b:64:
a7:b6:e0:ca:54:9c:77:84:3d:4f:61:8d:cd:ac:06:
ae:0d:28:4d:ad:16:2a:c9:3a:e5:58:f0:09:a6:5b:
db:95:27:54:78:44:e1:fe:a1:6d:26:11:99:4f:a3:
2b:55:c4:e4:8a:bc:c7:49:55:d0:63:6e:10:1e:77:
9c:2e:62:0d:c1:0e:16:e0:dd:b7:60:dd:a3:e9:4a:
47:b9:5f:f3:52:b8:65:6f:d7:39:e3:d7:40:57:a5:
5f:a8:38:53:b6:48:b8:14:90:7e:03:38:8e:bc:6a:
41:d1:05:54:aa:c8:ce:07:5b:4c:24:fc:0d:53:4a:
88:84:87:98:8e:e7:e0:ea:5a:cc:b3:13:57:ba:24:
c1:08:c9:fb:9f:59:ec:93:fa:a8:57:d8:71:ea:b5:
b4:3f:11:d1:cb:18:a3:f8:34:14:dc:45:86:8b:93:
0d:38:a2:8e:0e:be:12:ff:f7:9e:96:6a:ee:f4:2f:
30:5a:67:5d:e3:df:e2:7b:b5:10:52:ef:b7:38:b3:
ce:25:06:d5:57:89:32:16:7f:23:9f:ce:00:11:c0:
06:11:92:c6:3a:9d:00:fa:f2:54:01:8b:b9:0d:40:
b7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:B8:C6:A6:C4:B9:2F:34:45:57:BB:8D:34:97:40:81:7E:56:1D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XDm4xqbEuS80RVe7jTSXQIF-Vh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
193.57.41.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d3:3a:0c:c8:92:3c:01:86:8e:94:c7:c9:32:54:0b:65:9b:
00:b8:c9:ac:54:3f:3f:f6:5e:41:a7:dd:f5:4f:c5:f4:71:65:
18:e2:34:72:4c:79:79:ff:e8:90:cf:05:95:13:11:dc:a2:bb:
ac:4f:15:02:7c:77:69:14:cc:ec:d0:74:f6:8c:e9:8d:db:f6:
b0:29:ea:cc:96:34:d9:b6:de:ed:e7:22:bc:3a:4c:c0:f2:b1:
72:55:e0:69:8d:a3:11:e7:16:1c:d3:f8:eb:3f:dd:c6:e1:3f:
7b:46:0f:c3:9c:e7:8f:69:6d:a6:61:a9:96:a5:4c:ab:52:e7:
ca:e1:86:3d:a2:40:65:1f:dd:c2:ce:2e:f5:29:d9:8f:fb:f3:
96:82:85:30:42:52:6a:51:cc:51:15:48:b9:ab:d0:51:1a:b2:
70:37:ab:d8:0b:c3:81:d0:49:1b:42:2e:08:11:d2:47:bc:27:
3b:5c:be:c8:70:37:50:bc:f5:bf:8a:b3:ff:6d:70:e0:ac:79:
29:ca:3c:4c:7e:5a:06:90:bb:5d:92:28:ec:59:e0:a6:3f:f5:
f2:05:27:78:30:48:15:3f:f7:d5:d4:1e:66:1e:73:b4:04:fc:
52:ad:54:32:5e:08:64:36:ff:4d:b7:3c:86:fe:b7:40:50:58:
f8:de:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org