Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/1R3FRzMFsfgjBHJi4Lx4n-Q9J8A.roa
File: 1R3FRzMFsfgjBHJi4Lx4n-Q9J8A.roa (raw, json)
Hash identifier: ZQm4cUZ6vjc21aZKkM2++JUDtsu7ScRPYshLuIEScdo=
Subject key identifier: D5:1D:C5:47:33:05:B1:F8:23:04:72:62:E0:BC:78:9F:E4:3D:27:C0
Certificate issuer: /CN=871ba47d7bb1246d5b70078372569f94f358fb06
Certificate serial: C05EAF
Authority key identifier: 87:1B:A4:7D:7B:B1:24:6D:5B:70:07:83:72:56:9F:94:F3:58:FB:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxukfXuxJG1bcAeDclaflPNY-wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/1R3FRzMFsfgjBHJi4Lx4n-Q9J8A.roa
Signing time: Sat 01 Jan 2022 12:57:34 +0000
ROA not before: Sat 01 Jan 2022 12:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 217.119.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12607151 (0xc05eaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871ba47d7bb1246d5b70078372569f94f358fb06
Validity
Not Before: Jan 1 12:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d51dc5473305b1f823047262e0bc789fe43d27c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:69:8b:1b:8b:e7:45:74:37:17:88:f6:30:
71:60:d6:bd:b2:3c:2a:57:83:8c:4d:aa:5e:26:63:
d2:e0:15:13:1b:26:e0:f2:c4:e3:e3:fe:2d:f2:ca:
a3:cb:b6:0f:9c:ea:85:c3:63:1e:ab:0a:6c:3f:87:
6d:a6:e0:21:56:6c:78:65:5e:bd:d2:8a:41:90:05:
60:34:b4:09:f2:e8:81:33:d2:9c:41:d3:64:7c:1a:
fd:34:92:73:7f:0e:75:95:9e:e9:82:8d:79:5c:94:
23:7b:67:45:6f:3a:dd:b1:75:d2:7d:e9:68:44:0f:
a1:10:aa:cf:17:ab:9f:a0:7a:2b:1c:da:4a:fd:89:
d3:d0:c8:ad:ba:ec:7f:8b:91:f4:c0:ff:ec:58:b0:
7f:79:91:fe:3d:39:99:42:73:c6:f9:1c:38:00:91:
41:ef:9f:1e:3a:b2:09:f5:5e:de:67:38:cd:cc:ed:
0d:86:f5:d4:6e:a5:97:a1:6b:c9:bf:26:32:45:39:
f9:9d:48:a3:3e:1f:d1:04:45:0d:5a:bc:60:be:8d:
8a:3a:18:a9:a8:98:67:95:45:4b:bf:50:67:3c:4a:
32:19:20:b2:7d:e9:3e:46:17:f0:e4:21:39:2f:40:
c3:8e:d5:92:26:a5:a7:7c:09:20:24:44:7e:2c:a3:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:C5:47:33:05:B1:F8:23:04:72:62:E0:BC:78:9F:E4:3D:27:C0
X509v3 Authority Key Identifier:
keyid:87:1B:A4:7D:7B:B1:24:6D:5B:70:07:83:72:56:9F:94:F3:58:FB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxukfXuxJG1bcAeDclaflPNY-wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/1R3FRzMFsfgjBHJi4Lx4n-Q9J8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/hxukfXuxJG1bcAeDclaflPNY-wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5b:76:7f:6d:d6:8e:97:b5:a4:89:9b:a1:5b:77:2b:6d:0b:
ca:eb:98:1d:c4:8c:a4:35:e2:9a:1a:c3:87:41:86:79:bb:21:
f0:a8:35:fa:d9:32:3b:6f:9d:fd:2f:97:35:25:cb:51:02:f9:
73:1b:46:da:00:87:0a:8f:00:fe:07:ec:ff:79:31:e3:3b:2f:
55:a5:8e:6d:fd:6c:e5:e8:a8:59:1e:12:67:f7:52:09:93:11:
55:73:24:86:17:27:ed:c7:4a:68:6c:f4:23:b1:25:76:de:5e:
07:0b:09:33:71:d6:6c:87:60:3a:2f:16:ad:33:cc:7b:be:75:
fc:dc:f9:2b:df:36:8a:e2:8d:4b:30:74:58:58:9b:6e:10:0b:
7b:f8:f8:18:c7:d4:da:68:43:e7:21:a6:b4:79:22:b0:ec:b3:
14:64:06:9b:ca:a2:45:b8:80:a0:b2:7c:e3:26:2a:78:64:f1:
d9:28:d3:20:1f:02:a3:78:e0:28:72:b4:58:48:9f:8b:59:84:
5e:5f:db:7c:b1:3a:70:a5:63:d0:3d:4d:23:e5:99:65:d0:05:
81:20:3e:3d:08:f3:62:26:43:66:c5:c7:64:43:92:79:a7:ee:
23:51:f3:64:98:eb:5b:dc:39:a3:47:2c:42:74:30:f4:3d:a6:
3c:05:ea:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:38 2023 by rpki-client on console-fra.rpki-client.org