Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/zF7DvWyhAVTFDq39KZcugyFzaYc.roa
File: zF7DvWyhAVTFDq39KZcugyFzaYc.roa (raw, json)
Hash identifier: NrXj8VceuA60Ap1M8PnWnZukeSAYDJ8sqZn2OCYZRWI=
Subject key identifier: CC:5E:C3:BD:6C:A1:01:54:C5:0E:AD:FD:29:97:2E:83:21:73:69:87
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: B10EF0
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/zF7DvWyhAVTFDq39KZcugyFzaYc.roa
Signing time: Wed 27 Apr 2022 11:01:03 +0000
ROA not before: Wed 27 Apr 2022 11:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 217.117.65.0/24 maxlen: 24
217.117.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11603696 (0xb10ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Apr 27 11:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc5ec3bd6ca10154c50eadfd29972e8321736987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:6e:55:1d:97:bc:0d:7b:78:7f:14:61:62:
f0:d8:02:ca:b7:89:39:81:33:21:af:6b:a1:89:ad:
a9:57:e6:cf:d6:b8:ef:3c:d9:a4:ca:17:ee:8f:11:
fc:96:be:a1:fa:07:0c:e9:bb:1a:14:74:fa:11:72:
2c:e4:7c:18:b1:01:a0:11:e1:ad:5a:95:c2:e1:c0:
1d:18:a8:17:72:b6:54:2d:34:89:1f:36:59:8b:b0:
a5:61:b9:0c:48:c6:92:b0:77:c6:c9:70:21:ab:b8:
f3:c6:42:06:3a:6e:8b:8f:82:a7:13:27:e6:46:c2:
2c:1a:62:53:1b:2c:ed:6a:d6:5e:31:e4:d1:14:2e:
17:28:aa:30:ff:f5:b9:7b:ac:6e:3c:92:e2:2d:5f:
3d:32:c7:7e:53:10:23:13:3c:cc:28:25:2a:22:d5:
36:83:7d:7a:ae:3c:13:dc:9e:13:90:2f:e8:6e:f4:
c2:f8:af:98:e7:28:b8:23:7e:c2:07:fa:9c:e3:2a:
de:90:5c:47:44:32:87:e1:45:29:64:f8:f7:f6:38:
ba:15:c1:f2:7b:7c:f3:b4:1c:7e:72:16:60:d5:7a:
62:05:86:d3:64:2e:08:52:07:fe:40:b2:d6:ef:b0:
42:c9:34:95:c1:89:dc:2c:74:2d:c7:ed:3e:68:7c:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5E:C3:BD:6C:A1:01:54:C5:0E:AD:FD:29:97:2E:83:21:73:69:87
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/zF7DvWyhAVTFDq39KZcugyFzaYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.117.65.0/24
217.117.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f5:96:eb:1a:2f:8a:e5:2f:20:37:f4:23:4e:70:7d:10:0a:
87:65:d3:62:c6:eb:d0:a4:70:1a:02:f3:1a:6b:7c:13:07:8d:
33:2c:fc:d8:ea:b9:b2:97:fe:9e:13:f8:67:db:a1:8a:78:25:
00:5f:42:5a:c0:d0:20:4e:42:ff:fe:ef:71:86:26:58:a5:59:
06:5f:7d:8c:6c:cf:ac:5c:2c:d6:39:b9:67:e4:38:8a:06:3e:
99:84:6d:6b:4d:c0:14:81:de:ea:06:a9:eb:ff:bf:57:67:a0:
6b:c1:f6:5e:bd:6b:9c:bc:c0:a0:6a:ad:d1:ef:f8:16:69:64:
b0:79:3c:ba:c9:7a:03:34:7b:2b:8b:02:ad:1b:b9:78:5a:75:
32:cd:e0:6b:ec:29:c8:ce:6f:ce:c9:a2:c1:4b:7a:bf:f4:b3:
7a:4b:8b:32:54:f2:bf:64:09:d2:cd:d1:a0:29:84:6e:71:ff:
23:d6:8a:9a:f3:3f:4a:3f:bc:f7:ae:d2:8a:77:a6:f9:35:c4:
16:f9:c6:f6:73:56:20:66:cf:54:98:c8:41:29:ce:ed:c9:81:
df:4b:11:fe:7d:7a:07:3a:52:66:1e:ce:28:48:a5:99:ad:d9:
8e:47:cb:c5:d0:76:fd:24:50:1d:8e:c3:8d:40:be:e8:91:58:
d0:bb:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-ams.rpki-client.org