Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/vDVtOYrvrGzg_DoM83Ih5ZC7H50.roa
File: vDVtOYrvrGzg_DoM83Ih5ZC7H50.roa (raw, json)
Hash identifier: aY13Nl2B3biOeFphCntWp61O6FDEofucUfUweZbWAeU=
Subject key identifier: BC:35:6D:39:8A:EF:AC:6C:E0:FC:3A:0C:F3:72:21:E5:90:BB:1F:9D
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0182DEC0BD49036C6201B643602CA96F1038
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/vDVtOYrvrGzg_DoM83Ih5ZC7H50.roa
Signing time: Sat 27 Aug 2022 10:02:29 +0000
ROA not before: Sat 27 Aug 2022 10:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64399
IP address blocks: 212.16.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:de:c0:bd:49:03:6c:62:01:b6:43:60:2c:a9:6f:10:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Aug 27 10:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc356d398aefac6ce0fc3a0cf37221e590bb1f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:1b:e7:2f:e6:75:28:6e:bc:4c:77:ab:ef:
af:7d:40:9d:64:e4:d0:8f:75:0e:49:f7:76:28:c9:
c8:1a:a7:92:72:ad:81:ef:95:16:a5:56:bc:94:80:
d1:20:f1:e7:3c:de:f9:68:02:41:25:91:74:eb:df:
e5:34:d6:0c:20:ea:cb:1d:31:6e:6d:bd:c2:fb:84:
8f:2a:e7:d7:45:e6:6e:e1:77:8b:ed:a7:d9:14:74:
65:cd:e6:6d:68:e1:47:ba:ee:e6:ed:df:bd:76:12:
1b:2f:f2:da:62:14:c7:b6:91:b3:4d:47:6f:10:b1:
80:70:e1:51:1b:65:13:25:99:57:80:e7:64:73:d9:
d8:97:ab:4e:fc:a1:9b:32:08:fb:7a:fc:74:1a:c8:
e8:f8:a7:0d:58:63:f1:6c:67:6d:f8:50:49:47:12:
2e:28:f3:98:ad:fc:cb:87:fe:ad:02:bf:3a:41:cd:
c5:5b:60:b0:d6:6c:79:0f:56:78:67:e7:1e:f4:f5:
e5:51:db:8b:03:a5:33:8d:5c:65:28:63:18:1b:26:
8c:88:51:75:bf:67:de:91:a2:c6:91:50:71:d9:06:
7a:5e:a7:e0:b7:ea:65:5b:36:c8:40:72:f2:d4:cf:
c8:6a:1c:4c:4c:45:be:d9:14:8d:45:0e:fc:0b:f8:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:6D:39:8A:EF:AC:6C:E0:FC:3A:0C:F3:72:21:E5:90:BB:1F:9D
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/vDVtOYrvrGzg_DoM83Ih5ZC7H50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.73.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:3a:12:fa:4a:98:84:f0:f8:9a:65:73:a0:fc:98:2c:0c:81:
50:a2:5d:8d:00:90:0c:04:59:1d:af:fe:01:fe:b0:d1:e3:00:
d5:91:4f:d3:f0:c3:60:02:6b:af:f8:64:88:0e:e5:0c:15:8b:
f9:e9:9c:b4:20:86:8d:74:0a:c2:b0:c1:cd:d1:97:b6:69:ed:
7d:66:0e:87:3f:d0:2c:f2:4d:a7:b4:8f:c2:e2:59:80:df:f0:
e6:66:d6:bb:fa:19:6c:4c:8e:2d:db:24:82:0b:17:e7:50:72:
7c:b9:2e:0a:a1:8e:04:6c:0b:f1:8e:e2:84:e8:2f:bb:7c:5d:
60:d4:f2:6b:ba:31:f6:ae:42:ab:4c:3f:2a:39:b5:4c:97:f2:
fd:32:4a:a0:e3:06:e2:17:10:bb:0a:eb:ee:39:f2:13:18:4b:
37:a7:41:4b:52:cb:a2:c1:99:2f:c4:c2:06:0c:a9:44:d0:c4:
60:0a:9a:d8:2e:9d:d3:12:40:86:cf:6b:c7:08:f3:25:72:5e:
02:82:9f:d2:a7:76:21:a3:24:5a:52:a3:86:ca:4c:e4:e4:22:
72:0b:2d:f1:fc:07:3f:c3:65:18:4d:ad:b5:8d:a1:2f:fe:0d:
8b:0b:b1:48:6f:4f:29:89:f6:f0:3b:41:0d:ad:7f:cc:ec:48:
a2:f2:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:58 2023 by rpki-client on console-fra.rpki-client.org