Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/4bSAyG48XnSr9Va5ciAHxRhrmhQ.roa
File: 4bSAyG48XnSr9Va5ciAHxRhrmhQ.roa (raw, json)
Hash identifier: nIDOxDh0hpKmFFVDZLoUklhJV7datVT2vA4AEsAFVyo=
Subject key identifier: E1:B4:80:C8:6E:3C:5E:74:AB:F5:56:B9:72:20:07:C5:18:6B:9A:14
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 0796B19F
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/4bSAyG48XnSr9Va5ciAHxRhrmhQ.roa
Signing time: Sat 01 Jan 2022 07:01:45 +0000
ROA not before: Sat 01 Jan 2022 07:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12794
IP address blocks: 217.169.192.0/22 maxlen: 22
217.169.192.0/21 maxlen: 21
217.169.192.0/24 maxlen: 24
217.169.192.0/20 maxlen: 24
217.169.193.0/24 maxlen: 24
217.169.194.0/24 maxlen: 24
217.169.198.0/24 maxlen: 24
217.169.199.0/24 maxlen: 24
217.169.197.0/24 maxlen: 24
217.169.195.0/24 maxlen: 24
217.169.196.0/24 maxlen: 24
217.169.200.0/24 maxlen: 24
217.169.201.0/24 maxlen: 24
217.169.206.0/24 maxlen: 24
217.169.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127316383 (0x796b19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jan 1 07:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1b480c86e3c5e74abf556b9722007c5186b9a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:1e:db:e2:db:b6:91:80:58:2f:67:b3:e5:
8c:94:26:7a:19:08:48:59:2b:75:ee:3e:00:5b:a6:
55:df:d8:cd:44:c9:a5:72:b6:51:ae:93:84:03:6a:
5d:d6:54:45:f8:fc:7e:61:bd:c6:be:34:30:92:c8:
ab:fd:66:46:38:96:ce:3f:a9:3a:fb:90:54:44:36:
60:4c:cf:dc:f5:00:bf:8c:6c:2f:a1:aa:91:c2:65:
3a:22:6e:32:9b:e6:ac:9b:53:4a:a8:fa:d9:ac:e8:
0f:5e:cd:27:2f:c5:86:5e:fe:4a:7a:07:c1:65:c3:
b5:15:8d:94:62:8a:53:6f:da:a6:7d:a9:24:46:ce:
79:2e:bd:fd:15:3c:46:cb:e9:84:c6:7f:e2:46:b2:
7a:77:64:39:94:b0:61:29:2a:10:5d:e2:f2:1b:a1:
9a:e9:c8:06:92:fb:a6:87:84:c4:95:70:fe:d7:77:
d7:fe:f6:cf:cf:e9:c7:f6:17:a2:3b:2a:82:1e:5c:
56:9f:91:89:0e:d0:ab:6d:65:df:df:0f:6a:f9:21:
44:41:a4:32:2f:ee:d6:06:f8:4c:74:e1:e6:74:80:
ab:7d:7c:15:a4:e3:de:53:6b:d8:8b:12:4b:ba:ff:
86:42:d4:91:96:c6:30:a8:93:79:89:14:a0:b8:bc:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B4:80:C8:6E:3C:5E:74:AB:F5:56:B9:72:20:07:C5:18:6B:9A:14
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/4bSAyG48XnSr9Va5ciAHxRhrmhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.192.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:30:5a:5a:49:48:ff:ea:2e:0b:b7:60:ff:e8:4a:50:0b:c7:
74:03:23:03:38:c5:19:bd:44:53:ed:b6:45:2b:26:e5:a2:40:
89:03:f9:ae:0c:4c:08:a3:cc:84:cf:5b:60:d2:b8:42:61:d4:
c6:69:9d:aa:15:3c:45:4e:52:28:94:0f:86:3f:bf:bf:0d:31:
f0:3a:fa:7f:1c:a2:85:f4:5b:46:cd:73:4e:d5:dc:21:13:9f:
aa:a1:2d:b4:94:65:b4:3a:e8:a4:1d:9e:0b:7f:44:6e:f0:49:
66:66:96:a5:ce:fa:30:a5:d7:e3:2a:78:d6:fd:b7:4e:8c:fa:
21:1c:e9:54:5f:1f:79:9e:56:6d:c0:20:04:12:69:e2:98:7e:
84:d2:3c:e3:7b:3e:c0:e4:76:7f:89:d3:a6:19:dc:00:a3:fa:
47:ac:a7:b3:c0:48:4f:70:2b:ed:89:ff:5a:47:01:25:f9:0d:
ad:7d:34:9a:1f:6c:a2:00:74:d1:90:1e:0f:81:bc:66:46:ad:
fa:18:a2:6a:57:6d:f2:90:e7:d3:60:6f:2b:14:bc:bf:ed:55:
4e:56:4e:0f:12:a9:4a:bc:09:35:c7:4e:4d:95:b1:b4:fa:7a:
e9:ce:13:20:b0:4e:46:64:c5:cb:e2:cc:e0:36:72:e8:47:6c:
91:83:19:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org