Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/DWcAViymOt3LlY654CEKSDZngCk.roa
File: DWcAViymOt3LlY654CEKSDZngCk.roa (raw, json)
Hash identifier: zSyPAJK8ItRHF6l5c3PFkHhwOXbP+fILhCDG8d4GyUY=
Subject key identifier: 0D:67:00:56:2C:A6:3A:DD:CB:95:8E:B9:E0:21:0A:48:36:67:80:29
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 0D8C0908
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/DWcAViymOt3LlY654CEKSDZngCk.roa
Signing time: Sat 01 Jan 2022 04:58:30 +0000
ROA not before: Sat 01 Jan 2022 04:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64447
IP address blocks: 188.119.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227281160 (0xd8c0908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: Jan 1 04:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d6700562ca63addcb958eb9e0210a4836678029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:47:6b:10:74:90:ac:90:f1:c9:0c:fd:53:
f7:c4:43:be:39:30:1b:74:5c:08:1e:5b:4b:49:9e:
48:e0:67:04:8a:e9:45:ea:ce:f1:49:9f:d7:ea:63:
9f:fd:b3:16:44:be:6e:69:07:1a:6a:36:ef:73:54:
bc:ce:03:58:52:c2:7d:12:e9:82:99:a5:72:8e:10:
f1:99:96:66:03:a7:0e:30:36:38:3a:2e:d3:84:44:
33:d0:7a:55:f4:3e:85:93:e2:5e:ce:b9:88:8a:e9:
0e:43:eb:89:ad:3b:27:65:8e:29:7d:ab:ff:da:66:
92:23:87:29:59:53:23:be:19:45:71:b4:39:f8:a0:
4d:94:1d:7f:52:93:fa:c6:e6:6e:5a:dc:9d:03:eb:
6f:88:21:b5:11:9f:ba:d1:7b:c8:e5:c4:a8:b8:1f:
3f:e5:7a:a5:9a:44:a2:1e:bc:54:9a:13:15:5e:29:
e8:19:03:c0:1f:8c:45:0f:3b:2d:1d:47:c3:ff:27:
26:a7:8f:f8:0f:aa:c2:fa:bb:87:e0:3d:cd:cf:8c:
1e:11:67:44:81:5f:75:34:c8:e0:02:fe:0c:c4:1a:
94:c4:34:51:7e:5a:fb:dd:56:c5:82:88:84:d3:d5:
4c:3b:0a:61:0b:e7:06:99:0e:8b:29:1f:16:c9:92:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:67:00:56:2C:A6:3A:DD:CB:95:8E:B9:E0:21:0A:48:36:67:80:29
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/DWcAViymOt3LlY654CEKSDZngCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.29.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1b:2b:4f:a9:71:23:62:3f:57:24:7b:c3:5f:c5:d1:4c:98:
3c:f1:1a:f0:2a:19:c1:38:a2:7f:7e:9f:a1:5e:35:3c:5e:68:
03:d3:f7:72:1f:98:a1:88:b3:19:30:41:7b:51:01:a0:bc:8f:
a9:bc:71:a8:98:aa:05:96:2a:e0:9f:d8:34:d8:0f:2e:88:fc:
8a:7c:d3:fb:20:86:be:70:04:64:86:90:2a:ec:c2:5b:cc:b8:
10:14:7d:85:03:9c:d5:10:2f:08:85:36:0d:c3:06:a5:1c:5c:
90:81:ba:cd:a8:16:61:3c:e2:a8:90:30:61:76:8a:62:27:99:
65:15:9a:fc:20:16:a7:f2:72:d2:bb:10:ed:09:92:85:44:28:
f4:83:f9:63:c3:04:a6:3d:0b:ba:eb:2e:2f:e4:42:b2:11:ab:
2c:4c:bd:c1:89:f1:47:76:20:09:61:c3:7b:69:6f:89:31:6a:
fb:ea:0a:36:20:ef:c2:5e:ac:2c:25:fb:d5:3d:2a:72:5c:fd:
a9:87:71:3d:be:93:72:82:cb:af:6f:e2:c7:17:8e:0b:52:79:
a2:3e:4a:a3:32:82:fd:9f:60:0b:be:b6:c6:c4:b3:f9:63:df:
91:f6:d4:5e:21:52:08:7e:28:be:be:8a:b3:5d:89:83:63:5e:
51:05:2c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:07 2023 by rpki-client on console-ams.rpki-client.org