Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/xi5GdfR-PjbVFK6plquJxaeqZJY.roa
File: xi5GdfR-PjbVFK6plquJxaeqZJY.roa (raw, json)
Hash identifier: UtcRR5StgtTiK+b5cPs4z7etLYfVr2Y4SI/9uR+8p5U=
Subject key identifier: C6:2E:46:75:F4:7E:3E:36:D5:14:AE:A9:96:AB:89:C5:A7:AA:64:96
Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial: 0513137A
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/xi5GdfR-PjbVFK6plquJxaeqZJY.roa
Signing time: Sat 01 Jan 2022 13:05:49 +0000
ROA not before: Sat 01 Jan 2022 13:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207366
IP address blocks: 164.138.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85136250 (0x513137a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Validity
Not Before: Jan 1 13:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c62e4675f47e3e36d514aea996ab89c5a7aa6496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:2b:80:5b:c7:d2:1d:43:a4:1e:b0:9d:40:
50:4e:42:82:df:d7:1d:b9:fc:1b:42:0c:2e:5e:65:
a2:40:c0:17:3b:26:10:79:84:ad:0b:7d:9a:c0:27:
80:05:3b:e3:6d:74:3a:b3:b2:d5:f4:09:e2:c0:4e:
ca:5a:b4:fe:cd:79:65:75:6e:d2:75:14:96:b4:77:
13:e8:48:f8:df:33:25:cb:22:af:6c:03:2e:fa:ce:
f7:81:f4:74:5f:90:eb:77:e5:67:f0:2f:2e:91:cc:
b5:41:a2:9e:86:6c:46:21:ec:c1:27:02:9f:72:c0:
ca:77:0d:90:aa:89:dd:7c:54:2d:72:42:5d:0a:03:
75:2e:3c:d3:bf:49:28:06:c9:e9:56:88:b6:a5:6b:
cd:6b:cd:bb:71:94:7f:6d:c5:e4:19:58:0b:74:e8:
a3:08:8c:93:d2:04:19:71:26:6d:61:eb:aa:c6:77:
2c:a4:48:0e:6e:02:d0:07:1c:1a:77:e9:ed:ed:78:
71:ea:3d:68:26:4b:63:b9:a4:7c:0c:44:0b:8d:1f:
14:fc:82:7b:c7:60:0a:a3:61:92:ff:b4:55:da:71:
e1:09:16:df:6e:75:2e:16:d2:b9:ba:81:d8:e9:61:
c8:37:eb:2c:52:bc:fa:b0:e3:55:a1:0c:69:27:d3:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:46:75:F4:7E:3E:36:D5:14:AE:A9:96:AB:89:C5:A7:AA:64:96
X509v3 Authority Key Identifier:
keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/xi5GdfR-PjbVFK6plquJxaeqZJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:90:ae:f6:84:05:fd:98:bc:e9:52:74:0c:6a:8d:20:82:ae:
6a:d8:49:da:8e:9c:72:9e:ba:03:ac:a7:5c:be:6b:55:d6:6f:
b9:7e:55:fd:28:9b:6e:e1:26:ba:28:ac:f1:b0:97:37:89:35:
18:56:47:71:9e:95:32:02:a2:92:80:2d:cf:65:37:76:d9:c4:
d9:10:b7:b6:9e:82:05:85:26:39:5d:31:77:b7:1e:8d:c1:cc:
1d:42:96:c3:10:31:18:2a:d2:49:05:fc:e3:50:82:b5:d0:74:
6e:30:f6:b6:ec:5f:a5:6b:a8:e8:a5:c3:c5:6a:66:c7:33:fb:
e8:19:0f:d1:50:8e:b2:ad:2f:e6:df:24:ff:7e:ea:0d:4c:d1:
4c:b8:00:89:4c:67:27:fb:7d:88:b4:26:f2:dc:59:36:b2:1d:
28:32:d1:b5:ee:80:76:ed:90:0a:c1:05:e1:2c:60:d6:cc:0c:
72:46:6f:c6:f6:27:86:67:e7:8b:14:ce:9f:0b:51:62:bb:75:
4e:0f:53:d0:30:d6:e5:4b:e0:56:ed:71:3e:7c:28:7a:6c:c8:
f4:3b:f1:e3:fa:cb:07:c8:83:db:08:d5:52:a9:75:2b:60:37:
59:e9:f1:3d:c3:c3:97:71:6b:25:d3:c9:4e:74:68:91:19:24:
9b:b9:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:33 2023 by rpki-client on console-ams.rpki-client.org