Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xItTC_6yMgtKYXkIuI1tgcBByH8.roa
File: xItTC_6yMgtKYXkIuI1tgcBByH8.roa (raw, json)
Hash identifier: /RnmJXyxFcL+3OfJ4Rv5eHAOsrYdzsne9118ACcNQ8I=
Subject key identifier: C4:8B:53:0B:FE:B2:32:0B:4A:61:79:08:B8:8D:6D:81:C0:41:C8:7F
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01837DC7C90D896C25066A7B763CCEDAEC12
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xItTC_6yMgtKYXkIuI1tgcBByH8.roa
Signing time: Tue 27 Sep 2022 07:09:48 +0000
ROA not before: Tue 27 Sep 2022 07:09:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 194.163.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:c7:c9:0d:89:6c:25:06:6a:7b:76:3c:ce:da:ec:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 27 07:09:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c48b530bfeb2320b4a617908b88d6d81c041c87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:4d:0d:1e:26:44:e9:62:2f:50:74:da:e7:
c2:b1:ef:bb:df:2a:e7:10:4e:33:94:37:2e:44:88:
1e:97:ff:94:45:1b:49:24:54:b3:62:de:5e:0c:f9:
84:7f:ef:09:65:e0:23:b9:e5:de:66:14:35:2a:f6:
db:c9:93:6d:d7:2a:49:c4:05:8b:6c:5a:f0:94:79:
a4:ca:cc:77:eb:0e:e7:df:35:72:e5:ed:c2:dc:eb:
4c:4d:47:30:f4:a8:ed:10:c7:88:60:aa:1e:92:46:
66:de:af:50:b3:7c:f1:8c:9a:20:63:56:64:57:ef:
57:22:fc:50:b5:0f:a3:7c:b0:a5:73:9d:37:1b:c5:
d7:24:74:1a:d5:b6:47:a3:7a:bf:e0:0a:a8:d6:92:
63:33:f7:22:cf:3d:a0:47:72:5e:a9:90:3a:67:0b:
e5:fb:4d:50:3b:0d:88:13:1f:e5:66:ea:d9:e8:39:
06:0f:58:2d:aa:62:44:48:7a:7d:33:c8:61:14:0d:
57:38:9b:b6:51:18:02:2c:04:f5:78:26:66:42:e4:
1f:3b:64:26:08:86:1a:81:56:4a:1d:91:85:5d:c5:
29:6f:8c:ce:33:02:b7:e3:2f:e6:85:45:27:10:30:
4e:02:38:b2:2d:2e:bd:63:56:e3:7a:9b:da:c8:32:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8B:53:0B:FE:B2:32:0B:4A:61:79:08:B8:8D:6D:81:C0:41:C8:7F
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xItTC_6yMgtKYXkIuI1tgcBByH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.92.0/24
Signature Algorithm: sha256WithRSAEncryption
38:79:0b:66:f3:69:48:70:dc:7c:a4:16:5b:3f:62:1c:0c:66:
a1:c9:a0:1b:08:35:77:21:46:2d:b8:8a:58:e8:4f:4e:17:52:
b3:91:3a:04:48:48:2f:03:a0:26:77:e5:98:80:0c:f2:a7:69:
50:ec:e1:f0:3a:05:6a:aa:34:a3:22:2e:47:76:34:db:5f:3a:
be:e9:bf:4a:cf:73:3b:47:91:aa:62:3f:17:89:da:fd:c1:a0:
71:f6:38:b1:47:70:5a:0d:3f:48:01:30:ad:82:be:41:81:40:
47:44:bc:a9:07:88:66:e1:8c:3f:b3:cd:21:44:af:f7:41:c7:
15:2c:a4:d7:4a:1b:7c:b4:4b:3a:df:79:22:fe:85:11:e0:89:
b0:df:14:74:56:b0:a8:12:e1:41:b7:7f:53:ef:10:92:67:6f:
ed:08:0a:f3:c4:12:08:ab:9b:1c:bd:c7:44:40:6a:90:99:65:
e8:49:bc:e5:e2:fe:51:9a:d8:73:00:a2:52:fb:c5:e7:76:fa:
54:4c:87:30:54:42:fb:5c:6f:d2:62:ce:95:33:6e:88:90:a3:
04:e9:c9:4e:a2:38:af:4d:3c:24:7d:01:2d:e3:e1:b6:20:91:
a5:95:3d:24:a8:e3:65:65:96:cb:2a:07:b6:2b:2d:44:86:aa:
6a:f9:bd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:30 2023 by rpki-client on console-ams.rpki-client.org