Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/fWkJXfkxrQfSToLY9OgfZajjYpU.roa
File: fWkJXfkxrQfSToLY9OgfZajjYpU.roa (raw, json)
Hash identifier: C2R0DjnxM9442h3K69OEG6h9fRjz78CEY1XzQKjbOw8=
Subject key identifier: 7D:69:09:5D:F9:31:AD:07:D2:4E:82:D8:F4:E8:1F:65:A8:E3:62:95
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 04E6E1FF
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/fWkJXfkxrQfSToLY9OgfZajjYpU.roa
Signing time: Sat 01 Jan 2022 02:55:24 +0000
ROA not before: Sat 01 Jan 2022 02:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202745
IP address blocks: 144.2.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82239999 (0x4e6e1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 1 02:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d69095df931ad07d24e82d8f4e81f65a8e36295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:c7:d7:b9:a5:cb:80:9c:43:6b:fc:0c:9f:
27:21:13:da:87:80:b4:19:9e:81:b9:34:fc:5e:bf:
40:49:b3:34:f7:e1:62:0d:5a:88:5b:32:af:21:74:
0c:fe:bc:ac:e1:e0:15:bc:30:4f:3f:6c:1a:1f:dc:
33:45:9b:f0:39:f3:94:d5:26:3d:e2:ab:9f:cc:8e:
4f:45:ae:bc:88:04:48:09:c6:1a:77:ac:07:5d:89:
4f:2e:6b:1e:35:4a:d1:14:fb:0f:84:ca:08:c2:4e:
67:4a:34:46:90:e5:43:86:e8:72:fd:c0:95:0a:5d:
99:9c:24:99:f0:43:8d:d7:15:da:bb:fa:0f:70:4f:
37:95:d0:9d:6f:76:ca:57:f2:1f:15:08:af:3d:a2:
85:bf:67:90:e2:f7:7a:17:cf:72:50:1d:ce:de:47:
6a:84:58:33:38:b6:07:e0:fc:3c:8a:0f:ac:50:f9:
ef:f1:f3:59:66:4b:da:73:b7:4d:33:48:62:a1:dc:
9f:53:f9:e3:84:a2:06:d2:92:0a:36:e5:d1:67:26:
76:21:4f:5e:a5:55:8d:7d:7e:ed:1b:8e:38:e2:d9:
80:e3:20:86:26:3b:ad:21:26:81:ce:ac:88:40:3a:
4f:85:07:88:c6:d2:65:3b:9d:f8:4a:19:7b:1f:9d:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:69:09:5D:F9:31:AD:07:D2:4E:82:D8:F4:E8:1F:65:A8:E3:62:95
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/fWkJXfkxrQfSToLY9OgfZajjYpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.223.0/24
Signature Algorithm: sha256WithRSAEncryption
11:75:78:12:c9:a6:3b:de:a2:88:dc:fe:65:6e:5b:e4:24:43:
a0:1a:95:1d:f2:75:0c:08:a2:f0:b8:6e:b1:21:cd:c1:01:4a:
8e:c0:21:da:05:b6:bf:96:7f:73:bb:5c:8b:d7:72:bb:90:27:
8b:a9:eb:10:2e:6b:5f:82:9d:43:17:22:a7:b3:e1:e5:9d:c1:
55:32:68:b9:ff:c9:c3:a4:73:1d:ee:00:d7:1f:5d:2d:50:66:
91:27:3e:7b:59:b5:21:6f:8c:77:a7:55:f7:0c:41:5a:7d:1a:
82:a9:4b:4b:a3:a0:68:0c:4f:d0:4f:d0:5e:ca:6a:66:86:e3:
60:c2:a0:eb:90:31:58:28:df:29:20:39:c6:2f:42:78:63:df:
fe:d9:07:37:91:eb:a3:d4:e9:6f:99:ab:2d:e1:37:31:92:78:
fe:ec:a0:27:f5:da:51:a1:59:e5:76:16:23:ba:40:76:8f:98:
8f:42:94:9d:ef:71:6f:91:4b:54:78:51:ed:7c:25:10:b7:14:
88:47:bf:92:6a:d1:66:15:d2:61:cf:d3:d9:07:28:c5:87:d4:
10:f1:d0:e1:a0:8f:c8:0c:28:e0:f0:9f:06:86:b7:83:e3:80:
b9:b8:f6:e1:a0:32:ff:66:16:23:e0:c9:9b:b4:73:4f:e2:ef:
c9:df:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org