Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/eCVKXJCeRaQ4VS7U-AbgwRNhUSY.roa
File: eCVKXJCeRaQ4VS7U-AbgwRNhUSY.roa (raw, json)
Hash identifier: q7SnlcvQZMbFePolLDCAoBRXckeNz3otokXVs4FsLyE=
Subject key identifier: 78:25:4A:5C:90:9E:45:A4:38:55:2E:D4:F8:06:E0:C1:13:61:51:26
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 35F3E00E
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/eCVKXJCeRaQ4VS7U-AbgwRNhUSY.roa
Signing time: Sat 01 Jan 2022 03:02:16 +0000
ROA not before: Sat 01 Jan 2022 03:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42093
IP address blocks: 217.170.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905175054 (0x35f3e00e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 1 03:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78254a5c909e45a438552ed4f806e0c113615126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f1:92:ea:7c:d0:ab:9d:8e:2e:bd:ad:e6:dd:
ea:ce:80:65:e0:38:b6:e4:8e:ae:23:b2:74:f4:6b:
d9:96:1f:23:06:b2:06:49:90:85:71:5e:96:67:11:
4b:c9:df:5f:ba:9a:5a:ab:46:c5:fc:c2:f8:df:e1:
29:ae:1f:e6:e1:4a:c8:64:5c:ed:31:53:29:47:fc:
e7:48:57:9a:7a:57:61:f6:8b:e1:20:2a:f3:25:02:
75:15:c0:59:5f:8d:24:23:66:be:68:90:15:c0:98:
c4:19:6d:0c:f0:0b:0c:8b:0f:25:7c:90:ff:bb:82:
c7:50:32:5c:92:2a:e0:8e:2e:d8:3f:59:e3:6a:25:
42:f2:5a:84:a1:70:22:57:52:97:af:ed:9b:e9:0a:
9d:ff:b5:94:43:e3:2e:94:84:9c:ef:cf:c2:e4:f1:
e4:01:47:b2:8e:93:8a:30:35:0e:b3:97:b2:90:c9:
9a:b2:6c:62:a3:9f:c9:a9:e6:ea:85:9c:5c:30:9b:
24:1c:18:c6:54:8a:b6:0e:c2:c3:d6:2c:0b:c3:cb:
74:f1:1b:99:81:b7:8b:79:27:6f:92:1b:3e:50:12:
6c:ca:70:40:96:24:87:0f:ad:9f:71:14:00:f8:73:
1e:41:81:71:dc:a0:e8:6b:39:9a:54:d0:4b:50:9a:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:4A:5C:90:9E:45:A4:38:55:2E:D4:F8:06:E0:C1:13:61:51:26
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/eCVKXJCeRaQ4VS7U-AbgwRNhUSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.170.4.0/22
Signature Algorithm: sha256WithRSAEncryption
19:b2:f4:71:72:1a:6d:93:ec:af:26:d1:75:c1:d2:ab:c1:85:
09:ff:ca:c7:1c:c1:46:50:ee:bb:d7:ba:01:f7:cb:e7:fb:61:
c3:e7:c1:82:12:ad:32:c4:df:57:a2:51:14:97:87:98:ec:22:
e0:d4:cc:11:65:31:79:74:d3:b9:65:8a:cd:02:04:a0:ab:46:
c6:b0:47:c1:24:35:44:e0:81:7c:74:c3:5e:8d:86:11:20:ec:
f0:28:db:a2:ff:6d:99:92:5a:40:5b:ca:c6:53:9b:6f:dd:d2:
c7:10:3f:92:53:0d:07:6f:9b:ce:de:57:9d:0e:09:86:8b:c3:
58:2e:20:23:bf:fe:23:f0:f4:b6:1e:de:34:6d:0c:6d:49:9c:
a7:08:91:12:ac:0d:fd:9d:8b:28:d1:66:d6:cc:da:1f:67:64:
43:e0:fd:a4:f3:46:3c:32:38:c8:2b:b9:6b:8b:65:87:99:17:
27:d7:b4:4e:47:88:6e:89:43:ff:5c:43:fd:f1:96:1c:b3:01:
23:a8:c0:e3:28:42:e8:f6:e6:16:1c:00:b7:8a:2b:e9:46:fa:
d0:f9:cd:53:dd:b9:39:47:a9:b2:b1:81:1c:c6:98:3a:1a:3f:
40:b1:15:20:ad:b2:76:c9:bb:fa:c6:3b:13:70:74:de:51:db:
29:06:8e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:54 2023 by rpki-client on console-ams.rpki-client.org