Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/oTvY7hnw8ZVixGgkhzh-Dh4mQ9g.roa
File: oTvY7hnw8ZVixGgkhzh-Dh4mQ9g.roa (raw, json)
Hash identifier: XYwYvTqvXpePoGCcXD5B8DEuaO4CWYTpjE5OxIFTBPI=
Subject key identifier: A1:3B:D8:EE:19:F0:F1:95:62:C4:68:24:87:38:7E:0E:1E:26:43:D8
Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Certificate serial: 16CAEEB6
Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/oTvY7hnw8ZVixGgkhzh-Dh4mQ9g.roa
Signing time: Sat 01 Jan 2022 07:03:10 +0000
ROA not before: Sat 01 Jan 2022 07:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 217.28.163.0/24 maxlen: 24
193.32.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382398134 (0x16caeeb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Validity
Not Before: Jan 1 07:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a13bd8ee19f0f19562c4682487387e0e1e2643d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:3e:cc:60:55:dc:a6:92:24:00:eb:16:40:
0f:a6:08:54:d0:3b:95:c2:5f:df:72:59:1c:d3:27:
66:14:26:b0:6f:8c:ff:b8:d5:8b:a0:f0:a9:97:3f:
cb:de:7b:3b:b4:b9:dd:3a:3a:03:c4:2e:c1:a6:fd:
45:bc:3c:ad:72:63:99:a5:41:fe:44:dc:49:85:27:
79:67:7d:f7:c7:46:a9:06:3a:62:13:5e:50:cb:b6:
79:be:af:00:11:61:8f:4a:f0:b7:9c:6f:c9:6c:0d:
77:e6:d0:f5:1c:1c:87:a5:18:98:c0:33:eb:41:c0:
1c:9e:50:81:54:57:f2:f5:f0:be:42:a4:7e:96:bb:
a4:b7:6f:9f:74:65:b2:a6:f8:71:f6:01:fa:f9:f7:
e5:25:04:0c:e6:9e:7b:c9:95:df:5f:99:c8:92:6a:
de:0b:28:69:4f:e5:0f:13:1a:a6:cf:f8:f4:21:4c:
6d:c5:92:fc:73:0a:99:73:51:3a:61:aa:a7:2c:26:
4f:0b:66:3b:e2:82:5e:d0:79:a5:51:f1:70:cc:1e:
57:1e:f0:cf:d5:bd:d7:ab:fb:75:df:3a:c0:a0:0c:
88:3f:b7:ed:b6:1b:aa:f4:bc:fc:ee:3e:e0:e1:7b:
4b:dc:c2:5c:a9:f7:d7:a3:16:5e:5a:ef:3b:c8:7b:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:D8:EE:19:F0:F1:95:62:C4:68:24:87:38:7E:0E:1E:26:43:D8
X509v3 Authority Key Identifier:
keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/oTvY7hnw8ZVixGgkhzh-Dh4mQ9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.244.0/24
217.28.163.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8b:ad:d7:1c:36:48:8e:a9:68:5d:91:0c:92:58:0d:e7:a0:
34:73:94:9b:39:f1:4e:85:1d:10:6f:60:20:b7:84:51:87:20:
bd:77:93:a0:51:c5:dc:ca:8f:ba:44:87:f7:04:b5:4a:5a:66:
9c:f5:d0:06:37:d9:83:1e:bc:56:92:a1:47:e3:27:c6:4e:52:
a7:f6:d1:40:23:c1:8c:61:73:93:0a:ca:78:89:14:6e:97:84:
17:96:0a:41:26:21:56:72:38:8b:a4:67:ab:27:50:29:68:f5:
4d:86:a6:90:d7:a1:7b:88:31:7f:72:66:63:7d:c2:d0:a2:dc:
9c:f5:b8:34:40:a2:89:fd:79:45:01:c2:2c:6c:f9:7a:38:ae:
93:7a:c1:5b:60:88:5b:84:61:d6:d5:d5:0f:29:d8:d2:e7:7d:
44:b6:52:49:2c:d0:02:96:74:23:eb:27:f3:24:63:c7:8b:62:
cf:45:27:88:dd:19:be:fa:79:c8:16:60:16:e1:db:fe:5f:a9:
71:da:94:34:0f:86:e5:29:6d:63:3b:77:05:5d:ad:27:31:9a:
a8:a0:55:06:b9:5d:1d:26:50:72:a4:ea:2b:62:87:bd:df:6e:
7d:59:9c:3b:45:99:02:5f:10:b0:a3:bc:cb:e7:40:1e:87:0f:
3c:db:62:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:25 2023 by rpki-client on console-ams.rpki-client.org