Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/8Ke8Glrzw1ncbVngzw1JIFTgAtE.roa
File: 8Ke8Glrzw1ncbVngzw1JIFTgAtE.roa (raw, json)
Hash identifier: gEMWQM/54TjLYtQAdHXroHnUKPbvIBeygbwgRE/n/O4=
Subject key identifier: F0:A7:BC:1A:5A:F3:C3:59:DC:6D:59:E0:CF:0D:49:20:54:E0:02:D1
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 06312FC3
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/8Ke8Glrzw1ncbVngzw1JIFTgAtE.roa
Signing time: Sat 01 Jan 2022 07:04:12 +0000
ROA not before: Sat 01 Jan 2022 07:04:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209256
IP address blocks: 217.20.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103886787 (0x6312fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Jan 1 07:04:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0a7bc1a5af3c359dc6d59e0cf0d492054e002d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:f0:f1:73:b2:37:25:81:74:f8:87:cd:35:
2c:d0:d8:bf:e6:d3:02:e2:33:53:f9:af:7c:24:f8:
e7:fa:3f:47:9e:0a:7a:a5:9f:fa:c5:0c:a0:da:be:
4e:ae:ab:84:26:21:6e:35:40:82:58:ff:5e:d4:cf:
72:62:44:c7:b6:a2:90:d7:5f:e8:f7:9f:47:1c:e3:
f4:20:d0:9e:71:89:18:08:95:74:1e:0b:cf:d7:a8:
c6:e1:36:3b:5f:a0:0b:25:0f:c5:a0:62:22:c4:0f:
d8:ff:af:da:4f:a1:67:f3:e3:b0:7a:1a:98:bd:da:
cd:92:dc:c0:55:10:99:69:63:94:23:c3:a7:bd:bc:
6f:d7:4b:75:cc:c3:e4:c2:1b:df:1f:0a:f9:d1:8f:
23:92:42:a6:07:ea:3d:66:c2:c1:35:fc:99:e0:3b:
70:71:4b:02:31:ac:68:28:27:70:c3:8e:e9:40:05:
21:f1:c3:ab:33:9c:af:df:f0:e5:93:32:87:c9:13:
7b:c7:20:d3:76:4c:5f:96:ac:1e:f3:95:72:10:1f:
c0:53:25:01:38:90:76:2c:63:29:ca:24:4e:e7:4d:
7f:d8:48:15:09:2e:ae:7c:b6:db:19:97:a0:74:41:
55:6e:33:60:c3:ba:20:a1:76:68:c8:40:fc:aa:86:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A7:BC:1A:5A:F3:C3:59:DC:6D:59:E0:CF:0D:49:20:54:E0:02:D1
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/8Ke8Glrzw1ncbVngzw1JIFTgAtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.20.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:c4:51:b1:13:ea:e1:f7:a3:ef:80:24:bc:4e:fb:09:7d:67:
15:cc:a6:e2:1c:c7:3d:3d:50:74:ec:f7:b1:53:de:92:5a:4e:
63:47:fe:32:d9:ee:75:8d:35:99:4c:03:df:75:72:f1:20:36:
c3:9b:fc:bd:3d:e8:c3:1a:06:84:f4:75:c9:13:4f:f7:57:0d:
db:ba:69:4f:48:fb:d9:ce:86:ac:31:3b:c2:24:45:7c:96:f4:
f7:bd:22:d4:cf:ae:d3:70:eb:64:2f:b8:77:bd:f9:0f:95:b4:
34:04:85:64:2d:3d:ea:a5:98:a6:f4:5c:4b:ef:8d:f3:28:01:
40:13:0a:d6:ba:0b:ce:36:cb:cc:ce:26:1c:18:94:f2:cd:f6:
6a:be:1e:0b:b5:14:9d:89:c0:2b:f1:d8:38:b6:6d:49:1b:e6:
a1:86:df:c6:ae:cc:16:64:9b:48:5f:4d:06:f3:8d:86:24:8e:
f3:a8:bc:45:01:e3:36:75:c1:0b:0b:d8:cc:0e:17:43:0e:3c:
d0:b4:9e:e8:ba:32:bf:15:73:ec:b4:cc:ac:a9:99:32:f2:c4:
64:d5:63:ba:a2:f0:14:55:af:ef:10:6c:0c:9e:f7:f8:82:1b:
72:9b:3e:34:e6:01:dc:68:34:57:90:df:87:ce:83:90:17:5d:
e2:12:69:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:24 2024 by rpki-client on console-ams.rpki-client.org