Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/F9rSVWQP2T__Y0LLUPxqxPRjDhw.roa
File: F9rSVWQP2T__Y0LLUPxqxPRjDhw.roa (raw, json)
Hash identifier: QyAupnVMFYnqxPUcLwbohiLkMjRBuzK+6FWjfDqU9/o=
Subject key identifier: 17:DA:D2:55:64:0F:D9:3F:FF:63:42:CB:50:FC:6A:C4:F4:63:0E:1C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09064E7B
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/F9rSVWQP2T__Y0LLUPxqxPRjDhw.roa
Signing time: Sat 01 Jan 2022 16:00:27 +0000
ROA not before: Sat 01 Jan 2022 16:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43357
IP address blocks: 194.50.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151408251 (0x9064e7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17dad255640fd93fff6342cb50fc6ac4f4630e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:86:cb:23:a2:ad:c1:10:d8:56:b8:65:f4:
c7:75:01:1b:2e:98:95:90:05:d2:c9:cf:84:0a:ee:
ff:d7:14:57:61:c1:c9:c7:f3:e2:ca:2f:e4:a9:75:
19:3e:d5:26:a8:5a:2a:4d:a7:9f:a8:93:37:ed:d2:
87:13:eb:d0:cb:5c:d6:d9:fe:b3:91:69:9a:bd:12:
36:b4:2a:d7:53:ed:e0:7a:81:65:3f:77:17:f1:f8:
f9:50:28:d0:6c:a2:a3:8a:33:aa:07:14:ed:59:2b:
bc:b9:62:e4:53:32:1d:05:24:39:52:07:fa:d0:10:
bb:f8:38:78:44:70:c4:cb:54:84:93:9c:7b:64:81:
ec:c2:cf:c2:a9:0a:b4:57:0c:a8:26:14:11:c7:43:
b6:64:9e:df:0a:84:1d:89:85:77:4a:d3:00:52:d1:
4c:a1:f1:d5:84:f0:c1:b0:88:54:b1:81:02:fe:fd:
91:45:70:15:48:4c:03:74:07:e9:c4:44:18:85:bd:
df:31:00:58:2e:61:30:58:f4:42:ab:98:97:a0:60:
6b:53:f2:79:ee:fc:c0:d0:e9:bd:56:1f:e5:8a:39:
d9:0c:46:df:06:8e:72:2f:3f:71:20:97:cf:c5:5a:
0e:6c:59:b7:bb:cc:d1:d6:fa:70:24:c1:af:09:7a:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DA:D2:55:64:0F:D9:3F:FF:63:42:CB:50:FC:6A:C4:F4:63:0E:1C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/F9rSVWQP2T__Y0LLUPxqxPRjDhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.18.0/24
Signature Algorithm: sha256WithRSAEncryption
98:53:3c:12:9a:f7:e6:15:3f:01:45:84:04:23:bf:53:4a:b6:
39:d7:5a:2a:d3:ec:05:02:b0:03:0a:f0:2b:c6:9a:5f:89:a3:
08:1e:74:b8:91:db:fe:d2:4b:03:5d:63:3b:98:39:63:49:27:
a3:5d:16:84:20:ab:06:ce:46:91:43:7d:43:d7:9b:75:74:a0:
e1:cb:3f:5c:a1:e7:27:86:02:e9:10:5b:9d:11:a3:34:c6:81:
03:3a:51:dd:50:d2:7a:e5:41:41:04:97:7a:21:84:3d:b3:2c:
60:89:ca:0d:61:7d:7a:80:99:90:21:f4:da:45:37:1d:90:ab:
69:38:3d:0e:18:5d:ff:22:49:51:c3:e0:8f:35:85:97:77:51:
55:44:71:c5:82:22:33:ab:c6:5a:2b:51:ff:fb:de:f4:c3:a0:
ad:89:8b:ce:2f:53:5e:26:68:00:01:81:5b:45:a7:41:1e:5a:
46:8b:bd:49:45:e5:70:ca:2a:a9:61:f0:d6:59:66:7c:39:df:
71:e8:3f:29:ef:42:2a:c4:2b:95:15:3a:b0:ba:d0:0d:4d:28:
94:6d:ac:fe:d5:75:b6:20:a9:a2:e0:ba:aa:de:2b:03:96:2f:
0e:7f:66:d8:f6:60:e3:cd:c7:ac:70:59:e4:0b:c7:a0:67:bc:
21:1d:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org