Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xKksIxbag9DpiPFv81Jy8kXs9f0.roa
File: xKksIxbag9DpiPFv81Jy8kXs9f0.roa (raw, json)
Hash identifier: uR6SYdi9iqbc8QE6ebZIFeo1Uj2hLNdZm/KNy409TZs=
Subject key identifier: C4:A9:2C:23:16:DA:83:D0:E9:88:F1:6F:F3:52:72:F2:45:EC:F5:FD
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0184A8FB1187AFD80C8AE1558D5B28F09082
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xKksIxbag9DpiPFv81Jy8kXs9f0.roa
Signing time: Thu 24 Nov 2022 09:32:17 +0000
ROA not before: Thu 24 Nov 2022 09:32:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 79.175.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a8:fb:11:87:af:d8:0c:8a:e1:55:8d:5b:28:f0:90:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 24 09:32:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4a92c2316da83d0e988f16ff35272f245ecf5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:b0:b0:69:e2:11:95:b6:bb:cf:24:7b:be:
f6:2d:b5:2b:91:a0:1c:04:7b:b0:30:96:60:41:a8:
8e:32:e3:20:33:33:23:7a:a7:27:5a:9f:73:07:b6:
e4:cd:38:20:41:90:03:28:bb:ae:32:a3:d7:09:1a:
3f:d3:28:e3:69:e9:56:f2:5d:a4:dd:38:4c:08:e5:
a8:67:28:07:73:45:76:ef:9b:9a:24:9d:dc:25:76:
e1:e5:c9:9f:20:0c:19:0f:13:5c:72:a6:58:e7:38:
99:83:c8:49:d0:c6:a0:ab:b5:fd:00:8d:40:50:56:
e5:b8:45:8b:10:0b:6c:ec:a7:ed:c8:22:92:15:6b:
29:e1:be:c7:c6:98:a7:72:c5:4c:d5:8f:44:6f:aa:
ff:36:e4:f0:91:4f:14:36:f2:6c:27:f0:b2:aa:ed:
01:64:f9:25:75:fb:b2:c1:07:82:f0:72:15:7e:7a:
65:a7:b8:86:01:98:c0:d5:c1:6b:60:b3:48:03:56:
b2:53:22:67:fb:57:3f:b3:13:f8:33:7e:51:79:52:
95:3e:dc:c9:68:41:c6:28:06:92:4c:a1:11:f2:d9:
07:c1:64:91:21:b0:cc:42:fa:88:9b:3b:e1:49:fe:
4e:8b:e8:6a:a4:e9:15:21:59:9f:7b:14:6b:f7:17:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A9:2C:23:16:DA:83:D0:E9:88:F1:6F:F3:52:72:F2:45:EC:F5:FD
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xKksIxbag9DpiPFv81Jy8kXs9f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b8:59:90:bb:2b:87:90:16:2f:9d:f0:6b:16:52:94:ed:69:
02:9a:84:ce:d7:50:d5:3e:83:72:f4:e5:ec:3a:82:92:43:90:
78:84:34:c8:e1:0f:92:84:3c:5f:57:07:1c:77:6c:0f:30:f0:
93:fc:2e:e4:a8:80:62:e4:d7:9d:f2:bb:bb:da:04:f0:95:13:
90:d1:df:87:f0:57:b2:8e:46:03:e9:10:54:5c:21:9a:3a:6b:
7d:bf:89:fd:c7:5a:9c:d0:d1:df:12:06:d5:76:b2:4b:70:4a:
62:0c:e8:58:62:cc:e9:2b:ec:57:b6:3a:f3:25:90:d4:31:ff:
cf:7b:b3:4f:82:4e:71:df:3b:65:cd:15:8e:a2:be:b3:70:9e:
d1:4b:5b:d4:5f:ae:be:3b:6e:fa:0c:2e:32:9d:39:4d:d5:ef:
3c:e8:d8:78:21:6a:3c:2c:d6:39:29:31:ad:51:24:13:ad:59:
9e:bd:5e:ba:21:3c:53:3c:8a:22:ab:8b:9b:b8:ec:79:e8:c4:
19:20:b1:c1:03:1f:5b:9c:ee:04:2e:7b:2d:29:94:61:cf:05:
30:f4:61:f9:21:97:b0:ab:48:9a:10:45:59:45:7f:c5:5b:18:
0e:ad:2b:40:08:a0:de:dc:3b:f7:58:1b:e2:f2:7c:c5:2c:ff:
fc:32:76:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org