Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d83c74-49de-4e4e-84f9-8abd6834c61a/1/V1un3IrQJ8Kysuf-ZSYMzTl8QcA.roa
File: V1un3IrQJ8Kysuf-ZSYMzTl8QcA.roa (raw, json)
Hash identifier: GmJsv5lyGVKOi/kNMM30M0An64Jz1khgUEChvDAE8Us=
Subject key identifier: 57:5B:A7:DC:8A:D0:27:C2:B2:B2:E7:FE:65:26:0C:CD:39:7C:41:C0
Certificate issuer: /CN=547abe92b0b91e54715d17a6e87f5e599126f750
Certificate serial: 013EFBF4
Authority key identifier: 54:7A:BE:92:B0:B9:1E:54:71:5D:17:A6:E8:7F:5E:59:91:26:F7:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHq-krC5HlRxXRem6H9eWZEm91A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d83c74-49de-4e4e-84f9-8abd6834c61a/1/V1un3IrQJ8Kysuf-ZSYMzTl8QcA.roa
Signing time: Sat 01 Jan 2022 11:56:35 +0000
ROA not before: Sat 01 Jan 2022 11:56:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 213.173.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20904948 (0x13efbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547abe92b0b91e54715d17a6e87f5e599126f750
Validity
Not Before: Jan 1 11:56:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=575ba7dc8ad027c2b2b2e7fe65260ccd397c41c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:70:f6:c4:01:b4:56:6d:ac:87:26:ca:11:
20:e9:5b:5b:b7:84:e5:1b:82:b3:89:1e:65:8c:d9:
1a:ba:1e:b4:50:c3:7f:b5:bf:1a:2f:dd:45:8d:40:
fa:da:b5:aa:cf:c4:e4:8f:f2:86:d9:cd:f6:d6:a4:
7d:94:49:e7:58:f9:6f:d1:09:da:2c:14:c2:d1:0c:
00:ca:be:3a:ee:96:c1:88:b4:d6:06:38:59:b4:79:
da:8d:81:ee:c5:15:6a:f1:8c:ea:30:e2:bc:4c:2c:
90:6a:a3:78:69:f9:bb:88:c9:2e:cb:9e:fd:45:ba:
da:96:23:5b:75:ad:e7:45:f9:c4:1d:9f:fe:37:77:
52:e4:bd:17:3d:e8:ca:61:25:1a:7b:2a:9a:91:a2:
cf:d9:8d:a0:d3:b7:68:21:c0:81:3d:90:17:c4:22:
b8:b9:e0:8c:dc:fd:df:19:08:18:00:a8:d9:f6:ae:
a3:a6:10:6c:dc:10:2d:f3:a3:e8:73:3d:45:e2:06:
ea:02:a8:52:dd:3f:68:7b:9f:f4:af:7f:21:78:76:
ae:5f:b1:d3:ed:9f:9b:61:8b:b8:b0:0d:90:90:ab:
5f:68:83:f5:7e:29:09:cf:e3:43:cc:c1:98:a6:2a:
e6:c4:5e:9b:1e:f0:d4:da:e4:57:d9:8f:a0:50:db:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5B:A7:DC:8A:D0:27:C2:B2:B2:E7:FE:65:26:0C:CD:39:7C:41:C0
X509v3 Authority Key Identifier:
keyid:54:7A:BE:92:B0:B9:1E:54:71:5D:17:A6:E8:7F:5E:59:91:26:F7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHq-krC5HlRxXRem6H9eWZEm91A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d83c74-49de-4e4e-84f9-8abd6834c61a/1/V1un3IrQJ8Kysuf-ZSYMzTl8QcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d83c74-49de-4e4e-84f9-8abd6834c61a/1/VHq-krC5HlRxXRem6H9eWZEm91A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f7:02:d4:90:8d:53:18:b7:4c:11:c8:55:19:e5:45:61:55:
c8:0a:b6:05:e6:5b:37:a9:73:1e:49:5a:ea:3a:e3:44:cf:e4:
3c:f8:13:b1:8a:86:2b:cc:e4:f9:83:03:70:ec:a8:8a:20:24:
07:aa:0b:89:5f:7c:96:3f:0a:98:ff:e4:20:8a:13:43:1a:47:
b1:b3:fa:7a:be:f5:68:99:20:eb:25:d8:7a:46:ef:b5:38:c6:
2a:c1:f4:1a:13:a5:b9:50:96:1f:29:df:fc:ed:aa:94:86:3e:
4f:a7:7f:e3:2b:ff:53:ab:4e:c2:2a:97:40:33:70:d2:ed:97:
52:25:54:4e:ab:14:f4:bf:2e:8d:ec:09:77:2b:14:39:57:23:
87:b8:18:04:75:5c:a7:ee:80:b2:d8:91:fc:6c:61:85:51:1e:
38:b0:0c:43:c9:9c:70:7f:f1:ce:97:6c:98:06:ac:a9:25:55:
f7:18:cc:ba:b3:c6:9b:0d:02:71:97:16:7e:0b:bf:41:93:03:
09:83:be:16:09:46:5f:b5:e1:6f:0f:e3:62:58:cc:1c:7a:3d:
38:23:39:52:f5:43:32:d2:c7:bd:c4:cb:e1:fa:4b:5a:f6:53:
10:a9:64:81:44:31:44:28:42:19:28:34:7a:ec:ac:70:13:25:
62:59:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org