Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/I5jK2tW4PjwvQ0Y51p5L1jD7TJc.roa
File: I5jK2tW4PjwvQ0Y51p5L1jD7TJc.roa (raw, json)
Hash identifier: mLjhXjb+ReShiPrJFOUW774IRq25ZvVGBa35vsadJsI=
Subject key identifier: 23:98:CA:DA:D5:B8:3E:3C:2F:43:46:39:D6:9E:4B:D6:30:FB:4C:97
Certificate issuer: /CN=17802133d98b655a9f5411b700ec79347e1eb490
Certificate serial: 018414B7E261DF4A081844ADEB39B4BAA6D6
Authority key identifier: 17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/I5jK2tW4PjwvQ0Y51p5L1jD7TJc.roa
Signing time: Wed 26 Oct 2022 14:35:06 +0000
ROA not before: Wed 26 Oct 2022 14:35:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35608
IP address blocks: 176.97.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:b7:e2:61:df:4a:08:18:44:ad:eb:39:b4:ba:a6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17802133d98b655a9f5411b700ec79347e1eb490
Validity
Not Before: Oct 26 14:35:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2398cadad5b83e3c2f434639d69e4bd630fb4c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:39:8b:49:4f:1e:4c:48:71:18:96:df:29:
93:80:76:50:f8:39:63:54:12:29:77:d1:77:1b:38:
88:c5:d0:7d:c9:35:bf:10:df:ca:73:bd:98:8d:ff:
5f:21:7d:26:f1:d4:5d:c4:23:74:04:a3:14:85:c2:
03:98:9b:21:ea:99:92:84:4d:66:ed:ab:96:25:2a:
dd:34:1c:42:ac:4e:d9:74:29:c4:c6:08:c5:5a:57:
f1:3e:f5:2a:6d:66:63:b8:38:58:22:67:c1:63:fe:
c7:8a:41:46:ef:82:f9:08:40:8e:de:9f:e5:80:5e:
cb:1e:59:6b:32:b1:13:19:88:e4:ff:aa:57:03:d0:
e2:5f:e2:ef:74:b8:a1:cc:ba:c5:5c:85:c0:a2:97:
a8:52:c5:23:22:7e:e7:e7:8a:87:2f:62:d6:b6:d1:
83:c4:fa:c0:3f:5c:eb:3c:79:d7:77:7b:3e:f9:ab:
3a:32:29:72:15:b6:51:25:86:52:f8:c6:8c:5f:18:
6f:8b:2f:93:a4:ff:11:b9:81:bc:9a:07:40:1f:dd:
84:47:48:be:12:fc:d9:92:8c:6e:24:55:60:a1:61:
c6:cf:4e:01:41:c7:90:e5:24:bc:bc:24:40:bf:ca:
5a:de:07:01:e5:85:ca:01:bc:bd:b8:45:bd:35:29:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:98:CA:DA:D5:B8:3E:3C:2F:43:46:39:D6:9E:4B:D6:30:FB:4C:97
X509v3 Authority Key Identifier:
keyid:17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/I5jK2tW4PjwvQ0Y51p5L1jD7TJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/F4AhM9mLZVqfVBG3AOx5NH4etJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.194.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6a:80:5e:cf:49:96:35:1c:23:e4:60:64:f9:ab:c9:27:08:
15:af:5b:95:9d:5b:9a:0e:bb:89:bd:0e:44:2e:93:e1:0b:67:
d8:c7:e9:5c:88:32:4d:fd:72:7f:4d:a6:12:df:38:ca:b7:3e:
52:d0:07:df:0f:62:b2:f2:53:96:f7:e2:17:cf:5f:dd:13:fd:
58:a4:92:92:33:32:b9:c0:8b:6a:24:65:75:55:68:a6:64:83:
20:ce:77:c9:66:ae:8f:32:65:05:22:5a:f9:af:18:04:0c:fe:
d0:4c:1c:3f:18:f6:35:7d:07:6d:b9:57:0a:77:23:e1:a8:31:
8c:ac:9c:2d:bd:57:64:60:d6:70:62:b6:93:7b:7d:36:7f:cd:
57:8a:a4:6b:c8:a8:7c:f2:1d:95:fb:c3:73:1c:75:97:b7:e7:
81:fb:69:6d:f8:c2:68:8b:04:b0:bd:53:89:36:15:99:4b:94:
9a:ed:3e:c9:49:d4:6b:4e:15:3d:88:9d:a2:bc:25:22:9a:b9:
53:c7:07:a1:50:10:45:bf:96:88:0b:cb:0f:7e:d6:bd:5f:0f:
fd:f0:9c:11:00:d2:28:fd:a6:b4:a3:ad:96:2c:5a:5d:f8:2d:
48:a8:1c:7a:ad:a5:e7:10:c6:86:d2:d3:85:e6:76:5c:72:32:
05:75:dc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org