Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/xACiChIGhTztr11vlJoJWfdqGOI.roa
File: xACiChIGhTztr11vlJoJWfdqGOI.roa (raw, json)
Hash identifier: p1LbNOpdbIFgWUjzX8aSXxDWeNYPcCDLZWlKu0FgxQo=
Subject key identifier: C4:00:A2:0A:12:06:85:3C:ED:AF:5D:6F:94:9A:09:59:F7:6A:18:E2
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 0B59A4
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/xACiChIGhTztr11vlJoJWfdqGOI.roa
Signing time: Sun 30 Jan 2022 08:01:43 +0000
ROA not before: Sun 30 Jan 2022 08:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.143.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743844 (0xb59a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 30 08:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c400a20a1206853cedaf5d6f949a0959f76a18e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:54:a5:a6:f0:3b:cb:9e:00:4e:27:b6:02:
81:a9:c7:7e:28:7a:ce:7d:56:21:8a:6c:31:2a:3f:
c1:34:fe:06:da:8f:f9:80:ad:54:26:36:e8:73:87:
09:d9:e2:ae:bd:ad:59:5d:70:39:92:f6:02:7d:8e:
f2:a1:8a:a7:24:c1:9d:af:e4:9a:e4:0a:6c:12:0a:
1f:1e:e9:83:2b:18:91:a8:0d:7e:eb:de:0b:e2:c0:
64:4d:e1:b6:15:81:d4:a8:2a:b3:e5:2f:13:b4:36:
36:fe:31:b4:88:12:e9:78:3e:26:d6:39:41:b1:a8:
41:e9:27:c7:eb:f7:5a:0f:27:be:e2:0e:27:79:09:
c2:2e:90:da:de:93:03:68:cf:ee:f4:c1:9a:5e:f2:
2f:d7:75:52:4d:ab:af:76:3f:10:65:c5:d2:55:52:
00:32:82:84:5e:96:f9:a1:76:31:53:f6:f7:97:2c:
b0:63:78:25:44:09:ec:10:53:65:52:f4:4a:c1:64:
94:a3:72:55:8a:57:02:f4:56:c0:2e:81:66:20:f6:
3c:ea:cd:57:f5:b2:42:f6:79:4b:81:51:30:38:5e:
4f:33:80:c1:c0:f0:e5:63:fe:d3:7a:91:74:95:a6:
4c:4f:92:5a:67:f5:b9:19:24:5f:09:06:86:69:a0:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:00:A2:0A:12:06:85:3C:ED:AF:5D:6F:94:9A:09:59:F7:6A:18:E2
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/xACiChIGhTztr11vlJoJWfdqGOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.225.0/24
Signature Algorithm: sha256WithRSAEncryption
09:90:e0:81:80:c3:82:0d:40:97:d6:75:0b:15:62:4e:c2:04:
4e:ed:1c:57:bf:f1:21:70:98:51:1e:28:19:64:9d:6b:f0:1d:
20:e3:7b:4f:65:b3:e2:e6:aa:09:3c:14:9d:8c:af:01:f6:59:
3a:d3:a1:50:a0:40:9d:67:81:fc:cf:11:bb:0b:1b:7c:af:43:
f0:dd:6a:25:f4:e4:56:f1:a1:0e:f6:ca:0e:71:62:99:66:6b:
4f:7e:44:79:8b:96:e5:46:53:c5:51:26:98:dc:5f:59:81:68:
41:cc:0d:14:0a:09:cc:43:ab:90:9f:a7:8a:fb:b3:fc:c6:c4:
c4:ed:37:1c:e3:8c:33:6b:21:6c:d7:db:d6:ed:0b:14:3d:85:
6c:5b:e4:b1:82:4a:c1:50:93:c0:ff:eb:02:cc:b6:23:d1:28:
6c:66:c3:7f:f4:05:1b:81:04:69:1e:c8:5c:a5:ed:d8:8a:3a:
2a:5d:5c:a0:e0:b3:8e:25:37:1a:ab:3d:81:13:15:e2:a7:84:
06:a6:55:1d:81:c1:ee:6f:a4:8c:42:b0:fd:9e:64:9b:37:e2:
db:fb:ec:c9:4a:45:35:c6:4f:6e:4c:e3:51:89:63:ec:5d:8f:
5e:55:c3:83:07:d3:cf:02:86:5e:c4:49:ef:fc:10:3f:29:06:
69:d9:33:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:47 2023 by rpki-client on console-ams.rpki-client.org