Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/o-xns1aLOjR824R8R77H7YwOyys.roa
File: o-xns1aLOjR824R8R77H7YwOyys.roa (raw, json)
Hash identifier: lJU5ACaO4WyX+ZhaI05x9b1QjP5TCYnMqpC9P7dxdoo=
Subject key identifier: A3:EC:67:B3:56:8B:3A:34:7C:DB:84:7C:47:BE:C7:ED:8C:0E:CB:2B
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 0182D666FAA64260EA429F2F4B2399BBC493
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/o-xns1aLOjR824R8R77H7YwOyys.roa
Signing time: Thu 25 Aug 2022 19:07:29 +0000
ROA not before: Thu 25 Aug 2022 19:07:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49801
IP address blocks: 194.34.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d6:66:fa:a6:42:60:ea:42:9f:2f:4b:23:99:bb:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Aug 25 19:07:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3ec67b3568b3a347cdb847c47bec7ed8c0ecb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:57:62:49:a8:50:2a:24:df:9d:e4:6a:98:
42:f6:9a:cc:fc:ad:62:ae:ab:6a:da:3a:e7:ec:19:
f6:8c:c2:b6:40:0b:62:b5:31:10:4e:9a:5b:d0:ad:
79:5f:37:7d:80:95:57:c3:b0:bb:ca:0d:78:e1:28:
e4:9e:2c:fa:17:7f:e4:99:1b:20:76:e9:7b:c6:2d:
b9:0b:41:e8:51:a3:67:d9:ea:6c:be:f5:d3:8a:4e:
9f:31:35:fc:1d:a8:be:64:fb:17:e3:07:8b:7c:ee:
d1:10:c6:bb:96:9d:fe:98:ca:83:a3:5b:f6:02:cb:
5f:c1:d0:fb:e7:d6:c7:f7:07:20:af:cd:5b:b9:21:
76:9c:f0:71:df:f6:15:6e:d3:8d:8b:0b:3b:bd:1d:
97:1a:e5:62:09:1b:e7:11:18:85:e9:df:f7:4d:f9:
9a:f3:b6:5e:00:76:d9:37:38:f5:24:c7:bc:0b:39:
05:43:02:e1:92:91:fe:a0:b7:3d:5e:3c:f1:62:77:
48:b2:42:1c:f9:5f:c9:59:a3:7a:66:5f:67:64:3d:
63:6a:f8:1b:f4:76:2f:bc:1e:f7:eb:85:11:49:f3:
47:e9:48:fb:a2:a0:d0:80:57:03:aa:80:66:7f:4b:
35:98:86:e3:b9:a6:3b:69:6a:43:87:e3:03:7c:db:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EC:67:B3:56:8B:3A:34:7C:DB:84:7C:47:BE:C7:ED:8C:0E:CB:2B
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/o-xns1aLOjR824R8R77H7YwOyys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.161.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:14:9f:b7:0f:0a:06:a5:f5:34:11:40:f9:80:cb:4f:f5:c1:
11:da:69:fc:73:fb:da:c9:1f:f1:64:a9:69:2e:15:d8:21:aa:
8c:f0:60:35:32:82:16:72:d6:86:d2:86:48:33:98:8b:6b:6c:
22:99:49:0d:4f:d7:27:fe:1f:cb:78:3f:28:60:6a:1d:c0:57:
e6:8c:03:87:17:12:9b:e0:3a:33:b6:33:cb:0c:4f:8a:07:66:
3a:b2:88:92:c9:9a:90:06:ee:ce:4c:42:40:a1:31:76:f4:7f:
30:0e:a5:f0:62:3a:93:f1:9e:6d:a9:f5:35:29:71:bd:dc:a3:
b5:81:62:2f:81:69:c1:2f:92:3b:b2:e8:f6:f1:ec:38:d4:7c:
0a:a2:4b:da:04:1f:c9:57:d4:9b:e5:e7:85:10:a0:2b:34:a4:
14:b3:08:92:f9:78:8c:44:19:34:05:4d:6e:44:36:4e:cc:01:
6e:e3:58:4c:17:70:1e:6e:6f:32:c9:2d:45:9d:f9:e6:d4:fd:
28:35:c7:1f:97:fa:91:91:2b:ef:d8:a9:60:90:1f:07:32:6b:
17:0e:a8:cf:db:a1:56:ee:aa:16:3f:83:16:ac:6a:21:63:e3:
04:f5:f1:9e:fa:c0:5a:1f:d5:6c:f6:ba:60:96:c0:7a:83:6c:
12:42:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:35 2023 by rpki-client on console-ams.rpki-client.org