Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/OxQkgOXcsyC5irFi5FuO9vb06Cs.roa
File: OxQkgOXcsyC5irFi5FuO9vb06Cs.roa (raw, json)
Hash identifier: oNAglENY/jwPack84DH/+mYMcOYjvLbNIVao4ZtE8BY=
Subject key identifier: 3B:14:24:80:E5:DC:B3:20:B9:8A:B1:62:E4:5B:8E:F6:F6:F4:E8:2B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018380D4BC2356CD0F5268CB3800F5E08CC7
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/OxQkgOXcsyC5irFi5FuO9vb06Cs.roa
Signing time: Tue 27 Sep 2022 21:22:48 +0000
ROA not before: Tue 27 Sep 2022 21:22:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 188.255.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:80:d4:bc:23:56:cd:0f:52:68:cb:38:00:f5:e0:8c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 27 21:22:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b142480e5dcb320b98ab162e45b8ef6f6f4e82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:61:8a:3f:75:5a:0b:6c:dd:b3:7c:2e:fe:
5c:a2:d2:54:9f:88:be:d6:bc:d7:da:1e:f6:0a:a6:
52:13:4a:c8:5c:8b:e7:9d:8c:60:b2:5f:2b:d4:fa:
44:54:cb:d6:37:39:3e:75:01:e8:ef:94:ac:38:9c:
0a:0a:c7:4d:3a:ca:9a:b6:4b:0a:e1:70:4e:73:54:
e3:a6:ed:1f:e4:44:60:24:44:9d:c1:87:b7:f6:75:
77:3d:46:a2:4d:2f:29:ab:fc:4c:b8:3f:cb:01:26:
97:b8:66:1b:35:85:1a:f8:c5:b3:a7:c5:88:36:a6:
77:da:44:2f:8d:4e:38:46:88:ab:a9:18:e0:76:cb:
bd:03:d6:77:50:23:d4:00:41:5b:b7:d4:ef:b2:5d:
a3:d4:72:4e:d6:5c:60:74:78:5a:83:52:2e:38:91:
9b:6a:c6:90:5a:c4:d8:d8:aa:31:e9:9d:5e:4f:65:
9d:7d:b5:7b:2f:7b:31:dc:fb:f7:95:60:d8:00:62:
43:dc:19:5e:43:f6:fe:c1:26:5b:9a:18:c1:43:db:
2a:c7:1e:cd:33:83:4c:41:29:62:a4:10:87:4b:6d:
0c:c9:bf:c7:de:cc:06:4e:d7:03:c1:93:20:12:14:
a2:0c:db:83:3e:1a:3c:61:0c:00:f5:3e:37:7d:d1:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:14:24:80:E5:DC:B3:20:B9:8A:B1:62:E4:5B:8E:F6:F6:F4:E8:2B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/OxQkgOXcsyC5irFi5FuO9vb06Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:39:cf:92:0d:21:56:97:05:1f:2c:f8:3e:ab:ee:82:d5:56:
96:97:5e:b2:c2:67:e1:eb:23:71:a8:b2:22:e9:ba:2b:66:50:
07:11:2c:40:95:15:e1:87:e0:c5:a5:b7:e0:b9:ff:b0:a4:d3:
00:ff:cb:91:0f:c4:4b:e7:84:98:f2:c8:66:89:b8:d3:2c:a2:
6c:56:a8:34:1d:00:10:5e:8f:37:a8:d9:47:7a:77:96:84:48:
55:20:9c:5d:fa:c8:99:4e:23:5e:89:7c:c1:3e:63:2f:84:9f:
07:83:3e:e9:a6:5a:ed:a0:87:54:29:5c:1d:de:00:fc:25:2b:
02:40:8c:46:62:86:98:34:c7:66:80:38:04:1c:5f:02:b9:a2:
4c:a5:8c:cf:6e:7b:74:7f:73:04:ca:71:5e:74:ff:84:ac:9c:
89:79:28:96:72:6e:d4:50:0e:42:4a:c5:8e:1c:49:5c:73:59:
87:ed:57:56:4c:56:5c:5b:f6:24:bf:36:9e:4e:8a:d5:73:92:
cb:9e:a0:15:99:a3:7f:21:6c:f5:f6:88:f7:86:4d:b4:20:7b:
0a:80:ba:c4:42:b2:42:5e:04:53:14:9d:2d:23:b1:76:21:c5:
40:ea:6c:3e:41:d3:da:2e:0d:31:ff:13:0b:0d:09:fb:97:37:
ec:f1:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org