Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/XtTzLmjulrAdpzvDmSpKpCI2740.roa
File: XtTzLmjulrAdpzvDmSpKpCI2740.roa (raw, json)
Hash identifier: VlQPAgDpd3UgZgVh2oyuyoXZsEBovligaW1uV4Rd6ns=
Subject key identifier: 5E:D4:F3:2E:68:EE:96:B0:1D:A7:3B:C3:99:2A:4A:A4:22:36:EF:8D
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 01844738B6348CB0E707AC731C392B74A411
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/XtTzLmjulrAdpzvDmSpKpCI2740.roa
Signing time: Sat 05 Nov 2022 09:56:49 +0000
ROA not before: Sat 05 Nov 2022 09:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201633
IP address blocks: 206.225.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:47:38:b6:34:8c:b0:e7:07:ac:73:1c:39:2b:74:a4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Nov 5 09:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ed4f32e68ee96b01da73bc3992a4aa42236ef8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:57:4b:38:ba:9c:0f:c8:e4:24:4a:0b:6d:
00:f0:8f:61:75:07:ea:7e:27:8d:20:79:4b:ef:98:
bd:6c:f2:6d:43:dc:95:3c:13:c1:25:9a:40:d8:19:
85:b6:fd:55:ad:b4:80:11:5f:61:60:5d:12:43:99:
d5:1a:89:75:98:f2:bd:d7:4f:23:ae:7d:a6:30:c1:
dd:a6:61:dc:4e:65:29:f0:a4:99:e7:e3:92:cc:81:
f8:f2:1c:bb:33:cd:1c:b8:05:13:a3:f0:f2:ce:49:
b2:ee:5a:7d:c5:4a:3e:7e:18:d2:55:0a:87:8c:56:
52:e3:c1:fe:e2:b0:dc:b0:d9:88:d2:45:3b:b3:34:
36:08:e2:4f:55:69:15:95:41:7a:98:de:1c:d3:52:
a4:91:f9:d4:22:e7:f3:ff:52:8e:38:25:e5:14:8a:
6a:14:5e:eb:5a:22:3e:16:8f:59:1b:70:50:4a:57:
11:a7:51:62:07:e7:e2:a0:e3:6c:f8:2c:ca:cd:57:
4f:ad:6a:b4:38:a6:cb:e9:20:66:84:06:60:be:c7:
ac:5d:54:d6:6e:a7:50:f0:b5:61:43:5e:60:cd:c6:
69:17:c6:86:5e:2f:0b:9b:3c:c1:60:c9:84:b7:86:
49:10:90:4e:24:57:67:48:33:b9:00:e5:0e:02:94:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D4:F3:2E:68:EE:96:B0:1D:A7:3B:C3:99:2A:4A:A4:22:36:EF:8D
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/XtTzLmjulrAdpzvDmSpKpCI2740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.225.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4d:0a:49:f8:49:6d:2a:ee:8b:0e:19:02:d2:51:8e:ff:cd:
aa:26:92:c0:79:8c:8a:90:2e:57:df:22:88:d6:90:19:45:13:
79:ea:21:3f:08:03:0f:04:74:46:82:99:73:aa:fa:78:80:72:
98:5d:e5:d8:de:0f:aa:41:6a:68:9f:4e:7d:3f:b4:5f:cb:d3:
34:f2:81:84:30:f6:3b:25:e5:59:06:56:49:f5:35:ee:16:73:
03:09:6e:cb:9c:37:06:05:f7:34:a2:0f:c4:e3:f3:71:9a:1a:
70:90:e0:af:5f:39:d5:f7:c1:26:8a:95:0e:b2:57:ce:3e:0b:
44:70:4d:6e:12:fd:92:0c:4a:2b:e1:96:72:6e:ad:ff:02:96:
1a:61:19:8f:97:51:50:90:b0:80:e4:95:e3:c0:6e:53:4a:ad:
51:be:22:e8:19:08:2b:8a:73:60:29:e3:95:20:d9:ec:7e:e9:
77:38:07:4b:c6:6c:91:d3:26:47:00:6c:59:29:a1:84:92:ab:
0b:60:ea:8b:c5:ee:1d:f3:ed:fa:d0:1c:27:c4:34:d0:f9:eb:
f4:86:f0:4a:9c:d8:01:74:a5:13:d5:25:6e:80:65:0f:6c:dd:
a3:23:10:dc:ee:db:50:40:ad:58:f0:3b:c8:51:ff:04:77:e3:
37:f0:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:08 2024 by rpki-client on console-fra.rpki-client.org