Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/oIriUxkDW1XiXbnzl1H-MEtgjS4.roa
File: oIriUxkDW1XiXbnzl1H-MEtgjS4.roa (raw, json)
Hash identifier: loSXiI+EBIokGcZXMZbmhompDfz7ekAI6MDY6cXYBCQ=
Subject key identifier: A0:8A:E2:53:19:03:5B:55:E2:5D:B9:F3:97:51:FE:30:4B:60:8D:2E
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 01830D5544662B88FF73BE638FA1DFCB731D
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/oIriUxkDW1XiXbnzl1H-MEtgjS4.roa
Signing time: Mon 05 Sep 2022 11:07:15 +0000
ROA not before: Mon 05 Sep 2022 11:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205087
IP address blocks: 37.143.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:55:44:66:2b:88:ff:73:be:63:8f:a1:df:cb:73:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Sep 5 11:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a08ae25319035b55e25db9f39751fe304b608d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:e9:bf:1f:ec:60:f8:6a:c9:ec:dc:cf:d7:
e4:a8:01:ca:f8:64:15:71:9f:67:c2:63:dc:36:6f:
d0:09:c0:d0:e0:e0:ce:59:48:cf:7a:08:28:01:04:
cf:15:df:b8:4e:a3:40:c7:e0:09:73:f8:c5:76:fe:
37:d0:87:38:60:e1:86:12:21:ea:f2:96:ba:4c:8f:
5f:33:49:e7:01:b5:97:c6:d3:f1:96:ce:60:d3:f0:
eb:8e:e4:15:16:2a:72:a7:cf:e7:90:4f:b5:2f:7c:
7b:08:7a:50:1d:82:75:6b:0a:ba:f6:d5:d3:26:67:
93:47:39:11:fe:b3:c0:19:93:8d:4a:9e:18:40:b6:
1d:10:49:40:8d:41:15:9f:1a:c3:7c:74:fa:54:0d:
f3:2b:f3:88:59:38:90:ad:28:54:b4:8f:2e:0e:db:
19:bd:2b:51:64:18:72:d5:5e:df:d1:8f:82:d1:b5:
64:1d:24:fb:60:74:59:e5:46:60:39:98:66:62:ac:
59:63:2e:ff:5b:bb:7a:12:95:16:4e:d5:a6:a7:7b:
2a:91:e3:e7:bf:c3:16:d9:31:6a:7d:77:d6:f4:a1:
a8:0c:1d:d1:82:61:3d:0d:7f:c6:a4:60:1a:1f:4f:
64:ac:4f:bd:de:5a:d5:1b:f4:e7:f5:12:1f:8f:00:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8A:E2:53:19:03:5B:55:E2:5D:B9:F3:97:51:FE:30:4B:60:8D:2E
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/oIriUxkDW1XiXbnzl1H-MEtgjS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.169.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9e:92:f4:5a:a5:5a:1e:2a:79:a8:ed:fa:e0:18:0e:a7:f3:
72:ec:13:f9:24:63:df:92:96:71:e6:ba:8e:f7:6f:60:c9:33:
d3:7b:6f:ba:31:ca:4e:3e:f0:b5:4a:2a:58:99:19:0c:88:ab:
f7:b3:e6:bd:50:22:5e:45:fb:ff:98:11:2f:ac:0b:be:33:00:
fd:e2:a8:81:ad:a9:38:ab:88:8a:a6:32:82:05:d7:00:16:28:
67:4b:88:8b:26:91:7b:9a:31:0a:8d:9d:ef:01:a6:02:02:d6:
07:d8:93:15:ec:1c:ea:e8:ca:82:f3:8e:48:01:ea:35:6f:0d:
16:d7:87:d4:c9:af:23:b3:a7:93:43:3d:f9:97:16:83:68:a3:
ff:2f:13:56:6f:6a:4b:94:7b:e1:f9:f0:44:55:bb:e7:e2:fe:
3e:9e:35:03:6e:48:1f:8a:78:ab:19:00:f6:58:db:9a:e8:97:
1b:99:37:b2:e4:a5:01:cb:62:c7:42:74:a6:c8:8b:e4:5a:7d:
f6:b5:d5:d0:a8:5a:5d:70:d3:9b:4f:c2:57:ac:19:a9:d5:a0:
2a:11:62:25:a5:a5:3f:63:43:99:91:4d:75:5b:2f:4a:08:f5:
99:bf:9b:34:d1:6e:28:ec:1a:9b:48:3a:b3:9f:9e:7c:ed:a1:
eb:ab:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:25 2023 by rpki-client on console-ams.rpki-client.org