Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/RpAkwi18A26my30uQDgSdZerGEI.roa
File: RpAkwi18A26my30uQDgSdZerGEI.roa (raw, json)
Hash identifier: PZlQlfeEH7le+/LEhB0hT/y/x2nO4ba7F0KDdCt0kpY=
Subject key identifier: 46:90:24:C2:2D:7C:03:6E:A6:CB:7D:2E:40:38:12:75:97:AB:18:42
Certificate issuer: /CN=26dc466e56225124ee805885441305662ceb1f23
Certificate serial: BE51A8
Authority key identifier: 26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/RpAkwi18A26my30uQDgSdZerGEI.roa
Signing time: Sat 01 Jan 2022 00:56:18 +0000
ROA not before: Sat 01 Jan 2022 00:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 217.119.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12472744 (0xbe51a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26dc466e56225124ee805885441305662ceb1f23
Validity
Not Before: Jan 1 00:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=469024c22d7c036ea6cb7d2e4038127597ab1842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:47:65:e4:51:89:47:4c:fe:df:36:13:74:
65:6e:84:e1:5e:9a:d2:29:ab:45:cb:dc:e2:c1:b2:
50:0f:8d:52:93:26:96:66:18:9f:4f:e0:d2:5e:cf:
7a:a6:2f:d3:de:99:7c:ee:42:99:ab:f3:45:9c:8f:
2f:27:46:5e:4e:7e:35:5b:23:08:63:9e:ee:6d:20:
11:3f:ac:ec:63:d5:3e:97:fd:76:9a:8b:6e:8c:21:
6e:ef:d2:f8:07:b5:e4:a0:00:dc:c1:45:b5:9b:5c:
68:c3:ef:24:60:8e:df:26:76:8f:c0:a3:8f:bc:16:
a4:c2:2b:57:23:eb:7e:ef:dd:6d:e3:6e:96:d4:52:
1a:bb:5a:af:9d:8b:d7:db:7c:d1:fd:d1:c2:d9:67:
59:c6:13:81:3c:c9:cc:00:b7:42:07:9f:7c:85:6d:
28:47:64:e9:dc:aa:c4:e9:76:e7:da:6d:d7:e5:f3:
e3:d7:ec:9d:6a:43:6a:30:69:56:23:54:22:2e:cb:
0f:c4:ed:7e:d7:a9:06:a8:f5:dc:02:c9:20:38:4c:
04:1c:0f:b6:1d:08:7e:da:c2:e4:97:3f:f6:17:59:
b7:a9:2c:68:0c:1c:9d:d4:a2:e6:9a:ed:82:b6:80:
42:8c:99:94:2f:bd:7e:7d:5a:87:32:aa:66:10:49:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:90:24:C2:2D:7C:03:6E:A6:CB:7D:2E:40:38:12:75:97:AB:18:42
X509v3 Authority Key Identifier:
keyid:26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/RpAkwi18A26my30uQDgSdZerGEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/JtxGblYiUSTugFiFRBMFZizrHyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.143.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6a:1c:51:ec:5f:16:81:7a:06:6d:83:f5:95:6e:fb:7a:f8:
fd:c5:18:08:0e:7e:2a:ce:4c:aa:92:0c:3c:b3:de:b0:7b:0d:
86:4e:26:e9:9b:b7:c2:d8:0b:2a:15:39:86:ff:c3:31:b8:ab:
4d:2a:7c:57:75:8a:20:9c:21:a6:09:6f:a0:46:cc:ff:3b:87:
1b:68:cb:9d:0c:37:c0:0e:90:9f:4a:8d:d3:0a:74:a5:02:91:
8d:ff:6b:7b:dc:9d:4d:e3:20:7b:cf:30:61:f7:2e:92:10:66:
e7:ad:96:f5:17:84:75:aa:c8:f6:91:22:b2:44:2c:4e:17:1e:
bc:20:c6:be:74:e6:3b:ea:cd:4f:3e:cd:8b:e0:0e:97:d5:62:
58:b0:5b:97:90:0b:42:c2:58:27:18:a9:c6:45:d3:78:44:18:
06:7d:56:7e:8c:04:91:b4:f1:fd:f8:b0:8c:26:a0:41:d8:b4:
7d:35:e9:08:cf:5e:f5:93:00:42:e8:c7:7d:5b:d9:5c:cc:64:
4e:73:b7:c5:1d:ef:21:70:ab:7e:4b:39:5d:e6:02:1c:91:f1:
a1:e5:6e:11:35:9d:ff:0d:02:87:7a:00:1f:19:02:a8:90:e4:
ba:97:72:78:d9:3b:3a:3e:8e:b9:de:f2:30:b4:e5:f5:7f:50:
05:01:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:55 2023 by rpki-client on console-ams.rpki-client.org