Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/dxS87t3jP8ykfxP7rW7PDXkajNo.roa
File: dxS87t3jP8ykfxP7rW7PDXkajNo.roa (raw, json)
Hash identifier: QpiUVS+H/DIqL5BUE7V9jr5uwA6BTuB2lYFG1v/5QFY=
Subject key identifier: 77:14:BC:EE:DD:E3:3F:CC:A4:7F:13:FB:AD:6E:CF:0D:79:1A:8C:DA
Certificate issuer: /CN=82cc171e3dc846711e056e2e36241dac994a600d
Certificate serial: 08295579
Authority key identifier: 82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/dxS87t3jP8ykfxP7rW7PDXkajNo.roa
Signing time: Sat 01 Jan 2022 14:55:59 +0000
ROA not before: Sat 01 Jan 2022 14:55:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59579
IP address blocks: 193.41.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136926585 (0x8295579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cc171e3dc846711e056e2e36241dac994a600d
Validity
Not Before: Jan 1 14:55:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7714bceedde33fcca47f13fbad6ecf0d791a8cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:8c:9d:34:b2:df:2e:23:a2:8d:23:7c:44:
4b:de:9f:d2:79:89:dd:b0:89:45:22:d0:09:22:fa:
a3:5e:d0:36:c9:f1:f4:47:a7:71:e6:83:5e:e3:e0:
f0:ae:29:14:4d:17:a0:b2:4d:32:0d:6a:21:03:9b:
2a:c9:78:d8:8e:ca:b7:c8:7f:96:60:59:df:17:8d:
02:6b:75:c1:c7:48:5a:eb:66:46:8c:ec:29:d5:f8:
57:0a:ab:e9:ee:2e:eb:03:ad:34:5f:39:80:81:f2:
68:e5:60:26:46:e0:6d:b0:57:5d:dc:a5:93:21:cb:
b2:61:bd:fc:8b:92:88:82:89:f4:8e:09:00:2a:66:
49:bf:c9:26:7c:1d:f2:b8:44:2d:ee:54:87:26:b8:
4c:30:cb:a6:22:d1:9c:82:80:bd:7c:de:da:34:6c:
6c:a2:40:13:e5:84:53:6e:a2:20:c1:a3:cd:ca:88:
c1:8f:72:d2:81:90:62:24:65:7d:79:10:0d:10:d9:
d4:66:0b:32:81:ba:8e:ef:42:29:e4:ac:d3:3e:20:
0c:6d:45:f9:1c:46:f2:21:d7:63:3a:d5:94:74:16:
2b:ee:ef:fa:92:fa:2b:8f:2e:33:5b:d3:f8:27:bf:
84:98:c2:ed:02:8e:c0:87:d1:ad:16:b2:93:c0:66:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:14:BC:EE:DD:E3:3F:CC:A4:7F:13:FB:AD:6E:CF:0D:79:1A:8C:DA
X509v3 Authority Key Identifier:
keyid:82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/dxS87t3jP8ykfxP7rW7PDXkajNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:69:2e:2b:ed:11:61:53:55:74:dd:b4:d2:2c:5f:92:d1:52:
86:a5:0b:4f:5f:c3:41:c4:74:fb:59:5b:b3:89:c3:bb:e7:63:
a7:37:52:4b:78:20:84:7a:b2:37:e6:73:a8:f1:87:b7:f5:12:
1e:af:d4:cd:6d:f0:61:4f:f6:aa:c1:d8:78:41:d8:5f:7b:d0:
30:e1:ea:0c:bb:b8:24:65:a5:85:05:0a:e8:cb:b3:c9:7a:d8:
53:59:8d:92:21:d2:13:9c:0d:55:2c:57:58:8e:2e:71:9d:56:
56:30:fd:7a:11:f8:36:03:00:f2:4d:0f:57:db:27:42:30:ae:
8e:b0:d8:40:d6:6e:03:f4:fa:5a:f9:8b:0c:34:eb:2c:da:22:
7e:64:6f:b4:84:01:1b:21:f3:fa:d2:da:40:77:d6:44:9b:cf:
4b:8e:51:e7:71:23:ff:67:97:c9:66:53:4f:b0:1e:3c:6d:e3:
f7:ca:fc:68:d1:c9:20:db:fa:33:2e:4f:27:75:58:89:0c:1f:
c1:4f:fd:87:0e:3a:98:9f:91:8e:9c:f5:76:7c:d5:83:84:60:
bc:32:0d:34:13:ca:83:9f:d1:50:ac:19:c4:33:e6:39:dd:14:
22:20:b2:45:28:4a:ab:bb:db:90:70:76:bd:c3:2d:ff:61:16:
d6:9b:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:33 2023 by rpki-client on console-fra.rpki-client.org