Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AC7xC98niGvOEkfsCpxs5L9sugE.roa
File: AC7xC98niGvOEkfsCpxs5L9sugE.roa (raw, json)
Hash identifier: eO2agVGjNuG9mGQDf6j2+BUwqkdLp7UYE7yPTRhrvFk=
Subject key identifier: 00:2E:F1:0B:DF:27:88:6B:CE:12:47:EC:0A:9C:6C:E4:BF:6C:BA:01
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018515F3DCDFAD8F42F514CB681FF12E2AD3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AC7xC98niGvOEkfsCpxs5L9sugE.roa
Signing time: Thu 15 Dec 2022 13:23:01 +0000
ROA not before: Thu 15 Dec 2022 13:23:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211557
IP address blocks: 188.255.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:f3:dc:df:ad:8f:42:f5:14:cb:68:1f:f1:2e:2a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Dec 15 13:23:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=002ef10bdf27886bce1247ec0a9c6ce4bf6cba01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:c0:00:94:99:6c:eb:03:4b:51:c1:7f:ba:
4f:d9:99:30:24:a6:6a:20:60:67:fe:48:df:e4:b7:
5c:bd:55:2b:b5:aa:97:63:da:bc:93:7f:9c:6c:10:
7d:16:b5:9b:8c:8a:db:59:de:0f:c9:c2:7a:75:d3:
00:ac:dd:8d:1c:ee:d6:28:70:6d:5c:68:47:4c:6a:
2d:ed:7f:01:8b:73:b7:10:2e:57:8b:13:04:f2:75:
6c:9e:cf:6e:88:d3:d2:9f:fb:32:9e:42:50:dd:a2:
9d:55:d0:f0:d8:c9:ee:dd:8d:37:bc:c1:18:2d:76:
ba:4b:a1:61:f7:8e:e1:0c:bd:60:c4:f2:d4:d2:ac:
e3:7c:a4:06:a4:b3:61:0d:ae:44:a9:6e:f4:1f:de:
04:92:dc:87:93:f4:3f:60:79:45:f5:54:38:c4:5e:
d5:ce:bf:57:74:81:aa:fa:02:72:6c:a3:76:94:a3:
46:f8:9e:4e:16:d1:75:7f:72:75:3c:7c:62:c3:ba:
6e:4f:42:68:26:f0:cd:dc:00:fa:50:c5:92:cd:ed:
c0:61:23:e9:88:db:43:1b:c0:a9:0f:8e:9f:3d:16:
31:3b:7b:8e:87:2e:d5:47:1b:7b:15:ed:83:5b:fc:
5d:96:ff:a2:86:d3:d1:81:93:e1:39:6c:1b:83:a4:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:F1:0B:DF:27:88:6B:CE:12:47:EC:0A:9C:6C:E4:BF:6C:BA:01
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/AC7xC98niGvOEkfsCpxs5L9sugE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.200.0/24
Signature Algorithm: sha256WithRSAEncryption
75:fd:8e:40:4f:13:20:50:a9:a3:be:63:40:83:09:c9:d0:d5:
e5:10:e5:e4:c6:b3:25:ef:73:a4:85:2f:38:ac:1d:ca:25:03:
47:f9:5e:cc:ca:8c:02:b6:cd:ee:25:9f:49:d8:24:8d:aa:32:
58:c6:29:e1:88:fc:56:21:3b:c4:c3:52:4e:04:64:ae:54:88:
86:81:d4:3a:20:76:90:f7:b4:62:0d:91:38:b0:18:b5:87:43:
2d:aa:c9:c3:4e:ee:b8:d9:66:dc:17:f6:11:14:00:c5:5f:18:
17:a3:98:da:d3:e7:07:9f:01:e7:33:ba:f2:8b:eb:42:56:bb:
a2:f6:41:fc:a9:09:91:b3:8f:c7:f1:77:3e:49:c0:21:b2:e2:
9b:be:e5:1c:77:cb:5e:9f:6c:a3:2c:4d:03:ba:a6:4f:51:60:
61:0a:e9:89:f2:c6:6e:98:4e:5c:78:8c:92:2b:7c:b1:66:95:
ee:ba:ae:57:49:ea:39:3a:5d:35:68:a6:ff:cd:17:ef:b7:e5:
16:c5:3c:09:c6:db:14:32:0e:60:db:ba:9c:e8:ed:de:22:92:
16:b6:ca:c2:f3:e9:6b:30:ea:19:fc:86:ad:df:06:bb:d6:d3:
aa:a3:b3:34:ca:ff:54:5b:04:2c:3a:8a:d8:d0:60:14:0f:d1:
62:63:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org