Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/aCUvaRuvb82lc1n1l5113Ep8CXY.roa
File: aCUvaRuvb82lc1n1l5113Ep8CXY.roa (raw, json)
Hash identifier: iDY10DNeGBabllV/G5IQR0Zyvd5xe+iHJIos0OpeBFE=
Subject key identifier: 68:25:2F:69:1B:AF:6F:CD:A5:73:59:F5:97:9D:75:DC:4A:7C:09:76
Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial: 0184CD788EAAD938109E8FD9A37E96B11286
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/aCUvaRuvb82lc1n1l5113Ep8CXY.roa
Signing time: Thu 01 Dec 2022 11:35:40 +0000
ROA not before: Thu 01 Dec 2022 11:35:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 164.138.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:78:8e:aa:d9:38:10:9e:8f:d9:a3:7e:96:b1:12:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Validity
Not Before: Dec 1 11:35:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68252f691baf6fcda57359f5979d75dc4a7c0976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:e1:2c:87:6a:b6:48:db:df:0a:18:e4:f9:
65:82:b3:d6:b0:45:bb:69:0e:cf:09:18:2f:d7:10:
f9:3d:35:13:36:8c:1b:4e:e0:30:a3:7a:0e:56:13:
2f:d6:72:e4:02:7c:56:0e:36:35:29:9e:5f:67:b8:
80:1b:d8:77:77:69:0e:89:e3:98:bf:52:ca:6c:17:
f0:56:92:30:64:64:b8:aa:49:3c:ce:03:8b:22:d2:
6b:55:b0:d3:cf:0c:69:cc:e4:4d:c9:39:45:29:e0:
50:4c:76:b2:c9:29:eb:36:5a:fd:1b:75:bb:d9:64:
fe:d5:7c:8d:1a:7f:ea:30:72:5a:49:cc:82:d2:99:
88:d4:08:ff:6b:a3:35:28:fe:e7:41:0d:0e:5b:34:
c8:db:eb:c5:d8:e1:6c:17:73:a8:22:c1:d5:22:4c:
74:7d:78:b6:89:6d:55:06:81:86:1b:39:cd:ff:21:
2d:62:77:da:2f:24:9a:4a:0e:49:ab:1d:34:2e:d6:
a8:6b:4c:6f:2b:76:12:d7:41:5c:72:20:7c:3f:d5:
47:d1:b5:a8:b6:0b:56:01:f1:ed:57:cc:36:e6:aa:
6c:f0:aa:51:66:1d:b2:6a:ec:5d:e2:64:be:0d:a9:
65:97:32:a0:1f:0b:1e:43:0f:69:6b:cd:67:f3:43:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:25:2F:69:1B:AF:6F:CD:A5:73:59:F5:97:9D:75:DC:4A:7C:09:76
X509v3 Authority Key Identifier:
keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/aCUvaRuvb82lc1n1l5113Ep8CXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.248.0/21
Signature Algorithm: sha256WithRSAEncryption
24:94:c9:86:1c:00:8a:21:71:49:58:61:73:a9:47:42:5d:8d:
9a:a2:5d:5c:c1:72:70:82:d0:1b:69:6a:cc:2a:f1:0c:fa:77:
9e:ea:3c:66:92:17:80:cf:f6:26:72:1d:25:c7:73:2b:ec:29:
26:52:86:f7:63:47:0a:79:be:32:b4:b0:fe:d2:97:33:48:d7:
70:38:e9:9e:8e:ac:e2:fa:2a:12:3b:9e:04:ab:ab:1b:01:e1:
53:c6:14:7f:35:60:05:8f:8b:4a:d4:d6:34:2d:da:55:26:88:
48:62:4c:fa:b1:dd:b0:8c:5d:22:79:9f:14:bd:fc:a5:b1:7d:
7e:29:be:f6:8b:d0:5c:1a:e9:13:c5:bf:c1:29:5d:ea:c9:d9:
2c:5a:af:c2:24:4d:c9:14:47:19:e3:2c:df:f7:d5:06:88:ea:
0b:c8:4a:27:03:99:49:6b:96:4c:f4:f6:91:fb:86:77:5d:da:
c8:86:2c:e3:bc:c2:bb:1f:6b:53:f8:38:6a:71:a7:58:6f:30:
0a:55:96:1c:93:43:ea:0c:02:7e:d8:1c:ab:4c:f4:d6:24:00:
0a:11:29:36:e5:f6:43:45:6e:a7:18:dc:0c:7f:92:d6:ff:2f:
21:48:c2:e3:6d:89:03:44:ee:72:5e:53:2c:e0:c2:d8:8f:27:
b3:b6:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:43 2023 by rpki-client on console-fra.rpki-client.org