Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VShPg8RaKsHaefJ1if7zsH8kDcw.roa
File: VShPg8RaKsHaefJ1if7zsH8kDcw.roa (raw, json)
Hash identifier: xd3FwhCFS3LY/AnJI1RkfzJru3QH6lYkz3EPk5fevV8=
Subject key identifier: 55:28:4F:83:C4:5A:2A:C1:DA:79:F2:75:89:FE:F3:B0:7F:24:0D:CC
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01849A66741ECBDDACFCF518A076388CD7D9
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VShPg8RaKsHaefJ1if7zsH8kDcw.roa
Signing time: Mon 21 Nov 2022 13:35:16 +0000
ROA not before: Mon 21 Nov 2022 13:35:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54975
IP address blocks: 212.107.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:66:74:1e:cb:dd:ac:fc:f5:18:a0:76:38:8c:d7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 21 13:35:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55284f83c45a2ac1da79f27589fef3b07f240dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:bd:4a:2a:3d:6a:c0:1c:1e:57:bd:7e:c9:
06:3f:2e:7e:05:5e:5d:51:34:61:cd:75:4e:9b:4d:
0b:e0:67:af:26:59:0a:42:83:52:17:70:11:76:af:
5e:e5:24:df:2d:42:b1:a5:9c:18:80:d7:8e:2d:cb:
40:c8:75:63:28:b9:e7:cf:42:04:44:59:51:d1:c4:
06:85:9a:74:4d:85:7a:eb:43:69:a2:26:b1:6f:70:
ac:a9:33:a7:6b:67:63:ba:a6:bc:bf:f9:54:44:fb:
07:33:c7:1e:23:eb:cf:37:db:02:6f:55:bf:83:bc:
a2:9e:5b:f6:9e:9b:60:77:9c:ab:38:23:2c:95:9c:
c5:9c:1b:d8:66:0e:07:b9:6d:72:ea:76:89:23:1c:
ca:ec:c8:24:96:59:e1:68:2e:f6:a1:ab:b8:df:c8:
f7:c1:7a:01:8c:61:8e:0b:49:14:27:c0:47:3c:f6:
e4:4c:20:2f:27:db:e8:70:f7:54:fd:ee:2d:16:2f:
63:fd:78:88:1b:3d:91:36:a3:62:b3:5d:04:63:c0:
a0:7b:06:58:27:d8:9b:e0:fb:89:e1:40:44:24:c6:
4c:e2:d5:89:3e:c6:c4:b0:76:c4:2b:cb:1f:23:e9:
38:f3:6c:22:f0:f2:fa:92:42:1d:7e:9c:55:4a:ae:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:4F:83:C4:5A:2A:C1:DA:79:F2:75:89:FE:F3:B0:7F:24:0D:CC
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VShPg8RaKsHaefJ1if7zsH8kDcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f9:fa:2a:dd:af:ef:2e:1d:db:d6:05:3c:b3:bb:33:27:bd:
29:23:99:01:95:32:5e:44:43:39:f3:a4:49:0e:d7:1b:5e:e9:
2f:55:8f:dd:0e:f7:ed:25:8c:e5:c2:a6:98:41:9f:2d:9e:66:
ad:6b:23:ec:4b:b3:bb:0b:47:8b:6b:85:89:da:0b:db:75:57:
cc:c2:57:cf:20:96:d1:82:01:c3:a3:ca:67:1a:1e:0d:cd:5b:
2a:e0:a1:6a:1d:35:b5:c4:b2:91:fd:f0:32:7f:2c:41:1f:51:
43:0c:9f:46:af:72:7e:f7:ce:95:2c:da:9c:ec:ff:11:cf:47:
ee:86:53:02:ac:c1:4d:46:38:7a:20:c4:e8:07:2f:e6:7d:01:
4e:0c:c4:af:d5:03:88:c5:a1:00:4d:8b:f1:19:b3:af:f7:e1:
4c:43:96:27:28:8b:eb:00:7f:1e:21:c3:57:36:c0:15:21:d1:
ea:7f:e1:d5:da:fb:e7:0d:42:f3:c1:f6:71:96:f7:3f:c5:2a:
1d:56:6a:52:cd:08:a3:b5:de:d6:5c:6f:26:e9:aa:5e:0d:73:
bf:26:11:57:b2:e5:67:f7:f4:62:a6:5b:80:59:e7:bc:4f:18:
30:ff:13:72:69:22:b6:0d:d0:22:15:8e:ac:aa:e0:df:8d:66:
69:b7:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org