Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/d0WAqQy4wuOxzgKvmb3VSyqRiX8.roa
File: d0WAqQy4wuOxzgKvmb3VSyqRiX8.roa (raw, json)
Hash identifier: bq7LbO76KvK06x1Pm8TaYaUetsPqhgAaKJboVxljYzI=
Subject key identifier: 77:45:80:A9:0C:B8:C2:E3:B1:CE:02:AF:99:BD:D5:4B:2A:91:89:7F
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0184D32E78347D957CAA35F65044A6437086
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/d0WAqQy4wuOxzgKvmb3VSyqRiX8.roa
Signing time: Fri 02 Dec 2022 14:12:28 +0000
ROA not before: Fri 02 Dec 2022 14:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 217.113.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:2e:78:34:7d:95:7c:aa:35:f6:50:44:a6:43:70:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Dec 2 14:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=774580a90cb8c2e3b1ce02af99bdd54b2a91897f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:d2:cb:28:dd:bb:b0:68:5f:c6:cd:02:36:
c7:f7:03:ed:70:f3:9c:54:0d:14:99:73:01:15:d6:
f2:30:b4:62:73:9e:4f:55:9a:51:9b:29:75:8b:f4:
60:67:6d:03:a8:04:ab:da:fe:a1:f9:5f:6a:a6:b9:
e3:31:93:70:51:77:01:e6:11:a3:5c:f2:e8:77:9d:
49:08:36:8c:0c:c2:ef:ff:73:b7:38:df:45:c1:b6:
83:2d:ef:55:80:a4:f0:c1:75:bd:cf:2a:27:a5:5b:
e5:30:64:42:ac:eb:9a:26:66:05:9d:27:8b:c1:00:
1d:ed:22:f0:44:c5:55:f7:bd:bc:2f:3f:89:b0:0c:
77:65:ce:19:44:8d:d8:2f:69:12:ae:0c:2b:d8:fb:
0a:ba:11:06:f8:86:83:66:21:7d:90:18:12:f1:58:
23:0c:04:9f:cc:11:8a:8a:1f:8f:e9:e3:18:31:5d:
e4:5f:42:d8:b0:60:47:a7:d0:58:42:52:a7:ce:bb:
f5:df:d1:9a:4e:3b:72:94:f5:15:3a:e3:cd:e1:5a:
94:64:94:a2:e3:d5:a9:cd:70:e2:5f:56:57:70:14:
15:b0:9e:15:01:6a:16:16:04:28:05:2c:e0:31:19:
be:a2:78:e2:5b:b2:d9:bb:3c:38:07:b6:f4:b5:69:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:45:80:A9:0C:B8:C2:E3:B1:CE:02:AF:99:BD:D5:4B:2A:91:89:7F
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/d0WAqQy4wuOxzgKvmb3VSyqRiX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.18.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:dc:b0:24:50:9f:96:05:56:af:b9:99:e3:b9:5f:73:b4:64:
a4:1b:b8:f4:f0:8b:b9:be:2a:5c:2e:14:f0:e0:f9:4f:69:39:
b5:33:e0:9f:0d:f1:cc:9b:6b:01:70:27:ce:34:2e:19:bb:e2:
f3:d7:a3:e3:c7:cb:83:5f:ec:80:6c:40:79:23:03:6a:97:c8:
5b:8c:15:13:fc:c3:f8:9f:3f:35:4f:27:7f:be:42:44:9c:2a:
81:55:91:ae:65:d5:9d:ba:f4:f8:a8:a5:ae:03:6e:11:ca:a4:
42:e1:ba:22:f3:8f:99:3d:9e:a4:a9:f2:ec:1a:e5:b1:9e:ba:
db:ff:2a:cc:de:4b:db:b0:a9:ce:7b:d3:36:e6:a9:da:a0:97:
c2:68:2a:33:bf:9e:81:49:f1:f4:fd:6d:eb:f9:72:34:ac:39:
cf:01:fb:e6:18:39:f1:82:b6:5d:85:2e:ce:1d:53:de:63:34:
e4:4a:71:2e:67:a8:37:aa:07:4c:4b:a2:67:71:b6:ff:b7:ed:
76:25:2c:28:57:e9:4b:41:95:76:e2:8a:32:a8:06:d8:e5:8c:
ff:89:ec:45:ff:a5:57:a7:c6:1e:c5:11:0d:7e:47:66:5a:f0:
ba:e8:70:70:e3:1e:d9:5b:b8:02:bd:fb:9d:21:2c:c3:f7:0a:
40:67:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org