Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ILi5I18YdmheBJLWxCeKpVpjy1s.roa
File: ILi5I18YdmheBJLWxCeKpVpjy1s.roa (raw, json)
Hash identifier: d9oYpDgBg40teBiZBMkQE9JqdFVEWi2ha7S72N7Dcro=
Subject key identifier: 20:B8:B9:23:5F:18:76:68:5E:04:92:D6:C4:27:8A:A5:5A:63:CB:5B
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E19CC7A
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ILi5I18YdmheBJLWxCeKpVpjy1s.roa
Signing time: Sat 01 Jan 2022 03:02:53 +0000
ROA not before: Sat 01 Jan 2022 03:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22104
IP address blocks: 213.161.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236571770 (0xe19cc7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20b8b9235f1876685e0492d6c4278aa55a63cb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:98:75:d5:33:d0:97:d3:24:ef:48:db:3c:
d7:d6:08:98:36:0c:22:28:fb:b7:73:ba:4b:0f:31:
ca:b5:f6:30:c3:d4:a4:7c:8f:1a:62:98:4c:28:72:
85:62:2e:36:d7:19:4e:57:28:df:3c:71:1f:dc:a7:
92:86:09:72:ae:91:11:aa:ea:39:aa:f7:4d:14:22:
68:5d:3d:59:84:cc:e9:a6:f7:7b:98:30:e1:38:ce:
2b:a6:d5:a8:68:c4:dc:d3:2b:31:8c:e7:a5:6d:5d:
6d:cb:f0:c8:78:da:cb:c3:c1:f0:6f:05:5f:9a:f1:
b8:bc:23:68:82:e2:b6:a4:68:b5:bb:58:b4:1a:59:
91:ce:e3:0c:97:32:e7:01:59:7b:0d:49:15:8d:ae:
f8:d6:00:7f:da:8a:04:f9:b9:fe:13:63:ae:e8:0d:
ef:0b:09:83:ec:01:30:42:e9:0f:de:e1:23:76:3e:
e3:4b:86:48:a9:4c:f2:31:13:09:f8:f2:d1:88:fc:
0c:fb:48:f4:dc:1e:39:13:df:73:96:75:aa:cc:cd:
ea:c8:d0:5f:b2:4b:87:27:95:32:af:4c:2e:d1:df:
46:63:4c:90:58:ff:d8:f6:80:fe:45:82:ac:8b:9a:
4f:f5:aa:63:d7:c4:05:74:4c:62:8a:04:18:b9:e5:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B8:B9:23:5F:18:76:68:5E:04:92:D6:C4:27:8A:A5:5A:63:CB:5B
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ILi5I18YdmheBJLWxCeKpVpjy1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.161.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:80:26:c3:a0:76:29:75:0a:a6:ec:b7:44:6a:20:17:b8:b3:
7a:6b:bc:37:bb:89:37:bc:80:49:f5:f8:e9:17:05:bc:54:db:
77:3c:29:1a:a0:57:84:73:99:0c:f4:44:c2:ab:15:db:5e:18:
81:29:79:08:a3:bb:95:6b:1a:6c:70:34:9a:64:f0:f5:b6:c4:
d1:17:d2:b6:97:a3:dc:3d:4a:01:bd:1b:50:80:49:85:a1:cb:
5f:06:05:cb:aa:b6:74:ba:4a:46:6c:f4:6a:ea:84:38:a4:ae:
af:c6:dd:c9:a7:d8:a7:83:73:b9:38:86:7c:dd:3d:2d:03:d7:
16:4c:49:6e:d0:f8:94:d1:24:1f:e4:e1:f5:4e:8d:34:9e:d7:
46:51:80:a6:f0:04:72:68:7b:7b:eb:18:2c:ee:34:47:68:78:
ec:5c:b7:56:c4:fd:f7:84:d4:19:29:e0:bb:91:71:93:64:6f:
5a:d3:58:76:a6:65:7d:01:5a:45:a8:1d:25:1a:0d:4c:97:6e:
d8:fa:46:05:34:9a:a9:60:60:c8:a3:92:1a:cc:e3:d7:34:dc:
e9:43:ad:a7:f4:17:61:a2:b5:b2:f3:0e:7a:63:f6:72:5f:b3:
13:83:27:38:25:01:90:8b:14:d2:2d:c2:a2:16:5a:85:9b:f7:
9f:65:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:45 2023 by rpki-client on console-ams.rpki-client.org