Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/U3QQkXoxNDcI4euh4_8gw1zt8mo.roa
File: U3QQkXoxNDcI4euh4_8gw1zt8mo.roa (raw, json)
Hash identifier: sMVOVGEQxshkAw8ZCI9PBPbxVcl67cTxUjrO/ueWXOQ=
Subject key identifier: 53:74:10:91:7A:31:34:37:08:E1:EB:A1:E3:FF:20:C3:5C:ED:F2:6A
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 099559AB
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/U3QQkXoxNDcI4euh4_8gw1zt8mo.roa
Signing time: Sat 01 Jan 2022 05:04:07 +0000
ROA not before: Sat 01 Jan 2022 05:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199380
IP address blocks: 84.232.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160782763 (0x99559ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=537410917a31343708e1eba1e3ff20c35cedf26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:da:3e:f9:c6:6e:3f:63:d4:f4:fa:12:f9:
65:12:17:14:55:7e:c4:3c:2c:ea:95:49:9d:65:c0:
08:f8:94:58:6c:e7:d2:ae:c8:82:43:08:9f:5b:5b:
20:70:a7:a0:5f:3d:c1:56:5d:8d:fd:7b:53:7e:81:
d7:b9:dc:6f:87:ac:9a:fa:79:e2:36:6c:ef:83:35:
9c:94:e4:f2:59:43:9c:32:6d:83:92:d2:20:5c:1d:
15:bf:e6:5b:55:bd:d1:3e:0a:f4:7c:b0:0f:c2:42:
4a:8a:26:43:02:38:2b:f0:d4:b3:1c:08:6b:77:c1:
2f:58:f5:8a:3e:07:1f:1a:e7:f4:7c:15:8b:b6:59:
fc:8d:12:26:36:c2:70:32:f5:ee:bc:83:72:2f:f2:
33:48:a6:56:a9:66:ec:9d:f1:7b:e8:0e:99:6b:3a:
1a:ac:50:d3:67:a7:1f:74:0a:6b:9c:4a:ec:88:43:
42:d0:7a:55:0c:2c:57:28:8b:0c:49:97:b4:13:c3:
27:e3:c8:b7:13:66:cd:da:47:1e:24:a6:19:4e:63:
dd:9d:4f:c0:b3:8e:7d:a1:9a:ad:40:9e:f2:c0:df:
c3:1a:cb:d7:08:0c:45:65:9a:77:eb:c4:38:eb:10:
a6:9f:1a:27:8e:dc:9d:99:9f:54:1f:22:59:2e:86:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:74:10:91:7A:31:34:37:08:E1:EB:A1:E3:FF:20:C3:5C:ED:F2:6A
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/U3QQkXoxNDcI4euh4_8gw1zt8mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:65:b7:c8:3d:71:98:ac:ca:3a:38:f1:18:cb:dd:fa:cc:c4:
b7:91:47:d3:c4:48:dd:14:22:f3:70:cc:c7:4f:fe:7b:d0:34:
fc:19:b7:58:eb:91:b4:c8:d8:28:a4:d5:9b:e5:4b:bd:5e:50:
99:b1:5b:ae:c3:97:96:e4:23:a3:15:0b:f9:4d:67:7b:f3:60:
73:55:08:23:82:3f:3c:14:fc:0e:73:ee:4b:24:80:de:3b:a0:
5d:b1:19:55:a5:97:f7:80:c4:b2:c3:82:3f:16:77:aa:51:c3:
f8:5d:66:a5:48:09:da:33:e4:d4:87:fc:77:86:d9:8a:4e:22:
2a:77:b3:0d:00:36:c1:93:12:05:36:87:48:94:93:29:4b:6c:
53:04:39:dd:98:e9:0a:2a:d5:f2:9a:26:af:20:c1:97:bc:66:
fc:b7:b0:e8:3e:bf:95:75:d6:17:80:b1:1a:1c:c2:4c:3d:e3:
71:a2:a7:e9:aa:83:20:03:59:2f:30:9f:b5:e8:9e:70:5f:1e:
89:7e:ec:07:d9:55:30:27:2c:a2:aa:58:8c:a4:c3:b5:9b:47:
76:fe:87:ae:0d:31:87:de:4f:37:b2:f5:dc:47:a4:d4:12:44:
a4:46:e1:f3:d6:fb:6a:cd:ee:6e:c1:e1:b7:90:cb:2c:35:3f:
f5:19:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org