Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/0U7VNSlD4ThY-v24VKUyYL8En8o.roa
File: 0U7VNSlD4ThY-v24VKUyYL8En8o.roa (raw, json)
Hash identifier: lzq/DSQdBnnm+J5TzUOYhhDdcoy4zkBEfI3sVdrZRWc=
Subject key identifier: D1:4E:D5:35:29:43:E1:38:58:FA:FD:B8:54:A5:32:60:BF:04:9F:CA
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E1CFB68
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/0U7VNSlD4ThY-v24VKUyYL8En8o.roa
Signing time: Sat 01 Jan 2022 03:02:56 +0000
ROA not before: Sat 01 Jan 2022 03:02:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40934
IP address blocks: 82.98.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236780392 (0xe1cfb68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d14ed5352943e13858fafdb854a53260bf049fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:f0:05:91:3c:ae:81:24:d2:32:55:1b:c8:
23:f6:6e:a4:a1:d2:c9:ca:0b:34:86:b4:63:4b:68:
6a:a2:82:23:8f:49:0c:90:b8:4f:48:62:42:fd:f8:
f4:0c:49:8a:c5:74:18:7f:72:b3:0f:79:13:d7:46:
49:6b:e4:ee:13:88:0f:8f:a4:3f:a9:19:82:da:c1:
f0:9a:b3:39:56:f8:0d:1c:51:fe:85:7c:b4:f3:24:
94:45:7f:e8:df:e5:2a:49:ff:19:83:3f:19:3e:ab:
04:77:68:ca:14:f8:75:e7:c1:87:93:75:51:c6:b1:
05:5d:9f:fb:8e:b3:3f:7f:5c:07:f5:3f:64:02:70:
a8:28:fa:99:ff:d6:8d:b7:d7:df:f6:d1:51:09:3b:
89:f2:5a:54:0e:8f:37:fa:99:13:82:b3:48:ed:90:
f1:96:a0:c0:ae:60:e8:f0:28:38:5e:30:41:ca:e3:
a6:06:62:02:08:cd:d2:67:af:6e:93:2d:7c:99:4a:
11:d8:b6:88:10:f5:54:74:42:f3:98:63:f7:d4:90:
a1:40:47:29:e1:f8:62:13:b6:01:0d:da:9c:31:19:
d2:0a:b9:d5:b1:72:d0:37:03:58:64:a5:f8:0c:9e:
6d:4b:c9:0c:ab:8d:95:36:2b:1a:7c:50:06:ba:f0:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:D5:35:29:43:E1:38:58:FA:FD:B8:54:A5:32:60:BF:04:9F:CA
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/0U7VNSlD4ThY-v24VKUyYL8En8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:60:94:ac:be:a8:95:10:e4:2d:a3:63:dc:65:18:01:d4:2c:
b5:8b:92:7e:2d:00:da:77:9d:d9:1f:cb:a0:76:f0:1a:a3:fd:
6a:db:72:8b:55:b9:35:46:59:22:59:7d:43:e4:23:57:80:20:
12:f4:3d:a9:0f:0c:a1:49:f5:b3:a1:5c:aa:fa:eb:aa:4e:f5:
07:3d:ec:61:3c:78:dd:9b:a2:1b:98:53:45:14:fa:f5:ec:93:
0f:10:35:46:69:0f:88:cf:db:02:ae:d3:b8:71:db:2d:9b:ae:
08:92:ec:45:f2:66:d4:9d:60:42:3c:b8:ce:4f:7b:0b:28:ba:
cd:73:00:ee:aa:d4:39:83:7e:3c:34:32:fb:46:3b:12:af:82:
af:07:f3:d3:48:fc:08:0b:f2:3c:ef:c4:74:ef:da:93:93:55:
cc:d1:86:fa:58:2a:36:77:17:0c:08:89:9d:f1:13:62:fe:3f:
f7:a5:0e:ef:b8:7b:58:ac:df:45:29:5e:45:9c:45:07:5e:14:
f1:85:5d:61:42:18:ca:7a:cf:f4:76:30:e8:b1:40:35:7f:81:
fd:21:0c:1b:35:63:a9:55:81:4e:29:11:39:d4:82:0b:83:b5:
b8:4c:bb:5f:78:a7:05:45:1f:f6:3d:79:2b:7f:c3:f3:72:a6:
5b:5e:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:45 2023 by rpki-client on console-ams.rpki-client.org